Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: TooZWi/FiSz/xGBpZGLDz02AC1EhNj7j1Uaz5bIfe4Y=
Subject key identifier: 74:44:46:68:86:C9:E1:7E:6D:29:50:6E:4F:9B:27:18:6B:25:0D:1F
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0196526DD5C8BDFBC24C72C3B66D83113A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0D1C
Signing time: Sun 20 Apr 2025 09:00:51 +0000
Manifest this update: Sun 20 Apr 2025 09:00:51 +0000
Manifest next update: Mon 21 Apr 2025 09:00:51 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: EkhA4Tx9/qy2LY7A3k9zptRM3H5v2jqi9Ud12Dr1iAY=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:d5:c8:bd:fb:c2:4c:72:c3:b6:6d:83:11:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Apr 20 09:00:51 2025 GMT
Not After : Apr 21 09:00:51 2025 GMT
Subject: CN=7444466886c9e17e6d29506e4f9b27186b250d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:49:cb:c4:af:27:e8:21:18:2b:9b:57:b1:
03:20:65:cd:0b:ac:fc:6e:5c:d7:ec:48:0e:94:1b:
1b:e0:90:e5:17:99:6b:18:44:59:b3:c7:b5:d8:ec:
67:1b:28:1a:78:72:dc:e8:7f:bf:ce:85:b1:78:75:
2f:3f:bd:7f:52:08:b0:03:2f:dd:a5:2b:0c:25:3b:
9a:cf:4a:69:34:a6:2d:bc:f7:7a:62:16:15:76:f5:
e1:c5:c6:66:23:0e:c5:cb:0f:43:25:30:c7:18:e3:
5a:b3:69:68:0a:b2:17:e6:54:b5:4a:d5:23:dd:52:
a1:fd:b1:22:2a:fe:32:8e:56:2a:92:f5:2b:4d:62:
42:20:e5:28:17:0f:69:d6:49:28:d2:28:ee:a3:f7:
e9:67:8c:3d:d6:e5:f2:e6:2d:c6:cf:12:54:da:c5:
8f:2d:e3:8e:92:3e:f8:86:68:22:50:28:7f:02:75:
a2:eb:bb:45:f2:45:30:21:ee:4e:af:40:64:20:ef:
0c:ef:56:5e:71:55:86:59:32:aa:b0:30:b4:74:69:
e9:93:ed:39:3d:fd:02:f2:51:e3:da:7d:a5:d8:1e:
e9:18:a9:56:03:51:d3:21:24:45:df:8c:c6:36:9c:
db:96:3f:34:31:a6:e1:2e:33:c9:71:eb:4e:db:38:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:46:68:86:C9:E1:7E:6D:29:50:6E:4F:9B:27:18:6B:25:0D:1F
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:ca:45:fb:2b:8f:78:0c:50:51:df:64:46:4a:3b:2b:42:
bc:71:03:b8:ec:e3:d2:c7:6e:dc:2c:5d:55:52:0d:22:40:bb:
1a:ed:8b:de:b2:50:17:95:e9:54:b6:87:59:cb:0f:3e:90:a0:
4e:2b:ae:e7:36:56:af:dd:0a:11:a9:e6:8d:86:c0:e5:81:97:
00:43:d7:55:32:b6:21:46:82:4e:63:e3:24:77:a1:76:b9:a4:
20:2b:6b:f5:0b:0b:0d:38:74:98:49:23:3a:08:29:71:f9:be:
9b:aa:1e:99:11:7d:e7:fa:fa:10:83:9d:8c:64:f2:38:c6:80:
25:36:f8:0c:47:28:48:bc:23:fd:7d:21:53:37:05:72:55:11:
4e:15:a8:4b:fc:5b:10:2c:1f:50:7c:c4:b7:46:32:38:61:17:
36:46:fd:47:0c:2a:cf:4c:84:5f:b6:f6:b4:7a:76:b1:97:4e:
66:bf:e3:02:72:fa:d2:49:6f:4b:38:32:2b:a5:4b:3b:14:5a:
d6:23:d0:a4:6e:34:12:56:f4:97:18:5c:76:b3:1e:cb:0f:9d:
04:6b:59:79:fb:b0:ac:22:7f:82:6a:7b:a8:07:74:6e:11:0c:
7e:38:ad:3a:f0:a5:db:37:ec:86:f4:aa:54:e1:f1:94:91:27:
2d:26:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:50:56 2025 by rpki-client