Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: a1JtkizYC2H68cUszi/6mxLT/QTkzSFTv/ab7UClu6c=
Subject key identifier: C6:96:D7:56:6A:F3:23:8E:96:34:96:7F:59:32:8F:EC:8C:BA:6B:B4
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0196B89147F2B4DB5254F9D71888123DF880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 05:00:50 +0000
Manifest this update: Sat 10 May 2025 05:00:50 +0000
Manifest next update: Sun 11 May 2025 05:00:50 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: rdYMiYQmKgWKvAMbIAAz3qJhQA8IKYxGE7ard5SDGT8=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:47:f2:b4:db:52:54:f9:d7:18:88:12:3d:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: May 10 05:00:50 2025 GMT
Not After : May 11 05:00:50 2025 GMT
Subject: CN=c696d7566af3238e9634967f59328fec8cba6bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:d6:8f:e0:bf:cc:dc:43:2b:98:fd:fa:ab:
a5:bb:91:6c:0d:94:2b:e8:22:1f:0d:c1:6b:6e:e6:
8f:4b:29:3b:2e:e0:1b:54:5f:c8:14:ca:a2:a0:7a:
7b:63:22:20:08:53:34:62:ad:b7:bf:98:f7:02:78:
66:67:a8:1f:34:ea:45:26:d7:2c:f1:e6:aa:cc:99:
de:62:2f:07:8f:e5:25:a3:ff:28:b6:a4:41:5c:af:
a1:85:2a:ed:34:5f:cf:9e:74:0c:ad:ba:75:8f:2d:
da:bd:ad:32:b8:1a:f2:3b:19:3b:38:ba:d5:2b:2f:
05:95:a2:0a:a9:d9:0d:5b:3b:86:8d:29:a0:41:ec:
a9:0d:b6:de:2b:21:9d:1d:47:7f:f8:90:6c:62:66:
24:03:12:41:10:a2:f0:b8:e8:af:70:3a:27:bc:d3:
97:a8:e5:07:0e:8f:05:8f:b0:90:6c:67:a9:18:9e:
5b:96:82:fd:4e:30:81:c5:bd:d9:5a:bf:17:be:70:
f4:df:a3:09:29:1e:4b:83:95:e3:28:d6:f5:2c:da:
a7:a9:ce:17:ac:0d:74:95:24:6c:f2:7e:c6:13:e4:
00:de:e8:80:4e:27:80:b8:26:43:64:e0:bf:f4:5f:
f3:1d:d4:15:c6:89:d6:a7:0a:87:aa:39:74:db:ca:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:D7:56:6A:F3:23:8E:96:34:96:7F:59:32:8F:EC:8C:BA:6B:B4
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:0a:97:6c:e8:d4:ec:ae:0b:69:8c:15:98:ec:f6:f7:05:
67:3d:4f:d9:af:bb:37:ea:40:58:9c:14:24:bb:ce:5e:7b:02:
c2:23:03:c7:e5:95:ee:e6:0b:78:c7:75:c6:0e:6c:e9:80:14:
19:d3:52:28:c3:9f:36:28:8f:d7:5f:ed:e9:64:f8:45:14:f9:
ea:89:84:ea:04:87:37:d8:53:ea:25:e6:df:59:a6:51:9d:96:
60:28:50:fe:cc:c6:47:48:5c:ca:e7:f6:68:9a:0c:36:4b:d5:
fa:ac:a7:55:d3:5e:50:4e:b7:2a:f6:ef:2e:e3:97:d1:f6:c1:
35:f5:08:02:d1:f1:cc:5b:d1:cf:04:85:08:83:21:99:7f:48:
db:cf:36:6c:16:a8:5a:a4:69:aa:66:c7:41:fc:b8:81:5d:66:
e9:98:81:84:68:f1:28:66:62:1b:eb:63:17:8a:fe:7f:e8:03:
97:8f:7c:d1:4e:b9:b2:e2:44:fb:3f:e6:4e:60:d4:4f:26:12:
67:9e:39:ba:6f:34:86:cb:10:7d:61:ba:e3:70:2c:7f:5b:c1:
c5:3e:a7:95:ae:38:a6:d4:42:29:1f:db:e0:26:85:ef:8f:a0:
27:62:28:f9:04:c1:1c:07:a5:6a:d5:ed:75:5c:f2:45:bb:4d:
09:f9:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:24:06 2025 by rpki-client