Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: bpRz6G20gXguHOWTsMMbiWm3xWLl9o1wyAxmiFo3U2U=
Subject key identifier: 3A:C9:36:87:4D:2B:5A:08:6A:60:34:3B:FA:8F:F1:DB:D8:ED:FB:2F
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 01964D471507AFA40436C25EB95FA42B8843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 02F4
Signing time: Sat 19 Apr 2025 09:00:26 +0000
Manifest this update: Sat 19 Apr 2025 09:00:26 +0000
Manifest next update: Sun 20 Apr 2025 09:00:26 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: PlXReuF3grfWNIqj6rpiHQPHOJKY7FKuEkHBDPXy0Cg=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:15:07:af:a4:04:36:c2:5e:b9:5f:a4:2b:88:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Apr 19 09:00:26 2025 GMT
Not After : Apr 20 09:00:26 2025 GMT
Subject: CN=3ac936874d2b5a086a60343bfa8ff1dbd8edfb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:ce:32:6d:b7:d6:3a:89:dc:22:47:57:57:
f3:4b:15:94:06:d0:8e:79:7c:5c:d9:1c:fa:aa:8d:
16:54:47:b3:c3:ab:33:d4:08:95:54:7a:24:80:2e:
4c:13:c8:9f:e6:4c:3f:cf:81:73:2d:cb:6e:b1:8f:
9c:8b:ba:bd:da:70:33:4a:2d:3a:78:df:3c:8c:44:
83:c7:08:a7:e9:55:a1:61:e1:45:cf:5d:f8:0a:2d:
e0:5e:e7:22:1a:0f:e4:03:2e:3d:ae:0f:b4:33:66:
9b:5e:87:3d:76:a2:81:ae:7e:2e:78:19:48:13:48:
5f:c4:66:86:60:9f:0a:6b:42:a5:b1:c3:5d:c7:96:
d1:9c:53:f8:9e:64:9c:4a:11:54:ea:0a:c9:ac:81:
93:14:8d:12:91:e3:2e:bd:53:b3:8c:db:2f:14:8b:
cf:f7:31:d8:b9:bc:9f:55:f8:d9:9b:7d:76:19:8c:
46:65:e6:04:a1:7d:ac:06:a3:08:1d:d7:48:6c:a7:
bd:19:05:5a:51:77:64:75:69:f5:08:b1:d0:58:f2:
ec:3d:cf:89:59:92:81:fa:0f:5c:e7:e3:f0:8b:b7:
c9:2f:b0:39:07:ef:2d:e5:92:92:1e:ce:50:16:c9:
f5:a9:aa:29:e3:34:14:ee:09:7b:55:13:fd:b3:bd:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:36:87:4D:2B:5A:08:6A:60:34:3B:FA:8F:F1:DB:D8:ED:FB:2F
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7e:8d:52:2b:06:0d:0e:30:fb:f4:66:e7:65:83:ad:eb:b8:
ad:eb:07:d4:a9:e7:20:5f:da:89:47:35:fa:20:6a:ae:3d:38:
39:0b:21:9c:16:07:bb:35:b4:cc:76:b4:27:15:1a:13:e6:f4:
6a:1e:c2:70:a3:45:30:7f:ae:b0:e5:d9:e8:02:09:6e:92:3b:
0b:6b:3a:76:2b:c1:bb:0f:36:5b:84:25:63:c0:c3:f8:6f:08:
21:88:cc:a2:14:e3:1a:74:1b:06:c9:85:83:b9:9a:f5:95:f7:
ea:ec:0b:01:55:1e:86:5a:93:b8:90:dd:0c:c2:66:fe:e0:6e:
c1:ba:7d:51:49:fe:17:8f:53:e3:c3:81:0f:e1:23:b9:20:2c:
75:84:5d:2e:c5:1f:72:fc:d8:9c:3a:cc:f0:e3:64:f7:9a:c7:
16:6c:e1:64:19:13:ee:af:57:70:f1:20:07:c1:92:7e:32:17:
ab:26:5b:61:c2:b3:aa:5d:47:75:b1:6e:94:ee:27:3b:f6:b3:
4f:6c:0c:b1:52:4c:99:37:95:ea:f0:5d:d4:1a:33:87:61:a3:
f9:5e:e0:b5:dd:01:fb:c1:90:8b:37:4e:80:59:fb:07:84:ef:
3c:51:f2:41:54:3a:71:c3:9e:0f:f2:52:7d:de:03:26:95:d1:
e2:35:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:06 2025 by rpki-client