Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: VCgHABJM/MPrfwyqxwtMCt6LeWC8nH5tBqabXl1TBqE=
Subject key identifier: E7:BD:B8:A2:E2:FD:BE:FF:4F:CD:D3:9B:77:ED:E8:CA:02:3C:22:8E
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019652DB5AE35B102277FB5AA5EC3D58E93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 11:00:29 +0000
Manifest this update: Sun 20 Apr 2025 11:00:29 +0000
Manifest next update: Mon 21 Apr 2025 11:00:29 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: f5ZVy+QkDqDFVM4o7Qqq+WQKZzw3aDb3EuGL6fX9pSo=)
2: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
3: kKi1E3PbMMVFH7DkXfoL7bN1Y8Y.roa (hash: KU0qbsM0A1KDDa+DQi187g2Fd0zrIojzhDbTUg8nXDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:5a:e3:5b:10:22:77:fb:5a:a5:ec:3d:58:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Apr 20 11:00:29 2025 GMT
Not After : Apr 21 11:00:29 2025 GMT
Subject: CN=e7bdb8a2e2fdbeff4fcdd39b77ede8ca023c228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:fb:59:6d:90:3b:1b:48:72:43:99:83:58:
40:77:66:2f:ff:3c:4a:8d:a6:10:78:1d:e1:80:fe:
7d:43:34:92:59:34:bf:e2:5c:73:65:f4:2e:ae:4f:
72:f9:55:73:4d:82:53:18:53:40:37:d0:e0:54:b2:
e7:7a:54:58:fd:dd:bd:03:21:00:21:a5:61:d1:2b:
1c:88:0f:dc:95:6c:6d:46:ec:d2:d1:b7:c4:15:8a:
79:11:08:d0:fc:1a:3d:81:bc:b5:41:a3:0b:31:d9:
1c:4d:4f:33:26:46:a8:bd:dc:d9:f1:b4:80:76:6d:
b7:4f:e2:98:59:0a:f5:67:cf:9c:9d:17:1a:b9:2d:
37:5d:04:65:eb:ef:77:d9:5e:a8:ce:96:f5:ec:a1:
ff:d5:c4:f1:dd:4d:e6:0d:e8:81:15:79:fd:7f:eb:
37:f5:8b:18:28:c0:d3:e5:2f:ab:d5:0c:27:cb:92:
27:4c:20:ca:0f:78:a8:3c:17:e9:40:1e:a3:f0:7a:
f6:23:b6:84:2e:11:b1:1b:47:c6:bf:40:f1:4d:2e:
10:cb:ce:c6:ee:b8:57:47:a6:97:8e:03:da:4d:2f:
f3:d3:27:32:95:40:fd:a4:e2:91:6c:30:f2:59:c2:
4e:81:e2:7e:d7:2f:54:53:44:90:56:af:16:8f:75:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:B8:A2:E2:FD:BE:FF:4F:CD:D3:9B:77:ED:E8:CA:02:3C:22:8E
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:3b:c2:3c:e0:2d:02:63:2e:3a:69:d4:50:aa:f0:3a:0b:
bb:c0:21:2c:f0:fd:c5:7a:8c:ed:b9:92:ea:d6:b0:10:bc:60:
f0:59:c7:f0:f5:63:2d:00:b1:af:5b:ce:69:9f:2d:88:58:57:
d3:b2:5b:af:00:23:78:6a:9e:ff:61:59:8d:33:05:0d:20:bc:
64:ea:fa:ae:30:b3:a1:3e:55:81:68:f7:97:16:93:be:3d:80:
06:22:7e:bb:b7:4a:8e:07:8f:a3:a7:19:8c:fd:b9:73:92:88:
0b:f6:43:fc:81:d4:d0:44:c9:b1:8a:db:02:37:d0:7f:be:b3:
5d:54:07:e0:2c:15:90:33:7e:33:00:b0:67:f8:1e:8c:fc:e5:
19:e9:f7:a7:62:9d:95:d0:29:40:9b:13:b1:a5:f1:06:3c:73:
a9:bf:e9:e0:1e:13:81:9f:27:03:2f:fa:7e:fd:5e:5e:16:4b:
eb:69:70:92:84:97:03:be:ad:54:6f:8d:10:65:5a:76:06:a4:
97:c2:b6:9f:71:97:7c:f3:80:1d:1d:4b:ff:17:e1:6f:23:cd:
99:12:40:55:d4:4b:e2:41:71:2f:1a:05:60:11:9e:ff:28:8b:
92:d1:f7:d9:46:53:89:77:e6:77:fa:97:31:dc:bd:e4:c2:98:
07:38:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:26 2025 by rpki-client