Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: IXXpLWy3FapeRKJmRGuBad73aMkyJ3OlDWZKAYBJjms=
Subject key identifier: 56:FD:70:E4:36:63:00:60:CB:2D:18:2C:A0:98:2F:50:82:1D:99:5C
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0196C15D20042F66365F5B4F29ADA1D4B9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 06D1
Signing time: Sun 11 May 2025 22:00:27 +0000
Manifest this update: Sun 11 May 2025 22:00:27 +0000
Manifest next update: Mon 12 May 2025 22:00:27 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: +bWAY2n6x40feDEzxioEdkJ2RFw+zUHLn/qnbLyUT+0=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:20:04:2f:66:36:5f:5b:4f:29:ad:a1:d4:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: May 11 22:00:27 2025 GMT
Not After : May 12 22:00:27 2025 GMT
Subject: CN=56fd70e436630060cb2d182ca0982f50821d995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:46:e8:df:4a:9a:a1:99:5b:06:51:d9:99:
21:b8:9f:87:27:f7:68:ee:93:0c:d2:2a:e3:c0:50:
5f:4d:ef:5d:1b:44:45:db:a0:c4:7a:b1:19:6d:54:
2d:7f:9f:8e:cb:b2:ee:7e:4a:44:17:bf:44:c6:8b:
b6:5b:3d:c6:42:ab:af:62:81:6e:17:26:3e:a4:4e:
96:21:1c:c4:30:92:9d:5c:f4:ce:7a:05:1f:b0:2e:
fc:4a:4f:55:60:20:bc:81:bb:3d:dc:04:4f:c0:43:
0b:44:32:88:18:a0:f8:9c:4b:39:60:34:c3:2a:7b:
ef:9f:4d:22:0b:24:99:20:70:92:30:42:de:00:87:
80:4f:ff:b4:9b:42:a5:2e:bc:a2:0b:61:92:8f:db:
97:32:7a:89:c5:f0:3a:c5:79:f7:df:a2:bb:48:36:
ea:4d:63:73:fa:52:bf:1e:26:ed:05:c1:a7:66:80:
b4:69:8e:67:2b:eb:76:19:1e:9d:b5:25:2f:da:bc:
db:e7:49:eb:ff:46:37:17:a7:a4:61:c7:0a:ac:25:
7f:af:69:5b:0b:a8:7e:11:19:49:9d:26:d6:68:d2:
58:23:b1:64:ab:d9:d6:cb:a3:5e:14:13:40:4c:c1:
8d:12:38:04:28:52:8c:9c:3d:3b:d8:cf:1c:52:1f:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:70:E4:36:63:00:60:CB:2D:18:2C:A0:98:2F:50:82:1D:99:5C
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:7d:b4:b6:d8:da:1c:38:e0:a7:56:a5:db:3e:ac:f7:67:
d3:39:16:d7:65:76:76:28:c8:eb:bd:f3:46:d9:75:e1:f3:9b:
b3:29:dc:77:5f:55:7b:2a:ee:20:ba:a8:f2:bb:e0:de:3e:81:
e0:95:42:f6:37:54:9a:7d:4e:3c:88:66:9f:d8:e7:30:75:fd:
be:8e:da:4e:51:78:8e:5b:e1:39:d0:0d:85:aa:12:b7:16:51:
78:20:f2:5d:1f:33:b8:bf:8a:9b:6a:4d:14:39:b7:8e:8c:c5:
82:61:75:7a:9d:7e:3c:88:4b:7c:cc:43:ff:73:52:07:6e:84:
8d:1d:3c:17:be:0a:21:e8:e9:d6:7c:aa:cd:05:9c:5e:cb:22:
b0:0a:32:b1:ef:a6:78:29:d4:bd:e6:c6:ed:6b:14:9e:49:c5:
6c:b2:8c:b9:2f:77:e4:45:aa:9e:85:8d:49:57:35:88:25:3f:
68:6b:5b:87:0d:80:8c:1f:a6:a9:47:8e:92:fa:ac:06:f8:6c:
23:be:0c:47:fb:9f:87:90:e9:86:0a:9b:3b:1e:4c:09:bb:f0:
53:9e:5e:92:90:3e:41:70:61:34:0e:46:f2:ab:3d:08:ce:00:
7d:00:e4:6d:bb:cb:a7:b9:e8:31:33:d5:83:fc:41:5e:3f:00:
ea:b8:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:34:49 2025 by rpki-client