Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: fEetsIfYfeIdb1vL3e+oZrheyPiMweC0h4hH0jV/rBQ=
Subject key identifier: 8A:57:8F:8C:76:29:F2:32:42:C2:15:8B:68:7A:67:56:A8:9A:08:A7
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 0196C1CADA5EC95F217E3491E2A6E74B7E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 0510
Signing time: Mon 12 May 2025 00:00:18 +0000
Manifest this update: Mon 12 May 2025 00:00:18 +0000
Manifest next update: Tue 13 May 2025 00:00:18 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: nGFUDGny6QKnoXjjcWQJybTrgFKCvjVUgFM2eUbkYE4=)
2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:da:5e:c9:5f:21:7e:34:91:e2:a6:e7:4b:7e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: May 12 00:00:18 2025 GMT
Not After : May 13 00:00:18 2025 GMT
Subject: CN=8a578f8c7629f23242c2158b687a6756a89a08a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:4f:24:86:f7:22:74:64:67:31:45:36:77:
d0:6e:8b:70:80:e7:ce:01:2c:1e:40:dc:bd:fa:c0:
4c:cf:cb:85:4e:5b:cb:8b:c4:d5:38:99:01:04:98:
73:fc:ed:d1:f0:8d:8b:fd:f8:e3:1a:8e:c9:01:60:
38:b9:3c:d2:95:a1:a6:a0:a3:01:eb:f6:13:01:0f:
96:a3:90:45:f3:e6:1e:9e:2f:ac:dc:06:3e:92:d7:
cb:03:ec:b4:99:ef:ef:1e:4c:be:b4:c2:8e:de:3e:
62:41:3a:24:2d:8c:2c:59:9a:5d:f7:c4:ba:2c:01:
44:df:f3:c1:d4:98:cd:08:44:b7:41:98:81:3e:2e:
b2:b2:20:77:44:fd:ac:ff:33:de:68:2c:dd:00:0d:
7c:1b:21:cb:d8:fe:b7:67:0a:93:26:1c:50:e1:0d:
32:95:67:4e:e8:39:f4:c1:00:56:92:d5:8a:de:6d:
b8:b2:71:7e:cd:17:6b:df:9d:b5:e1:e5:49:cb:51:
d9:d2:4d:58:d9:f7:09:d8:e7:e0:1c:ab:2c:a5:b6:
01:0b:dc:56:34:db:8b:31:e9:a4:86:63:ec:28:f6:
36:63:8c:67:34:9d:a5:cf:f7:8d:88:55:74:23:5d:
c9:36:4a:93:91:41:54:cc:23:2e:af:a9:9e:b4:2e:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:8F:8C:76:29:F2:32:42:C2:15:8B:68:7A:67:56:A8:9A:08:A7
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:df:76:b2:6b:75:1d:55:62:23:95:ca:fd:62:20:85:1a:
4f:f1:2a:68:5a:71:f2:40:08:db:e2:b4:6a:ad:92:96:80:65:
f7:08:73:ad:71:d7:d1:32:7b:c4:c4:d3:1a:e7:62:f5:a3:a1:
63:14:01:6d:1a:6d:2c:91:76:02:3c:b8:4e:1c:55:ed:c6:11:
de:72:54:22:95:bb:3e:99:09:10:3a:70:66:c8:8a:f9:fb:3b:
59:d5:13:be:60:fd:d2:c9:ca:08:39:af:06:93:51:82:33:34:
fc:96:a9:18:35:f6:47:0a:f0:0e:1b:d3:ab:08:25:6b:9b:3a:
f6:5b:23:bc:7f:b2:c6:f7:ac:a3:da:f0:fb:01:7a:5b:43:c3:
22:fc:a9:cb:e6:15:a9:cc:14:5c:a9:a3:47:69:8f:0b:ca:89:
d5:54:40:61:aa:c1:15:e4:53:c9:90:48:d2:24:ad:dd:0d:9e:
61:d6:a1:ef:2d:bf:a8:76:9e:40:60:ef:75:d7:14:20:c6:2c:
6d:96:d2:08:07:b5:61:04:1a:cc:db:60:ea:2c:0f:f4:3d:13:
fb:db:97:ec:d9:48:42:96:c2:90:45:71:aa:f2:f2:14:9c:e1:
11:56:44:8b:cd:ea:b1:1d:6b:e9:88:97:8f:95:4b:65:43:48:
aa:1e:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:44:05 2025 by rpki-client