Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: s+ddl2vtZ4WsoKjxXKl65utzooEf/rI/imP3JbN+b8c=
Subject key identifier: C3:7E:53:81:F6:7D:91:F0:A8:4E:43:8A:8B:FF:12:94:D2:6A:BD:0F
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 01964CA226B74112E5DD887632E89D7AE2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0DE6
Signing time: Sat 19 Apr 2025 06:00:17 +0000
Manifest this update: Sat 19 Apr 2025 06:00:17 +0000
Manifest next update: Sun 20 Apr 2025 06:00:17 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: epOtx6YAjWcSzMVWHWLeZAGhCKTU/Wg8EvkwUZv9dt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:26:b7:41:12:e5:dd:88:76:32:e8:9d:7a:e2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Apr 19 06:00:17 2025 GMT
Not After : Apr 20 06:00:17 2025 GMT
Subject: CN=c37e5381f67d91f0a84e438a8bff1294d26abd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:20:34:77:8e:5d:68:d8:0e:db:62:cf:5f:
b8:87:33:ed:a3:80:de:44:55:94:12:3c:ae:33:5c:
d2:c9:3b:f8:d7:ef:dd:7b:b8:5a:d8:89:2d:e1:a8:
f4:12:a8:24:d9:5c:2d:35:58:44:23:d7:5b:54:62:
7a:bf:29:01:54:20:0e:6f:39:2b:01:3d:b8:04:b9:
91:01:71:6e:67:aa:99:54:c1:bc:80:35:b3:e2:b8:
cc:c0:7d:2b:00:eb:c4:d1:fd:8c:d4:ed:fc:6f:c0:
cc:8e:5f:b8:98:37:48:53:bb:a4:89:80:bb:2d:f5:
3c:f0:0e:71:a5:c8:65:97:29:d5:44:94:ce:80:d1:
d0:3c:a7:30:0b:d4:d4:e8:2a:1c:b9:28:e0:a2:88:
4a:e7:9d:9a:bd:ae:0a:79:93:8d:6e:5e:6b:09:62:
1f:01:fc:85:0a:47:54:d1:20:f8:d6:2c:52:06:c3:
ce:2d:91:ac:40:e1:e0:07:b9:8f:0b:53:bc:38:a3:
39:2b:d8:22:21:e2:37:83:a8:82:a5:7f:1f:58:ab:
e0:1a:e3:12:f3:a3:e1:e2:bf:d1:4b:9b:a1:1b:3d:
3a:98:0e:05:2d:a5:d5:53:8c:d8:67:f1:2d:b8:50:
f5:07:16:75:34:5b:f8:f0:86:e6:46:e1:f2:cc:a7:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:53:81:F6:7D:91:F0:A8:4E:43:8A:8B:FF:12:94:D2:6A:BD:0F
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:b8:1f:4e:8e:b8:8a:d7:a8:c3:54:c1:94:d7:8c:c5:ed:
46:a0:53:b6:dd:d7:2e:a3:1d:f1:02:f4:86:e7:cd:ef:eb:a3:
d9:de:91:27:31:8a:52:c0:de:c4:90:d6:c2:b2:c5:2c:21:d8:
64:ef:9c:35:01:16:81:bb:45:30:6b:0d:0d:7c:56:56:0a:f9:
21:90:a2:5b:7e:b6:3e:5e:b6:71:d9:43:3a:10:1c:80:c7:eb:
c0:52:4e:3b:07:33:56:3a:f6:bc:07:6b:cb:ab:e2:17:bc:01:
50:9b:43:4e:5a:a1:26:61:1f:97:46:32:23:59:22:57:6b:c8:
73:6c:2b:11:7c:68:1f:7c:89:d5:3f:8a:c6:8e:1a:a7:9e:4d:
ac:8d:6e:59:73:af:cc:71:9c:b3:c0:7a:0c:bf:95:23:ef:91:
55:f7:21:a9:76:9b:8e:dd:c2:73:11:86:92:a8:6d:c6:cb:92:
53:b4:bc:1f:0b:48:4a:6f:57:03:97:02:81:79:22:21:d6:90:
3f:1b:5a:d5:4e:77:a4:b5:a4:63:1d:6d:23:4a:94:ad:45:97:
85:44:ce:55:3e:1b:74:3c:7d:36:2d:f8:65:eb:ca:04:6d:6b:
59:2c:ca:2f:16:d6:f6:20:91:8d:68:32:83:21:78:6e:37:1d:
a4:27:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:27 2025 by rpki-client