Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: 37sLo18YD3VQLUxO6Xkm279WFZy5JMoidf69Rz8xx4k=
Subject key identifier: 6A:DF:99:35:75:DD:91:10:A4:69:BB:B7:40:38:69:8D:02:DD:DB:3E
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 0196A3F73CD3C76798459ACACDFA1F9CF066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0EB1
Signing time: Tue 06 May 2025 05:00:11 +0000
Manifest this update: Tue 06 May 2025 05:00:11 +0000
Manifest next update: Wed 07 May 2025 05:00:11 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: GRh8OZIOkDFvTVAE0fBGBySeqD3JTpU1bMOLUD/7EHY=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:3c:d3:c7:67:98:45:9a:ca:cd:fa:1f:9c:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: May 6 05:00:11 2025 GMT
Not After : May 7 05:00:11 2025 GMT
Subject: CN=6adf993575dd9110a469bbb74038698d02dddb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:6d:d0:81:1d:a3:19:3b:cd:3e:e3:0c:eb:
80:54:e9:35:7e:f0:74:2f:e5:25:10:7c:62:1b:4e:
f1:42:8b:b3:a5:dc:9c:b9:b5:f8:27:3a:f3:d9:94:
25:8e:c4:7b:24:42:9c:e0:37:39:56:18:e6:5f:b8:
19:57:6e:48:39:39:f0:0b:12:d1:71:d3:e8:3d:c6:
5d:f2:25:43:2f:c2:46:b2:60:2e:e1:c6:9c:78:7c:
62:46:15:5a:bd:fb:6c:2f:91:12:24:bc:63:d3:d7:
30:35:20:f5:e9:aa:50:a9:38:4b:5c:f2:cb:01:2e:
1f:bb:51:d8:e8:6a:64:bc:67:af:b8:98:89:4d:66:
1c:95:d6:7f:84:68:3d:9f:41:d1:a1:04:17:25:7b:
c0:57:89:39:17:2b:ec:ae:66:50:53:e2:8a:1f:ab:
f6:53:42:b4:75:e4:3e:54:be:63:2b:07:a8:fe:9b:
60:e7:64:79:8f:ab:90:55:33:73:54:44:94:65:ad:
a7:66:1a:14:f0:cf:97:db:73:c6:8c:ff:04:d4:b3:
dd:af:53:10:bc:ea:a3:72:45:62:07:6f:88:70:c9:
fa:d1:38:b9:cf:1a:b0:08:a2:0b:50:b5:ba:52:f4:
86:c8:30:b5:89:ba:7a:b3:95:e3:50:65:a6:00:57:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:99:35:75:DD:91:10:A4:69:BB:B7:40:38:69:8D:02:DD:DB:3E
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d1:49:e3:e1:c1:93:5c:e8:f8:a5:48:33:d8:4d:b1:ed:a8:
f6:50:b1:41:3f:f3:3e:40:76:bf:d9:48:4a:eb:7d:4a:70:34:
6c:bb:0a:d3:aa:5b:2a:ba:f7:a8:8e:00:7f:60:07:9f:c1:6d:
c8:b5:f4:5a:7a:4a:78:62:5b:16:1e:d2:ed:85:a3:fb:b8:3e:
88:ae:4b:da:0c:1b:60:0d:81:df:d3:9f:a1:95:33:d7:b4:e3:
1f:a4:63:65:43:87:b2:3d:a7:ba:4c:33:31:e5:c9:d8:07:b1:
47:da:6b:2a:c1:9d:43:3f:22:64:52:80:ea:0e:64:e0:e1:4b:
1d:01:09:e4:c6:0a:9f:f8:38:a6:08:84:d7:f0:31:fc:5d:67:
8f:00:fb:ba:51:45:6a:5a:e1:8e:6b:34:21:79:3e:92:dd:f0:
dd:ba:be:a1:96:c0:52:a0:b4:27:c5:74:3c:17:59:29:fc:39:
b2:d8:7d:d1:87:65:a0:92:57:6e:79:a5:d4:ac:cc:e6:2b:ab:
41:a6:78:07:50:dc:e3:a6:44:7c:62:0b:f1:4d:8a:74:c1:85:
d7:fe:2b:8b:d7:41:4f:62:c2:13:3d:0e:9b:8e:f2:b6:6b:2f:
b6:40:6a:67:23:e7:98:83:16:96:72:a3:56:24:b0:c9:6d:bf:
94:60:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:55:41 2025 by rpki-client