Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: MvXzlNjI7f9w4LNiAnxo2G3i0O235pI0OjkwvtVsE7g=
Subject key identifier: 08:DF:42:4F:FB:22:29:B9:75:AF:B5:E9:50:20:B3:21:31:ED:E9:51
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01969DF60763B384774C50954F492C5E0190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0194
Signing time: Mon 05 May 2025 01:01:08 +0000
Manifest this update: Mon 05 May 2025 01:01:08 +0000
Manifest next update: Tue 06 May 2025 01:01:08 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: /1oepVZfBnzpNFQjfbW0tqg8kMP3Xl1O58VKz5qiWig=)
2: bQzf2uMGkgXH3X2QS8uIrSp74eU.roa (hash: YLxBLk8jjfgkyujII1/AehF/PxCPTNN02Psu8lVMfcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:07:63:b3:84:77:4c:50:95:4f:49:2c:5e:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: May 5 01:01:08 2025 GMT
Not After : May 6 01:01:08 2025 GMT
Subject: CN=08df424ffb2229b975afb5e95020b32131ede951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:4b:14:af:e4:27:1a:2d:46:59:cd:cb:c3:
76:2b:b2:17:ad:ed:66:d7:7e:13:3b:c2:5b:42:63:
7c:87:91:de:4d:08:e7:fe:8f:8e:98:b2:16:9a:fa:
52:00:c7:52:99:17:07:b4:ac:70:72:5e:9c:66:9b:
af:e2:4a:57:f4:74:56:fa:5d:44:ab:bf:49:08:1c:
2c:5a:0f:a0:b9:06:7b:8e:bb:44:f2:c1:24:76:43:
2f:a8:bd:69:05:e0:aa:19:ee:ec:f8:2a:7d:c4:a6:
cb:0b:94:55:00:51:80:e2:2b:b6:5a:65:ad:36:6c:
3a:82:ee:b5:4f:45:d4:2b:d4:38:93:b7:4d:1a:63:
21:3d:03:9c:d4:2d:41:1b:b8:33:1b:b5:97:c8:21:
97:82:a1:0e:46:37:8c:e5:42:d5:4b:31:b8:17:50:
46:ad:cc:ff:88:aa:8b:a0:a3:07:bb:9b:fb:b3:a8:
ab:ad:37:b7:ed:b0:36:5f:2c:44:6c:dd:71:4c:79:
2d:39:10:18:26:21:50:5a:f2:36:dd:fc:3b:be:39:
d0:5d:b2:eb:1d:c5:a9:ed:fc:cd:98:6e:78:20:fc:
35:25:ad:8f:d1:13:03:0e:98:00:30:d0:2c:2a:93:
08:35:66:5a:28:93:19:0a:a1:47:76:d5:00:24:17:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:42:4F:FB:22:29:B9:75:AF:B5:E9:50:20:B3:21:31:ED:E9:51
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:81:8f:f6:cb:7f:e5:32:82:d8:30:69:6f:40:54:2e:23:14:
06:eb:32:80:3c:a2:f9:28:db:12:d4:ec:09:c5:38:47:88:c7:
03:53:4b:2d:82:bf:c6:55:c2:81:53:db:0f:d5:cd:dd:f5:cb:
e4:90:be:c7:ac:ef:1d:28:44:37:06:dc:ba:df:ef:81:26:fb:
7b:92:32:27:81:46:51:37:c3:1b:52:5c:28:8b:23:0f:98:cb:
f2:85:55:27:54:7b:28:29:cc:ab:18:1c:47:de:dd:b2:95:e1:
10:12:44:fb:eb:74:c4:d1:9c:98:26:ef:ad:7f:69:a5:6e:3f:
a9:8b:18:22:aa:c7:09:86:c0:ef:c5:4f:0c:13:5e:16:dc:20:
8d:5b:ff:67:39:07:37:29:e6:95:f2:75:08:c6:e3:38:9d:86:
63:c1:da:b2:c9:78:6c:54:81:c4:f9:e5:0d:fd:7e:f6:a6:2b:
fe:15:fc:c5:c6:a8:50:0f:1d:52:7b:a0:c3:d4:0e:53:0e:57:
24:0a:94:cc:d3:e0:10:f6:00:0c:a7:10:59:5b:14:de:92:b5:
27:bf:93:4a:ef:f1:86:2b:2e:81:39:5d:93:03:35:e8:60:34:
3b:e6:11:cd:79:21:74:85:ab:c4:41:91:d7:02:27:59:84:09:
41:eb:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:41:23 2025 by rpki-client