Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File: CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier: 7+O0S1uQLg5oLQHtvwiLKBjtSWroauSIYYMuOnMLORg=
Subject key identifier: 5A:CE:4F:A8:43:E9:C7:41:0F:D7:2D:7B:7A:CB:21:06:17:FD:D1:7C
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer: /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial: 0196BDEE6E4F0FCF712AE0AF6791A997740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number: 0D28
Signing time: Sun 11 May 2025 06:00:41 +0000
Manifest this update: Sun 11 May 2025 06:00:41 +0000
Manifest next update: Mon 12 May 2025 06:00:41 +0000
Files and hashes: 1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: e+iaIgET6Bk7dq4x9eMbNLJnWRyK/FUGsjHkRQnguIY=)
2: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (hash: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:6e:4f:0f:cf:71:2a:e0:af:67:91:a9:97:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Validity
Not Before: May 11 06:00:41 2025 GMT
Not After : May 12 06:00:41 2025 GMT
Subject: CN=5ace4fa843e9c7410fd72d7b7acb210617fdd17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:44:e2:21:3c:c3:e1:3a:08:5c:f6:c1:c4:
e0:fa:b3:5e:73:b8:27:4b:9c:b5:d7:02:88:30:2a:
22:09:84:86:aa:8e:c4:05:40:ad:1a:ef:e1:2d:84:
73:59:94:98:65:4d:47:d0:2f:d3:e5:c7:3b:cb:58:
e6:eb:ac:57:71:66:e6:21:ae:75:6d:1d:5b:9e:dd:
25:f0:8b:4a:fb:64:66:56:7d:26:d1:70:66:8d:b2:
05:c3:a9:98:6a:13:7b:d1:4e:51:04:ac:19:24:13:
20:04:52:58:7c:5b:3e:55:e1:68:d9:bc:41:02:e9:
64:46:59:ba:b0:f2:02:80:67:00:d8:87:31:a1:2a:
af:5c:9d:86:c9:69:8a:77:26:a7:0d:b8:27:21:9d:
9b:74:b9:5c:68:e2:84:b3:9e:07:4d:ed:c2:7a:0f:
b3:35:ce:53:d6:ec:b8:2d:3a:d9:12:95:51:64:29:
59:53:82:c5:d1:8d:f7:ef:d8:b0:eb:77:24:30:17:
96:ed:25:af:cb:64:de:b1:2b:f7:23:d6:3f:8e:89:
0a:e7:ef:90:68:b0:6f:d8:c9:50:e5:b8:ee:82:36:
46:5f:05:e9:8f:cf:d5:4c:1d:fb:b8:28:5e:0b:b7:
2f:72:f4:55:9e:25:56:9b:93:48:73:8f:80:98:5e:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:4F:A8:43:E9:C7:41:0F:D7:2D:7B:7A:CB:21:06:17:FD:D1:7C
X509v3 Authority Key Identifier:
keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:41:26:2d:37:9a:af:8a:e1:0f:8f:00:24:b9:10:ba:2f:93:
dd:64:7f:e2:23:f0:09:3c:8f:7d:05:50:6f:53:44:5c:9f:4e:
85:3a:19:d7:e3:62:d8:80:e1:11:e6:9c:1f:e3:1a:49:87:31:
a9:ca:68:cc:84:9d:b2:b3:ed:4b:b6:1b:35:2b:7f:9c:2b:b2:
69:de:53:f0:cb:eb:69:8f:5a:5c:dc:52:9d:43:3d:69:dd:c1:
f8:84:ff:4d:b0:4b:7d:b0:a3:1d:36:c2:af:fd:7c:50:89:a2:
51:f3:87:a0:1f:40:a1:4c:8e:83:c0:2a:7e:1b:e5:3f:da:a4:
49:72:63:06:e6:4d:71:f3:93:39:d1:30:2b:d9:7f:fd:60:a0:
d0:51:ed:85:61:db:ec:9c:f7:67:ee:64:63:c0:36:9c:a6:28:
10:63:68:ed:87:2d:77:38:18:46:95:21:ed:b5:66:f0:63:78:
0d:82:c9:6d:01:d2:14:5f:d5:67:e8:4b:57:e1:0b:c9:ca:54:
71:55:7d:03:50:06:f3:36:f3:b1:56:06:b1:97:ce:23:5f:21:
b0:9c:d6:b6:a7:da:c2:91:fe:17:fc:8b:81:35:17:ee:e4:28:
47:8b:dc:83:25:de:d3:ca:f7:8a:c9:a4:68:16:bc:e6:3c:6f:
1b:db:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:39:26 2025 by rpki-client