Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: eFGROMCmy6B57pncXGeOCkHBWYupAMukL16zltEgVjI=
Subject key identifier: 37:C0:17:3B:DC:EA:15:4C:9F:14:46:E2:7F:3B:8F:3B:70:8C:21:D3
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 01964BC6F27F135CB233EA213638E19F19EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0BCB
Signing time: Sat 19 Apr 2025 02:00:51 +0000
Manifest this update: Sat 19 Apr 2025 02:00:51 +0000
Manifest next update: Sun 20 Apr 2025 02:00:51 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: n6PHBxAgXLeXI4Y4rwpuynsjX0dAiRg/3FuJwYegPrs=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:f2:7f:13:5c:b2:33:ea:21:36:38:e1:9f:19:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Apr 19 02:00:51 2025 GMT
Not After : Apr 20 02:00:51 2025 GMT
Subject: CN=37c0173bdcea154c9f1446e27f3b8f3b708c21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:c8:9c:eb:6c:93:97:57:fd:a1:c7:18:6d:
7e:6e:85:17:b8:70:39:62:70:5f:28:64:f6:fc:a5:
fb:b1:2e:b0:b9:bd:39:59:18:c4:69:ed:7d:e8:b6:
08:1e:12:79:8b:9f:8f:4c:d5:d5:98:ae:69:0b:d4:
6e:a7:e4:27:43:3f:95:23:76:57:0b:c9:5a:99:ff:
5f:1d:44:e2:69:b3:d0:d2:3f:0f:b2:55:d6:d7:f7:
c3:74:9c:ce:43:1b:83:78:23:0c:00:aa:58:e5:27:
b6:97:20:5c:a8:ff:dd:16:7b:07:7d:19:96:89:c1:
3b:44:27:07:5e:35:61:84:f4:96:15:22:ce:26:de:
57:da:fd:8b:57:11:8f:5d:c3:76:b3:fc:dc:10:f8:
37:f7:70:9e:97:75:a2:c8:fc:e3:3c:25:c5:6f:c3:
b5:76:da:93:cf:0c:e3:97:ba:25:41:76:f4:4a:1d:
68:c9:18:f7:06:3a:da:d0:22:99:8b:89:30:50:4c:
10:02:02:77:5c:f8:e3:1b:2a:b9:b4:b6:54:ab:88:
3e:e8:7b:94:bb:2f:13:45:45:9f:9e:0f:16:c6:1e:
7b:ff:56:eb:e2:fa:ac:fb:bb:6a:24:93:6d:d4:59:
4d:76:02:f9:5f:37:91:5d:b1:8a:6f:46:62:01:a1:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:17:3B:DC:EA:15:4C:9F:14:46:E2:7F:3B:8F:3B:70:8C:21:D3
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a1:dd:e1:5c:51:31:30:44:c0:a0:7d:1d:ed:30:5b:a2:e9:
42:86:a7:97:68:4a:14:bc:7d:41:dc:30:73:cf:28:39:39:a0:
5a:14:84:a6:cd:0a:ce:b3:1b:11:0c:52:9e:9e:2d:a0:6c:22:
93:6b:d3:66:ff:b9:c6:84:23:03:f8:c2:23:22:91:0c:c0:b1:
a2:37:f4:a0:21:17:b3:ec:d7:64:5e:66:95:5f:29:19:7f:4d:
7c:aa:f4:ba:50:02:3d:7e:56:8a:f2:46:48:00:98:50:47:0b:
7b:24:45:cc:b7:ca:d2:8b:35:b2:b3:26:0e:d4:73:42:d9:35:
3b:a5:ff:36:66:24:ff:78:83:15:57:bc:71:35:ce:ec:f4:a2:
84:c3:f1:96:42:50:96:73:b8:85:46:ab:b7:8d:66:88:45:a2:
e6:de:88:ee:91:cc:d0:80:0c:c2:ab:ff:7d:b7:4f:95:d6:77:
4e:69:28:b6:f7:25:0f:e0:ec:67:88:53:2a:1f:e0:4a:8a:64:
39:b8:07:b4:92:a7:c1:64:9b:97:2c:96:d8:f2:c4:0d:9b:89:
ef:57:93:29:14:bb:a3:42:45:ca:b2:9b:35:3d:d2:bc:ad:4c:
38:5e:e7:12:76:42:fc:b9:a6:ba:7c:4d:c3:47:11:fd:d9:34:
e4:96:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:06 2025 by rpki-client