Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: aDp4q5aj9K4lnC69fNCmpHdaRLBVCh1z1dH3I6MVNOU=
Subject key identifier: 7D:3C:9D:8D:10:12:DD:66:E3:F5:7D:EC:AF:64:D4:3B:BF:E4:F2:62
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0196BC6E3E35C3D6F79CB6066C85E5253148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0949
Signing time: Sat 10 May 2025 23:01:03 +0000
Manifest this update: Sat 10 May 2025 23:01:03 +0000
Manifest next update: Sun 11 May 2025 23:01:03 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: Hs/LFbxdeFI/BCgxpO3Yvy1MTQ3AecpaTgSt7/oLVEU=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3e:35:c3:d6:f7:9c:b6:06:6c:85:e5:25:31:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: May 10 23:01:03 2025 GMT
Not After : May 11 23:01:03 2025 GMT
Subject: CN=7d3c9d8d1012dd66e3f57decaf64d43bbfe4f262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:12:9e:39:98:ae:36:c4:ea:87:2e:18:7a:
be:be:d9:6d:f3:28:78:2a:6e:b9:02:c9:1d:69:26:
92:c3:35:b4:b1:72:3d:1a:3e:68:3b:4a:4e:4f:2e:
fc:6b:79:b9:e9:1b:1a:9e:29:49:2a:a3:84:ff:f2:
be:9e:e8:c8:46:08:2d:f5:33:27:a5:3e:0c:9a:8e:
a1:8f:80:fb:9a:66:8b:f7:82:5a:7f:5f:fd:76:2e:
1f:26:87:0d:b0:5f:37:33:1e:8b:d5:95:eb:05:56:
9b:e8:17:b4:0f:14:23:b7:a8:eb:7b:cb:cd:00:83:
96:0b:09:b4:ba:85:d7:cb:ac:e9:67:2a:05:28:6e:
c4:ee:7a:ff:b7:3b:06:db:dd:a7:56:80:7f:d4:b8:
15:08:09:9a:28:05:4f:f9:09:7b:34:5d:47:49:93:
48:f1:16:47:78:9c:a7:c0:6f:c9:26:79:66:fb:ff:
8c:42:86:8d:27:30:42:2e:38:ff:d5:a6:05:b6:fb:
50:7f:47:de:35:7f:97:f2:ca:8c:f6:f3:83:86:7b:
cb:11:5d:99:29:48:95:33:7e:ce:7e:a6:98:ec:29:
44:7f:0e:7a:36:c4:d5:01:1d:de:40:04:66:ae:93:
77:18:47:fa:18:7b:ad:fa:e7:4c:1b:aa:95:f3:69:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:9D:8D:10:12:DD:66:E3:F5:7D:EC:AF:64:D4:3B:BF:E4:F2:62
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7c:7a:a2:94:11:7c:d1:61:1c:da:84:01:8a:a0:4a:0b:be:
06:e6:26:8f:6a:8f:43:ea:a9:9b:fb:82:13:fa:dd:b4:72:80:
ba:25:68:3b:6a:c8:65:53:ab:9b:2b:99:a1:02:d3:48:f7:68:
c9:23:2b:54:71:6b:9a:f0:a5:bd:7a:a9:82:d5:6d:1f:21:59:
e7:20:44:52:21:73:05:b0:42:55:2c:30:47:8a:05:10:6b:87:
6b:c3:f7:27:f3:72:1e:65:1e:45:31:22:3d:7a:df:06:3c:28:
7d:20:25:64:10:80:11:f7:7e:27:99:66:af:d8:75:7d:e1:a5:
1e:05:b6:82:85:3d:08:09:ae:78:0f:c1:cb:ca:c3:77:d6:5e:
7e:ac:23:6c:28:d7:56:f7:5f:0d:1a:cc:4f:f6:4d:bf:ca:3a:
9b:2e:39:1b:e3:6c:a7:37:b6:a2:9d:9e:b0:c9:81:90:7d:98:
69:49:fa:4a:f9:34:eb:0c:fe:17:79:5d:4f:67:2f:1f:cd:ff:
6a:a2:68:61:e4:0a:8d:6d:31:3d:d2:93:e9:40:41:80:10:f8:
e9:1d:e8:79:f4:3d:71:d0:33:e9:7d:85:b7:76:a3:69:f2:63:
dc:ec:38:0c:19:47:3a:eb:50:a3:29:78:b7:74:e4:09:9c:de:
ce:fe:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:15:27 2025 by rpki-client