Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: llMTTL9AwH5Gi4myaavw4WOYg8+3/X5pl/x1g+QNno0=
Subject key identifier: 59:12:05:05:65:14:95:87:CF:63:9B:B9:BB:27:24:1B:39:6B:45:D4
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 01964A7CC0D3101F845446D6CF51FF424703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 063C
Signing time: Fri 18 Apr 2025 20:00:11 +0000
Manifest this update: Fri 18 Apr 2025 20:00:11 +0000
Manifest next update: Sat 19 Apr 2025 20:00:11 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: 7q8hFUfLp2bs6g5Ev7MbMkPByc7bURG0sMZrhkhMhUg=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:c0:d3:10:1f:84:54:46:d6:cf:51:ff:42:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Apr 18 20:00:11 2025 GMT
Not After : Apr 19 20:00:11 2025 GMT
Subject: CN=5912050565149587cf639bb9bb27241b396b45d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:c5:4c:88:9b:7b:29:43:dc:ef:e7:4c:01:
b7:11:cc:f3:84:1e:bf:88:f5:76:9b:1b:e7:e5:0c:
b0:1f:7c:9d:48:7a:d1:c9:9c:3f:40:e7:05:99:97:
99:e4:f4:70:2a:ff:f5:9a:c5:7a:58:a6:c5:a9:02:
33:56:dc:c4:a5:1b:dc:9b:41:ae:4b:82:7f:b7:d5:
6d:be:cc:0e:28:9f:36:3a:51:8d:69:30:b0:3f:b9:
81:ff:d6:39:bd:15:bd:b9:75:9d:ed:65:43:8b:9c:
51:3f:f3:72:08:1c:d6:b9:dd:48:ca:5b:9a:f9:15:
55:ff:ac:e6:f8:14:1c:ec:4c:b4:e4:e5:c3:29:44:
63:1c:89:52:9c:d6:a1:5c:7f:fc:84:b8:36:3f:b8:
45:95:92:11:a2:0a:b8:1f:5a:a5:0a:e3:e2:f1:bb:
37:82:9f:52:32:b1:05:9f:52:fb:b3:a9:84:14:94:
da:4b:85:a3:46:83:58:31:8d:f1:8d:cb:72:78:75:
1a:20:22:08:6a:73:58:aa:76:f1:b0:2e:19:39:fc:
0f:18:55:0e:8a:e2:4f:9e:21:6d:b7:ae:1b:b3:92:
03:bc:ee:77:08:05:31:7c:80:16:7f:08:40:89:a7:
02:9b:6a:79:3f:80:a5:08:4d:1b:94:63:8c:6b:05:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:05:05:65:14:95:87:CF:63:9B:B9:BB:27:24:1B:39:6B:45:D4
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:05:96:c1:fc:fc:5f:5d:99:85:17:7b:9d:de:33:9e:30:
c5:87:07:bb:b5:20:80:bf:10:e9:de:49:b0:e4:f4:2d:e2:48:
40:15:ba:e0:5f:05:ff:6c:46:a3:37:bd:b1:3f:b3:5c:a5:26:
26:8f:7e:f8:75:dd:8e:1f:dd:40:9b:eb:9c:4e:a2:6c:b4:37:
d5:65:c2:f4:ac:ca:ce:49:44:83:58:35:4c:a9:97:dc:b4:3e:
20:11:d8:4b:86:f8:6e:6c:a0:bf:19:26:d6:0e:5b:40:62:07:
ad:a3:4a:36:18:2a:4a:66:d2:d1:fd:d6:af:b1:6f:6d:7b:59:
de:8d:11:a1:db:16:16:84:3e:51:e3:44:1f:e9:0c:31:eb:17:
77:3e:0c:af:77:a9:4f:ec:08:87:3c:b7:9a:6f:2c:81:f4:81:
c0:14:49:07:ec:f8:d3:e5:4e:11:67:48:cf:f0:d5:d6:17:33:
cf:9c:8a:c1:a1:b8:a9:2f:df:0a:13:d9:84:50:78:ea:61:c5:
51:59:11:26:0a:be:33:17:03:c1:5b:d6:89:45:af:3a:e2:3b:
ab:e3:9c:2c:03:83:70:9f:f0:83:73:02:ed:f2:d3:db:f0:21:
1f:e6:3f:12:9e:ab:f1:39:ce:1f:61:bc:77:e2:da:f8:3f:45:
47:53:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:33 2025 by rpki-client