Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: QlIKnnIhWfwtArYO8NDsEJw7vihui7N9ErS5MkeagFI=
Subject key identifier: 77:CD:9A:68:D3:1C:D0:DD:84:6B:40:BF:A9:E5:BB:E3:12:91:1E:2B
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 0196C3BA16FE1BE6EBF806FD4D78E042A39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 05BC
Signing time: Mon 12 May 2025 09:01:14 +0000
Manifest this update: Mon 12 May 2025 09:01:14 +0000
Manifest next update: Tue 13 May 2025 09:01:14 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: yQrJUtLTPutec6h+axM983ASjztK0aRQXlgzeNpR9XA=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:16:fe:1b:e6:eb:f8:06:fd:4d:78:e0:42:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: May 12 09:01:14 2025 GMT
Not After : May 13 09:01:14 2025 GMT
Subject: CN=77cd9a68d31cd0dd846b40bfa9e5bbe312911e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:5b:12:74:72:aa:50:8c:7d:57:8a:6a:6c:
44:1f:51:aa:91:59:78:46:0b:45:c4:c4:cd:fa:e4:
85:3f:3f:6a:64:99:5d:c8:2a:70:32:92:47:dc:b3:
02:03:a0:cc:c2:df:6c:a6:96:67:bc:76:96:d5:83:
75:90:64:e7:55:d3:55:4a:15:76:34:8b:75:d0:ec:
7e:91:07:81:11:63:c7:ff:b6:bb:19:e9:0e:a1:c2:
a5:74:56:bc:62:d6:6b:44:82:61:28:a7:d3:db:1c:
1a:84:64:8e:44:b3:ed:82:f9:79:37:46:a2:b9:d4:
7e:55:77:b0:d0:3c:04:d6:eb:b1:08:92:77:10:f2:
bc:ec:bd:d4:5f:a8:66:a7:3c:9d:01:43:b0:c2:a3:
56:c5:46:77:9d:53:b5:42:8a:6c:c9:2a:68:ea:92:
a1:b3:af:c6:8d:92:f4:63:aa:03:90:f7:f0:de:ac:
b6:bc:65:cf:3d:c3:53:cb:fa:61:be:f0:6c:72:58:
bf:cf:f5:13:b6:36:0e:7b:40:81:20:1f:e6:a9:f4:
96:4f:42:5b:ab:de:de:b5:18:ae:a2:14:d5:3e:c9:
bf:61:9f:79:f4:08:a8:fa:8d:13:fb:b2:f4:80:1b:
44:c4:3b:1e:dc:07:32:cd:1c:17:f9:9e:ae:72:68:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:9A:68:D3:1C:D0:DD:84:6B:40:BF:A9:E5:BB:E3:12:91:1E:2B
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:bb:64:1d:93:b8:8d:0a:2d:bb:aa:9b:ac:39:9e:f3:d5:
82:a2:74:73:84:da:c7:25:6d:41:33:eb:9a:bb:ff:42:f0:9d:
d6:ef:4c:dc:29:c5:2f:4d:1c:e8:0c:ec:db:45:18:7d:12:9d:
12:6d:ec:43:3b:68:10:b7:83:8e:0e:85:49:a7:ae:40:c6:33:
a9:6c:62:8e:22:e9:53:98:d4:47:28:06:c4:59:37:05:f9:ba:
2b:4c:05:44:05:7e:db:db:de:ef:b8:06:50:df:1e:eb:65:28:
9e:d3:96:3d:e5:ac:5b:a8:87:a9:de:86:3f:43:80:11:88:82:
f3:2b:a9:be:da:b1:76:55:8a:f9:8e:e0:b0:d1:fc:52:a8:f0:
49:b7:09:94:f2:d6:d5:1a:37:28:ab:25:cb:72:99:79:d7:72:
aa:a8:6c:2c:68:e2:5c:b6:fe:d3:c4:9d:86:b4:5c:96:0c:04:
8f:8f:3e:a0:3b:10:cf:d6:c3:4f:ea:1a:37:f2:64:65:2c:0b:
ee:39:2e:75:d3:d8:bb:47:0e:4c:8d:a1:d7:57:0c:01:d6:a4:
b9:1f:0a:d6:51:96:74:38:76:41:80:6b:fe:91:94:50:ef:f4:
5a:ed:3d:c0:cf:c7:ae:00:2f:17:50:81:e2:47:47:bf:01:ee:
7d:34:16:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:05:52 2025 by rpki-client