Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: 04S9dxbGV4lMkbQNrXkP/MOsUqZTrXSZl4qc5Cyzggo=
Subject key identifier: 7C:2F:8C:52:72:2D:C6:7B:FB:CE:B5:BA:47:CA:9B:DB:D9:F9:AB:26
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 0196A051900EAB6A017ABA5C0E2068CCE3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 12:00:21 +0000
Manifest this update: Mon 05 May 2025 12:00:21 +0000
Manifest next update: Tue 06 May 2025 12:00:21 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: QtQdp8mTekYURfD/U1YiZbSqDjPn6dkEyjz35XOt/z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:90:0e:ab:6a:01:7a:ba:5c:0e:20:68:cc:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: May 5 12:00:21 2025 GMT
Not After : May 6 12:00:21 2025 GMT
Subject: CN=7c2f8c52722dc67bfbceb5ba47ca9bdbd9f9ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:07:28:d1:cb:c9:95:19:11:9b:d5:5b:9a:
b8:bc:fa:29:3d:60:9e:6d:c3:8f:ac:36:a5:1a:ef:
fc:15:f0:c4:75:13:29:46:a1:2a:b2:92:d5:4b:31:
48:f6:dd:c3:4f:b7:b7:c7:a0:05:71:fd:9f:b9:60:
2b:06:b0:0f:49:81:82:c7:9f:a2:50:90:42:6c:5a:
83:fc:47:5b:86:f0:b3:48:3b:73:e3:41:1c:15:9b:
3c:fd:5b:c0:81:14:56:df:7a:fb:b9:3d:9d:4a:b1:
8e:0e:c3:86:58:42:73:8f:56:bc:b6:43:64:46:14:
ff:8c:e6:80:50:dc:58:f7:75:b4:34:86:a3:9e:51:
24:59:ec:60:1a:84:d5:85:42:d1:6e:f9:40:43:90:
03:ea:7f:51:9e:94:56:f4:bf:de:f4:e3:47:b0:d5:
5e:1d:a9:09:40:90:16:54:cd:9f:a5:ed:3f:13:3f:
4e:cb:1c:2b:62:0c:81:f7:03:3d:5e:1d:d4:7d:a5:
7a:ec:b2:b5:12:85:48:dd:1f:09:12:5a:ea:5e:69:
7b:b4:8b:38:01:3d:b9:f0:9e:b9:7b:c4:e0:08:da:
2c:f8:c3:ec:38:ca:b4:06:f6:99:30:85:06:62:58:
44:01:f6:96:a1:0e:9d:00:80:6a:8d:0f:6a:eb:64:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:8C:52:72:2D:C6:7B:FB:CE:B5:BA:47:CA:9B:DB:D9:F9:AB:26
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:48:b4:ce:0b:8c:77:10:da:76:49:45:d8:37:9b:19:06:58:
08:f5:48:46:7a:1d:57:28:7d:d3:63:cf:12:33:c4:3b:1f:93:
20:9b:76:82:16:b8:a9:e0:d8:83:fc:3b:cb:8b:fb:67:2e:8b:
b7:eb:2f:70:76:39:6b:da:49:99:5f:0f:8e:2d:5b:14:4b:b6:
f4:c5:3c:fa:2a:9e:d8:6e:ca:2a:76:e7:74:32:d5:69:e9:77:
69:db:d7:7e:10:a3:e4:66:53:2f:dd:a8:7c:6e:65:87:62:45:
36:36:2e:2b:fe:98:46:e7:46:5e:88:b2:3c:d9:e5:39:3a:39:
0c:e2:dd:94:2f:d0:14:39:09:8d:5c:a9:05:a0:21:e8:cd:b1:
c1:53:e9:2b:c2:4a:b4:e3:bc:b4:a9:c2:70:76:08:4b:1b:96:
07:db:27:f3:4a:8d:42:8f:7c:df:2c:29:34:b4:52:23:eb:1d:
69:30:20:0e:0a:d8:7c:34:59:00:44:b5:f0:56:3f:1e:34:dd:
bd:88:7f:59:d1:c0:71:63:1e:08:09:3b:56:a4:16:fb:a4:12:
f6:81:44:60:bd:3f:05:c5:92:4a:eb:47:e4:62:33:8b:eb:5f:
6d:d7:42:cc:b4:bc:ad:7e:35:2d:1b:82:d9:b9:be:c8:f6:b9:
1d:b3:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:35:56 2025 by rpki-client