Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: n5LqK2FvSYZXRmvhwixtACmnPDrAU6RiQPMVEPqQ0EM=
Subject key identifier: E8:20:A4:63:9E:7F:74:7D:31:6C:56:B4:50:9E:39:29:05:3E:47:DF
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 0196BD49A657C11A83402F20735882C6750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0EED
Signing time: Sun 11 May 2025 03:00:42 +0000
Manifest this update: Sun 11 May 2025 03:00:42 +0000
Manifest next update: Mon 12 May 2025 03:00:42 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: Pzz+13ZUYpBoGdICITevpFUW53m9HrgBquthIGD40nM=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:a6:57:c1:1a:83:40:2f:20:73:58:82:c6:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: May 11 03:00:42 2025 GMT
Not After : May 12 03:00:42 2025 GMT
Subject: CN=e820a4639e7f747d316c56b4509e3929053e47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:2e:1a:b6:bd:03:ba:7e:59:62:34:78:41:
c9:ef:ee:a9:e0:54:36:d4:2e:97:47:fe:e0:e9:70:
0f:e4:ad:85:07:cb:98:69:84:45:89:71:a7:a8:25:
30:94:f7:63:69:d3:ce:b1:f8:8a:0f:9f:d7:2f:23:
b1:b2:4e:e3:44:d8:fe:17:61:8d:1a:a0:ed:dc:b6:
09:f3:5a:2f:de:7a:e9:1f:c1:67:b0:3e:5b:b1:85:
95:d6:f8:36:3d:cd:d3:1e:0e:9b:e6:d6:cc:85:44:
54:12:a1:f5:64:68:2f:2c:8f:e5:3c:9e:d1:5e:48:
93:c0:04:b9:51:8e:43:02:fe:68:af:a0:29:8c:64:
cf:ce:51:40:6e:d5:41:51:cc:7e:63:ec:b1:8b:80:
0e:3d:da:47:3b:f6:f9:32:d1:76:b0:d3:06:e2:5a:
60:49:b5:0a:70:9f:ea:e5:f6:94:ff:4c:07:aa:88:
ff:b5:98:d8:01:14:0f:ae:e3:6e:b6:0f:9f:7b:2c:
9c:7b:f9:9f:c1:81:49:ad:2e:93:ee:be:a1:99:61:
74:02:84:1d:52:b7:6a:fa:33:ba:fe:c0:93:1f:2a:
4f:8b:20:d7:b2:04:a9:49:51:8d:5a:44:ce:64:6d:
0e:a1:af:99:04:69:6e:6a:b5:65:82:10:79:73:51:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:20:A4:63:9E:7F:74:7D:31:6C:56:B4:50:9E:39:29:05:3E:47:DF
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:c6:6e:2d:ac:fe:32:ac:da:e0:95:e0:d8:56:07:8c:8b:
cb:ce:c0:d3:24:87:96:c6:6d:88:8e:7c:06:7c:ab:c7:1a:df:
a1:ec:21:6b:41:e5:39:17:a6:a7:40:19:25:c8:86:39:e5:ce:
62:72:bb:98:f0:c7:69:66:49:ff:3d:93:e0:a4:c9:9d:7d:4a:
95:d3:6a:d6:8a:8d:62:5b:20:50:45:0e:e0:c1:94:5b:c7:e8:
e2:47:9e:c1:61:09:b9:59:a4:5a:15:f5:c4:bc:05:95:02:37:
af:d0:40:25:ec:3c:eb:95:57:43:22:98:8d:ef:8a:eb:21:1a:
5a:9e:2a:d9:83:d9:1b:2d:cf:8a:18:b5:2d:5c:19:87:b6:c4:
3b:87:0b:de:08:d4:df:b0:13:c7:80:da:39:07:32:69:fc:f7:
28:91:b1:3d:36:3b:3d:56:03:ab:da:1d:94:e9:49:89:76:7c:
29:54:cf:d8:15:d8:26:f7:a6:e9:93:94:a0:99:7f:ff:2c:2f:
d5:2e:46:5d:b0:dc:7e:b9:10:8f:60:70:0b:af:43:0f:25:d1:
82:df:ca:ff:38:ca:50:7d:14:b6:ed:f0:43:0c:88:a3:02:42:
f7:a4:d1:57:e0:35:23:e4:ad:cb:1c:c2:f9:02:db:6f:55:48:
b1:a5:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:31:27 2025 by rpki-client