Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: G7pyXv6Z3SZS4f6NCur2AChRC3NY9c0rxaKqThO7coE=
Subject key identifier: B6:39:56:6A:A9:B3:CA:F8:F0:00:11:98:B1:39:6F:C9:89:9F:FE:98
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 01961056ED2AB73B8F6EB05B3A0E47A7CC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 0767
Signing time: Mon 07 Apr 2025 13:00:54 +0000
Manifest this update: Mon 07 Apr 2025 13:00:54 +0000
Manifest next update: Tue 08 Apr 2025 13:00:54 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: dz6mAmA8hj36Ccr8GbKBM3ZUp3XKrEmJKWQ0pcPOFCs=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:56:ed:2a:b7:3b:8f:6e:b0:5b:3a:0e:47:a7:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Apr 7 13:00:54 2025 GMT
Not After : Apr 8 13:00:54 2025 GMT
Subject: CN=b639566aa9b3caf8f0001198b1396fc9899ffe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:d5:8b:0f:96:de:21:9b:45:09:73:6f:6d:
64:de:e6:42:3b:31:e8:73:25:02:38:84:94:3f:f4:
05:a3:6d:cc:44:49:b3:18:f1:c1:5c:e6:c8:ef:07:
01:b2:ed:c1:c7:b9:f8:f8:f8:97:c5:0e:0f:c3:d9:
5a:8c:2c:c5:92:9e:96:00:e7:53:04:4f:b9:34:4b:
62:49:2f:5d:20:32:31:e3:9c:d6:cb:24:fb:bb:f1:
91:8c:b8:0e:24:e1:ee:3c:9c:f2:f9:7e:05:35:7a:
ba:bf:0a:0d:de:eb:c5:cc:f9:8e:3c:7a:e5:f2:78:
02:a4:2e:1c:a8:66:d1:4b:08:87:0f:92:35:a9:2d:
03:72:67:4d:56:12:02:3a:ee:ea:cd:32:45:fe:31:
f2:e8:a8:60:87:8d:26:e3:f6:3c:ae:18:ee:38:48:
f3:b7:f8:c8:ae:bc:8f:b4:0e:2b:3c:e4:bd:d2:40:
9b:86:9b:f7:58:32:7c:f5:9f:ce:dc:b6:d0:9a:d5:
b1:c3:7b:95:c5:d9:45:28:0e:ae:a0:2b:b1:97:34:
29:c6:92:a6:db:48:7b:97:3e:7c:51:d1:b9:b5:62:
aa:5a:58:e7:c2:13:e2:68:35:71:14:ef:c7:63:b9:
be:91:f7:86:05:29:ea:43:0c:af:2c:07:4f:a7:08:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:56:6A:A9:B3:CA:F8:F0:00:11:98:B1:39:6F:C9:89:9F:FE:98
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:3d:da:05:c9:d8:b6:ee:fe:6e:4a:5c:6a:ba:a5:e9:8d:
a6:c6:59:b8:11:0c:5f:25:5f:21:d5:f2:31:16:85:84:94:b2:
a0:83:0a:29:1c:ec:a7:c5:73:9f:9f:69:05:7c:3c:34:c6:2f:
d7:b9:3e:08:89:b8:a8:32:9f:cd:68:13:c7:ed:b6:89:e1:e2:
97:5c:12:ae:5d:b9:b8:fb:58:05:4f:bb:d5:1b:f8:8d:d7:b1:
78:19:c3:1c:48:27:6f:b6:2e:53:98:52:d3:42:9a:88:b2:e6:
64:6b:63:bd:2f:14:6a:21:7b:d1:21:57:75:34:2c:2f:d8:51:
3b:48:d1:5d:bf:74:1d:d0:d4:3b:af:38:38:c1:5b:81:87:d7:
10:4c:69:42:4c:cb:6d:54:59:5c:8e:83:24:42:55:45:34:d7:
e4:ca:18:09:f5:f0:85:c8:16:86:3f:9e:d4:4d:26:93:2e:2e:
8a:ad:56:13:eb:a6:38:f2:26:88:af:0c:88:52:0b:86:a4:03:
24:ce:ea:63:99:99:a0:72:9a:c0:9b:70:37:31:50:9d:7a:7c:
15:57:a9:df:03:79:28:fc:30:1c:17:82:b1:58:6c:d7:b0:5b:
70:98:dc:57:42:b1:82:65:6a:00:be:02:62:26:b7:29:8b:69:
79:de:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:10 2025 by rpki-client