Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: cfgaLDJ/bvbApMBDLI1tN5UoKeXx05hEL8jOV134htE=
Subject key identifier: A9:53:D2:90:EA:13:8A:6C:56:5B:04:F6:72:FF:D3:41:CC:A0:17:20
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019649A15F5F865E4991CB07C64343D93696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1223
Signing time: Fri 18 Apr 2025 16:00:34 +0000
Manifest this update: Fri 18 Apr 2025 16:00:34 +0000
Manifest next update: Sat 19 Apr 2025 16:00:34 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: uf+9h5Mvj5mi+E9Pg75QCofWM+q1+kFnRMGD1JIRkzY=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:5f:5f:86:5e:49:91:cb:07:c6:43:43:d9:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Apr 18 16:00:34 2025 GMT
Not After : Apr 19 16:00:34 2025 GMT
Subject: CN=a953d290ea138a6c565b04f672ffd341cca01720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:50:f4:11:3c:2d:c3:c3:f7:9d:4f:05:3e:
b1:f5:19:4d:cd:e2:01:4a:9a:b3:99:ce:d4:5e:b7:
da:b2:bc:d1:b6:53:25:19:82:59:be:c9:51:10:89:
ba:28:d7:23:85:4c:f7:ba:7f:62:b4:f5:8c:08:bc:
fb:16:25:31:1f:a5:b3:f0:b1:d2:4c:31:2b:3b:95:
c8:cb:49:c0:28:6a:a2:83:0d:70:4c:50:10:fe:80:
69:88:7e:9b:fc:52:e6:b1:c8:9e:cd:92:91:36:4b:
10:29:2d:e2:4f:d8:25:64:36:7b:4c:f4:cf:56:cd:
13:f8:47:9d:a6:48:56:a4:0b:ea:6c:b2:89:01:ca:
0c:29:0b:c7:15:a9:e5:19:e0:41:87:cc:6d:fb:fc:
2c:06:41:4e:d9:0e:9a:e9:95:51:b5:1f:18:fd:e8:
20:74:64:d5:59:95:55:54:78:37:be:f1:b1:eb:b6:
51:b4:3c:24:dd:34:8a:51:92:f9:d1:d8:07:9e:09:
34:32:f9:dd:cd:09:60:96:c9:9b:69:4f:f2:b8:84:
89:84:13:d1:23:ec:39:72:db:f5:46:b6:7a:46:6d:
7c:39:95:d3:93:40:0c:7d:80:25:6f:93:6c:91:c5:
1e:e6:c0:10:1e:cd:da:0f:37:3b:68:ee:7c:00:cb:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:D2:90:EA:13:8A:6C:56:5B:04:F6:72:FF:D3:41:CC:A0:17:20
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:f8:fe:43:cf:40:87:90:97:fc:a1:a1:99:a4:f7:26:6e:
7f:cb:4b:d3:a4:71:63:61:28:a9:33:50:24:4a:82:58:e7:57:
65:1c:76:ea:3b:98:35:45:9c:c0:21:98:e4:d7:8a:bd:02:6b:
e0:bd:04:e7:06:f3:7f:26:2f:7a:3f:f5:6c:55:1a:3b:64:e3:
7b:b3:0b:ba:fe:84:66:fd:f0:5a:40:b2:90:94:5a:31:6d:66:
3d:49:c2:d5:d1:e0:2f:87:64:90:6f:58:58:fa:94:9e:2f:bc:
31:fe:5e:95:ff:6b:18:c1:39:36:d8:74:f5:99:50:19:ae:b9:
c7:6d:39:c4:6e:db:b3:39:af:9f:01:6d:da:a2:2f:67:7b:62:
26:e3:89:0c:43:1c:3b:45:51:f0:61:96:45:55:05:a5:66:14:
00:e1:32:4d:36:c6:34:1b:9c:af:7b:a6:97:63:cb:3a:3b:a6:
15:02:55:85:a0:cd:76:b2:10:8b:21:ed:65:7a:a4:3c:29:85:
8e:a4:9e:a8:c5:7a:79:7a:f0:e3:ed:cd:26:10:76:36:23:54:
0d:f4:40:9d:37:ef:ec:7c:ba:d0:f5:4a:e6:ed:cd:49:9f:a0:
cf:ab:fc:a7:64:60:4e:39:7b:19:c1:71:79:f1:7b:e5:30:df:
90:88:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:16 2025 by rpki-client