Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: 8we3Mh4BxkwcPs6ayjB5RTpb0Fh2P+G0UaxLmm20cXc=
Subject key identifier: 7E:27:2B:F6:CC:31:52:F9:D1:6D:B1:2F:C7:BB:AC:5C:C7:1D:5D:64
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0196A9F9B93284BBE488BD4E4F90B1383BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 09:00:37 +0000
Manifest this update: Wed 07 May 2025 09:00:37 +0000
Manifest next update: Thu 08 May 2025 09:00:37 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: +pi1KnKH84NO0uo8JwxfX+U5z9B+xfeBIaISuIjGX0I=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:b9:32:84:bb:e4:88:bd:4e:4f:90:b1:38:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: May 7 09:00:37 2025 GMT
Not After : May 8 09:00:37 2025 GMT
Subject: CN=7e272bf6cc3152f9d16db12fc7bbac5cc71d5d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:cf:51:7c:a1:3d:ea:e9:45:2c:62:bf:a9:
79:20:f4:01:f1:ac:e6:c9:7c:e9:87:07:a2:80:b3:
2a:fc:e5:41:26:af:66:d6:4b:17:fd:dd:06:fd:95:
4d:d4:c1:6f:d7:0a:37:3d:e5:ab:23:77:f5:23:09:
8e:f7:5d:e6:a2:78:da:d7:5b:6c:b1:bd:4c:49:13:
91:59:a4:54:f5:52:3f:ac:48:cb:7f:7b:96:e1:25:
2f:b1:c4:f9:69:77:0e:27:5a:81:17:72:56:63:6d:
03:a7:a3:08:61:d1:2c:94:bf:7b:44:ca:d2:6a:7f:
67:f3:8f:82:82:ed:18:5d:12:28:eb:b3:56:59:a7:
56:a8:74:52:4c:2f:ef:20:e3:25:b7:90:94:28:c6:
34:d7:67:04:5f:59:4c:e6:f7:fc:64:cb:2e:63:8d:
9b:fc:3b:3d:fe:04:5e:eb:a3:b6:89:6b:b3:9a:0a:
a7:f2:6d:49:86:08:41:b3:df:86:8c:6d:40:3a:ee:
93:14:aa:42:66:92:6f:60:60:3f:4a:2e:21:d6:76:
73:01:c9:da:af:0e:43:5c:8e:d6:de:d6:e7:d4:9f:
ef:be:45:ed:1c:d3:14:4d:29:86:14:83:6d:cc:39:
bc:49:6d:6c:af:9e:6d:6c:dd:fd:9f:d3:c8:74:66:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:2B:F6:CC:31:52:F9:D1:6D:B1:2F:C7:BB:AC:5C:C7:1D:5D:64
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6b:a5:98:ff:c7:79:b5:38:f1:66:c3:ff:62:28:a9:45:e6:
4b:0e:f9:ce:cb:e2:c1:b3:4f:ac:33:c7:f5:f0:8f:56:e5:41:
26:89:7a:ef:fa:23:b0:de:1f:35:0f:48:a9:ac:c1:4f:b8:8f:
5e:b4:7e:f8:75:f9:8d:4f:aa:bd:b4:f5:18:be:0a:51:fc:9c:
f6:66:a7:b3:46:17:a2:2d:09:e9:fc:02:dc:63:b8:30:ae:bd:
db:bc:15:3c:87:17:57:34:27:0f:39:1f:7f:6e:b8:ed:c1:0d:
b0:a9:61:c0:dd:b7:92:7c:3a:6d:66:d9:f2:25:5c:32:56:19:
f0:dc:57:9a:c4:75:e7:d7:62:2c:23:14:d4:32:b4:84:89:54:
86:a5:59:67:e8:ae:d3:a9:ec:f0:17:5e:88:05:84:d5:57:9d:
85:72:f5:ac:17:fd:de:c8:00:7a:57:9c:c0:a8:b5:3f:26:9a:
af:a6:b1:8b:ef:84:04:9a:e2:c2:5d:4b:1d:c5:7e:c3:b0:e5:
bc:28:1d:29:1b:f2:4d:7f:e8:82:46:d1:6d:0d:43:31:cb:41:
de:23:59:51:6d:9f:84:80:02:71:53:1c:6f:b5:a6:1a:67:8d:
d0:cf:a7:a5:5b:fa:18:ab:35:92:9f:b0:31:d4:cc:86:94:19:
94:4d:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:46:41 2025 by rpki-client