Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: M0O6vZ/zP1dhfecl23EZQVVooQ3dtl5088fwjhXqlYE=
Subject key identifier: C2:C7:34:C5:65:E5:B3:6B:52:98:7B:41:FE:91:9E:71:92:58:3E:CC
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 0196A352C19A271CB4731D282C0B4A5DDAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 02:00:31 +0000
Manifest this update: Tue 06 May 2025 02:00:31 +0000
Manifest next update: Wed 07 May 2025 02:00:31 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: nG8GhfzTdyX9ldiL4A3lQEEbUaOK4Tsekvei33cHzxQ=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:c1:9a:27:1c:b4:73:1d:28:2c:0b:4a:5d:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: May 6 02:00:31 2025 GMT
Not After : May 7 02:00:31 2025 GMT
Subject: CN=c2c734c565e5b36b52987b41fe919e7192583ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:ba:af:a3:0a:7e:17:4b:f0:b4:01:6f:16:
51:01:ad:73:5e:61:b7:b2:e0:77:16:f5:c1:8e:48:
07:01:28:f7:83:3c:e6:b3:56:c8:e5:03:b8:d5:c7:
dc:a4:c6:84:fe:6b:09:3e:1b:7a:f5:eb:32:ee:10:
08:77:6c:d7:83:04:ed:93:6d:d2:c5:87:79:b0:c5:
31:ce:62:39:82:71:7f:f8:80:4b:01:8c:fe:e3:58:
02:de:c9:99:3b:30:ef:93:05:6e:87:99:cf:ec:3d:
b3:9a:93:2b:df:c8:5b:34:38:d6:72:46:1e:01:ef:
a1:4a:b3:70:e7:aa:01:33:b0:e0:42:38:66:f2:9a:
d7:92:48:b8:bf:18:04:1f:88:9b:61:16:8b:c1:a5:
0d:6f:d1:c6:ed:d1:7e:7e:a1:63:11:f2:2d:73:bd:
3c:73:ef:c2:0f:f2:6a:97:38:53:5c:74:63:3a:7a:
c0:88:8e:b1:92:ee:93:cd:e7:0f:24:65:44:d6:9b:
31:34:c1:d2:87:5c:26:fd:28:0e:53:43:9a:1b:fe:
c5:a2:f5:c2:cf:ef:ca:36:33:c6:f7:e3:27:f5:96:
c0:c8:6b:29:cf:3c:98:23:e1:54:10:91:c4:01:f0:
a5:f4:43:2e:a5:39:55:14:51:6d:6d:0c:bd:48:0e:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:34:C5:65:E5:B3:6B:52:98:7B:41:FE:91:9E:71:92:58:3E:CC
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:a2:bf:e9:e0:75:b3:1d:97:6c:6a:f3:c7:7f:90:fe:ce:
2d:38:ae:2d:b9:65:92:8e:9c:ec:1c:ce:d3:91:91:da:99:7e:
05:7b:de:4b:06:d1:66:66:79:dc:c9:d7:93:d7:5d:1e:5c:40:
6d:d8:a6:20:9d:15:56:93:ab:7e:19:8d:d9:25:de:14:b1:62:
e3:1c:11:e4:d4:b6:7b:de:71:b5:e5:db:73:f0:9e:88:fa:b2:
40:c6:59:11:aa:19:20:6f:dc:9b:e5:fb:62:8a:7c:81:ee:50:
71:29:f2:89:36:17:98:28:cb:25:0a:e3:91:0a:df:5c:87:7a:
f4:e2:ba:f8:7a:ca:03:8d:e5:db:70:8d:61:cb:a3:77:11:99:
25:b4:44:e0:70:dd:fe:62:88:40:49:71:73:69:0f:20:49:04:
3d:e1:72:18:ab:5f:34:78:de:e3:51:86:c1:d2:11:f2:4f:6c:
f2:cd:42:1c:2b:e7:c1:85:78:19:9c:66:6f:1a:0c:d8:44:2d:
75:8e:71:04:8c:6f:05:27:cc:f9:6f:c2:22:10:11:ce:94:47:
84:5f:df:88:af:fe:e7:9e:fd:71:4b:6e:c7:94:8e:59:72:d2:
b8:4a:95:c3:e1:8c:2d:f0:06:2d:f0:d5:0b:7a:4c:cd:2b:13:
b2:dc:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:23:00 2025 by rpki-client