Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: DjuQFl8qnwj790RcUqQT0C8D7yKDF/g09RWSghVdVfc=
Subject key identifier: C0:E0:E7:1A:B8:49:EA:DC:E8:6D:D2:CA:88:76:43:A2:FB:86:66:1B
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0196526D67B060A235F590876FEFA9FD20C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0306
Signing time: Sun 20 Apr 2025 09:00:23 +0000
Manifest this update: Sun 20 Apr 2025 09:00:23 +0000
Manifest next update: Mon 21 Apr 2025 09:00:23 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: vy36RKOW/QY8RJrNjbk8NHIJMQeS7MOiZvcFbq2lVw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:67:b0:60:a2:35:f5:90:87:6f:ef:a9:fd:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Apr 20 09:00:23 2025 GMT
Not After : Apr 21 09:00:23 2025 GMT
Subject: CN=c0e0e71ab849eadce86dd2ca887643a2fb86661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:ed:4a:cf:eb:c5:b2:aa:56:75:9b:7a:ea:
27:c6:90:c4:c7:d2:bc:54:38:75:16:3a:89:37:48:
02:17:12:78:73:bd:2a:64:01:ab:3e:2d:e6:7f:8c:
8e:1d:50:d4:4c:d6:c0:57:61:a6:6e:78:c3:6e:aa:
06:b0:c1:01:8e:73:01:ce:84:2a:67:b8:0d:19:45:
1b:5c:5c:55:d3:e2:df:dd:82:89:59:5d:88:22:b4:
bc:66:ce:4a:71:3d:b0:f4:95:5a:78:a1:9b:a2:8f:
43:a7:f4:a1:a8:24:f7:9f:95:d3:65:36:b8:f7:d1:
28:58:b0:13:91:fe:cc:3f:3c:fd:da:75:61:b5:c8:
12:49:d6:3c:19:da:76:57:2c:e9:63:95:c3:f4:f3:
10:63:17:71:ef:73:47:88:c6:29:cc:a9:3e:89:67:
d9:00:54:c8:c5:73:38:ec:0a:6d:ca:71:bc:fe:45:
a7:16:76:1b:d9:8b:ef:61:c0:46:09:bf:2a:9a:99:
62:c8:ff:94:84:d2:f0:04:88:7e:7e:f3:a7:71:95:
60:6f:47:64:5b:8b:e7:60:86:1d:9e:4a:22:4c:da:
e9:ee:af:78:b3:f6:e3:d4:4e:7c:55:dd:e9:ab:75:
d1:40:d5:4c:65:dc:f2:10:0e:1f:5d:d1:16:da:5f:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:E7:1A:B8:49:EA:DC:E8:6D:D2:CA:88:76:43:A2:FB:86:66:1B
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:9c:1e:ce:86:db:d7:d9:9f:9d:99:d9:7f:5a:80:56:2f:
1e:77:f4:09:0d:d2:6d:ed:ec:9d:b7:03:fc:51:20:d2:5f:fd:
36:2c:f6:55:c8:84:b3:76:de:44:bb:22:25:4e:47:92:d7:d3:
97:ab:89:68:eb:8f:fd:4e:b4:68:e4:67:da:e7:e2:92:f3:49:
69:e9:cf:70:af:cb:ad:e9:6d:ce:cb:8f:55:5a:91:eb:ef:a9:
2c:f4:44:4b:bb:bb:37:ea:86:6f:c8:73:02:f2:5e:c5:07:69:
fa:32:2c:49:38:bf:1f:62:93:bb:7d:78:2a:33:79:74:bb:02:
fd:44:25:0f:fe:4c:c1:05:cf:88:12:d8:d7:2c:1f:d8:9f:da:
a0:7a:c1:b7:70:07:14:0c:4c:53:63:c2:1a:87:b8:a2:9f:a4:
33:27:a0:78:9d:57:f1:b1:bb:43:4d:59:fb:3d:fd:cc:61:d3:
06:a8:39:46:bd:07:49:cc:de:07:e1:f5:b2:b5:b1:59:22:ca:
d6:3e:c5:9c:0e:d9:4f:89:bd:e2:47:a7:d1:57:5a:58:34:e2:
d4:09:93:c0:80:5b:15:16:7c:7a:3c:ea:46:c0:9e:79:23:98:
a7:b8:cd:cb:22:8e:ac:a6:f1:2c:a2:46:8f:01:d5:08:14:21:
d3:18:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:24 2025 by rpki-client