Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: IB7Mb1ntCjYV1Or3RBRY1D0LTHuA/bqaiVhN7MySIIk=
Subject key identifier: 10:42:F8:9E:9B:F8:2D:3C:AA:76:27:84:75:3A:8B:1A:02:69:29:9B
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 01964FDAADE7A23E30957C83F663CB7FE983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 21:00:53 +0000
Manifest this update: Sat 19 Apr 2025 21:00:53 +0000
Manifest next update: Sun 20 Apr 2025 21:00:53 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: B1kQ6nl9HY1G5wt3ATdwCrYLwqYm1pVoVIfdw5u4CS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:ad:e7:a2:3e:30:95:7c:83:f6:63:cb:7f:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Apr 19 21:00:53 2025 GMT
Not After : Apr 20 21:00:53 2025 GMT
Subject: CN=1042f89e9bf82d3caa762784753a8b1a0269299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:77:31:5d:d7:ca:08:0d:17:6c:d3:0f:af:
64:df:47:12:63:47:45:38:fe:ef:b1:09:25:81:89:
ec:08:34:3c:8a:84:07:e6:a2:54:09:20:b5:bf:e8:
fe:93:a8:2b:87:b8:cd:4c:d5:c5:71:d3:b1:59:f9:
92:2f:a6:b5:2b:20:32:b7:72:18:67:67:00:a0:33:
6e:5a:11:ba:bd:4a:20:cb:ea:22:19:6d:39:b9:a1:
3f:7c:08:59:69:e3:a5:17:a9:bc:1d:8d:a2:dd:b5:
28:1d:1f:1c:7c:51:48:5b:8b:c4:5f:15:97:79:a0:
8f:ed:a5:6f:53:b4:b5:2e:ce:f1:c2:fa:b5:ec:1d:
3a:20:b3:51:2d:3b:db:43:db:d5:05:03:6c:7e:82:
f7:9c:2f:c0:26:c4:fa:14:42:04:57:a3:f9:9f:b3:
6b:e6:aa:f0:40:6d:57:20:d3:5d:b7:cd:a1:6c:da:
74:9f:fc:71:3a:71:b5:6b:a5:02:c4:fd:d2:86:c9:
d7:51:18:35:70:75:d6:34:3c:72:89:a1:67:1e:54:
87:77:9a:07:21:fb:8d:45:62:d6:80:5f:fc:5a:cc:
b6:f2:28:d9:ad:a6:48:87:d7:fa:71:69:90:81:45:
9c:67:37:70:53:a3:cc:86:f1:0a:8a:d1:f8:8f:ab:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:F8:9E:9B:F8:2D:3C:AA:76:27:84:75:3A:8B:1A:02:69:29:9B
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:54:80:7f:f6:1f:d7:89:40:ea:11:09:2a:7f:27:e2:41:
4d:c2:c8:45:41:51:47:8c:ce:49:31:78:19:39:fc:77:37:40:
0b:50:bc:d6:0b:3f:03:a7:6a:4a:0e:2e:b7:12:77:43:aa:f2:
b9:96:57:24:9f:1e:60:a1:82:ed:35:f8:de:69:0e:69:94:36:
f3:00:1a:db:85:7f:ee:3b:fa:8f:cd:9e:50:f8:b4:48:c7:df:
92:8f:3d:9c:be:ce:5c:72:76:b8:ea:1c:f0:90:81:e2:42:7f:
c5:c4:1c:72:6c:54:68:ac:6b:16:a1:bb:d0:ea:cb:75:df:f2:
f2:b8:ae:bf:db:58:03:1c:8c:d6:f1:d2:97:b1:aa:0a:50:12:
83:50:ef:19:4e:03:37:ec:35:d9:c1:33:65:8b:53:c6:9a:8e:
8e:92:4b:34:94:86:de:ae:57:5b:07:20:24:aa:d4:77:0a:16:
62:75:49:fd:2d:08:ac:9e:b3:46:68:a3:dd:18:44:15:58:1d:
4b:a3:ad:de:38:5b:a7:b6:b9:9b:6a:1a:7b:13:35:62:bc:56:
3c:9b:18:6d:c6:24:52:ac:75:51:85:f3:7d:f5:41:0c:7c:22:
08:ba:ae:77:f0:2e:5e:2a:ec:f9:a8:2e:ff:d3:ce:a8:23:e5:
5c:5c:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:48 2025 by rpki-client