Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: s48bprwmCziIuC2tCYkbLaC81b32xiLYlJkZ5hapU18=
Subject key identifier: 17:EF:8E:00:AD:C5:A1:4C:B4:2A:FA:07:B2:91:20:43:AB:05:79:05
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 0196B66C359E213D0CF84BF8EEA78424F553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 13CF
Signing time: Fri 09 May 2025 19:01:06 +0000
Manifest this update: Fri 09 May 2025 19:01:06 +0000
Manifest next update: Sat 10 May 2025 19:01:06 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: 4vVPrVxHYECSkaA5Rib2ZMCe5Mn03wv++BhAz+mSvcA=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:35:9e:21:3d:0c:f8:4b:f8:ee:a7:84:24:f5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: May 9 19:01:06 2025 GMT
Not After : May 10 19:01:06 2025 GMT
Subject: CN=17ef8e00adc5a14cb42afa07b2912043ab057905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:f1:04:28:6a:72:65:3b:74:6c:15:19:75:
b5:5e:a9:8b:7a:92:84:11:ca:0a:92:31:92:3e:c5:
ff:36:02:04:93:4a:fa:57:a0:51:89:ee:4c:81:01:
4f:f1:e8:9d:47:c5:00:d8:51:9a:69:ef:5e:d4:2c:
9c:d7:04:6e:2a:da:02:89:0c:81:88:5a:80:dc:bf:
6b:e7:64:7d:34:0b:9d:31:ad:3a:a1:f2:ee:11:68:
b8:34:66:77:73:6d:c4:4b:0d:dd:61:d6:5c:44:89:
c2:8c:c4:21:3f:bf:6f:e6:87:1e:84:0b:5e:e4:0e:
21:4b:25:fd:01:4c:87:ff:89:a2:b0:d8:69:53:09:
32:27:83:80:24:a1:50:ae:0d:71:8b:50:27:b5:a9:
02:47:72:c8:5a:30:48:cc:f6:7b:3a:30:6f:a3:5d:
c1:f1:1a:fb:68:cc:57:e5:01:2b:b1:51:19:08:b3:
80:77:8b:1b:09:e0:30:5d:a6:97:3c:65:f8:7d:22:
86:66:2b:18:b6:5b:a0:44:c1:19:85:d0:ec:ea:b8:
82:a3:92:3d:dd:e5:c1:dc:fb:5a:80:58:03:78:74:
64:d9:c5:a0:bb:f1:ef:c0:78:2a:69:05:db:d3:b0:
57:d6:bc:32:17:b5:57:3e:ca:f6:0e:f9:6e:7f:43:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:8E:00:AD:C5:A1:4C:B4:2A:FA:07:B2:91:20:43:AB:05:79:05
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:54:eb:cc:83:69:25:ba:5b:2d:72:98:71:86:1e:58:4e:e3:
fd:89:9f:c3:59:3e:5a:58:16:cc:dc:62:2a:2b:da:ec:9c:1d:
e3:af:4a:d7:21:5c:71:77:04:96:09:a8:d5:8a:ba:c2:7a:80:
ba:f1:6d:75:8a:57:dd:d6:72:68:47:13:04:c9:b5:20:91:e9:
59:9f:44:31:fd:5b:fc:77:ad:36:a4:15:62:f9:81:c9:81:fb:
7a:12:48:26:44:b3:15:75:90:58:58:66:cf:de:59:4a:b5:0d:
7f:be:5e:62:f6:58:d1:19:5c:0f:82:8f:47:c1:8d:1e:58:f5:
68:71:04:a8:05:99:34:53:49:21:50:61:f4:96:4e:81:c8:44:
ba:5b:c8:82:ad:c8:35:22:d5:dc:06:70:38:46:7f:34:28:37:
f9:3b:2a:13:4a:1b:0c:97:58:7c:e7:85:83:99:ee:2b:d7:94:
98:05:4e:74:11:52:7d:cb:35:2b:51:03:3c:d8:57:2e:79:e6:
d2:a1:f5:77:37:5a:05:9b:06:12:2a:e9:77:b2:45:20:00:d3:
f3:65:60:b8:1f:7e:88:e3:0e:55:6c:bc:26:eb:ff:f9:c4:93:
5f:d5:ce:ff:52:39:c6:59:7f:5d:93:52:ae:05:c7:05:18:13:
77:dd:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:30:39 2025 by rpki-client