Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: MMytKpDHDQdvec5lcXC9rLdy3pb6XGzd90yzZlgSGrs=
Subject key identifier: 8D:4E:5D:2C:C1:7C:A2:D9:57:80:1C:64:5C:F6:86:92:B4:CD:A8:6A
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 01964D7DEA560B91A654DCEF399649BF980C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0511
Signing time: Sat 19 Apr 2025 10:00:19 +0000
Manifest this update: Sat 19 Apr 2025 10:00:19 +0000
Manifest next update: Sun 20 Apr 2025 10:00:19 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: 1KcXtt7tKx7MuNyrttT19hQLdeL0hYKzv+i1mISbeVQ=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:ea:56:0b:91:a6:54:dc:ef:39:96:49:bf:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Apr 19 10:00:19 2025 GMT
Not After : Apr 20 10:00:19 2025 GMT
Subject: CN=8d4e5d2cc17ca2d957801c645cf68692b4cda86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:bd:1b:fb:1a:9c:b3:fd:68:53:0c:d5:8d:
08:91:3e:0f:12:c5:ec:cb:a1:8d:e2:90:af:6b:93:
9f:f8:4a:d9:8f:e3:17:dd:dc:e3:16:20:c7:03:5b:
02:50:0f:c6:ad:c5:b3:bc:b0:92:3e:b9:70:28:b6:
67:77:0e:7b:bb:a1:c5:06:88:29:2a:c0:b0:dc:43:
cd:8a:37:6f:75:0f:22:60:db:d5:63:c0:93:57:d8:
63:12:69:e5:f0:5f:b0:13:a8:a9:8c:80:85:1a:4a:
4f:1b:67:d3:bf:bf:51:5e:3a:e5:65:a3:9c:b0:ae:
6e:57:ae:7a:52:41:df:92:d4:77:78:93:8d:13:b3:
16:b0:5b:de:7b:c0:3a:7b:6f:51:5f:84:f4:df:72:
fc:34:c2:55:48:05:c5:dc:ff:c2:35:27:dc:50:9b:
18:38:22:90:63:24:4c:06:a1:19:e2:e6:0d:3c:96:
48:be:f0:39:7b:a3:1f:27:ab:d7:2e:e6:2b:86:f4:
b5:f5:3e:71:99:b3:d4:8e:3d:7f:88:64:0d:65:a4:
b9:f2:85:24:81:a3:43:36:4f:b5:c2:70:71:7b:f3:
b5:09:eb:d5:be:20:42:e9:69:52:a8:d8:3f:c0:02:
21:6c:06:1d:99:0a:37:c6:9a:97:fa:9f:47:20:f3:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:5D:2C:C1:7C:A2:D9:57:80:1C:64:5C:F6:86:92:B4:CD:A8:6A
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:38:48:12:40:15:61:56:f7:10:16:9a:4f:98:75:c9:81:
00:3f:d1:27:88:af:f0:95:e1:3e:d9:ea:d5:73:c7:02:d6:f6:
3d:cb:43:ae:00:c5:6c:14:c1:9a:f5:4e:35:0d:eb:25:70:e3:
35:cd:a3:09:f5:57:12:c9:96:bd:40:50:b2:3f:e8:7f:50:95:
ba:43:72:da:d7:2f:dd:71:b3:b9:78:a5:4e:db:4d:70:a2:b0:
dc:e2:6a:d6:aa:8f:b8:90:43:13:fa:71:39:93:a0:17:2c:38:
2c:8a:53:7a:6c:a0:78:35:6e:a4:8f:62:55:93:cb:9e:94:7e:
8a:61:c3:2e:de:17:be:84:00:9a:64:38:0b:d6:b5:79:fd:f6:
42:e2:fe:fe:df:a7:df:c3:c6:5e:99:c2:4d:a5:1f:87:6c:0b:
81:7f:9e:c6:0a:d9:41:8e:91:6f:65:eb:0b:97:03:c4:5c:ce:
80:b6:6c:31:0f:ac:2c:fe:34:4e:78:dc:7e:af:e4:35:20:f5:
fa:07:46:68:dc:ea:a1:e2:7c:51:70:be:45:dc:43:8b:25:e8:
d3:7d:42:42:de:31:b0:39:c7:fa:95:91:e5:0a:e2:07:38:cb:
50:8f:da:25:1f:7c:1d:35:a4:36:be:c6:03:9a:5a:42:ac:95:
7c:27:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:22:45 2025 by rpki-client