Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: jBOYYvGeKXe+ij6WuD2ntSkI75lymUVKCfgTGeHMnu4=
Subject key identifier: 6E:72:76:FE:84:9E:64:23:59:7B:9A:C9:B0:C8:4F:77:97:40:1C:43
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0196D8F7FEEEDD015BD64692D623841A8635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1545
Signing time: Fri 16 May 2025 12:00:53 +0000
Manifest this update: Fri 16 May 2025 12:00:53 +0000
Manifest next update: Sat 17 May 2025 12:00:53 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: MDyeKa1xTfQpA/PGCjjJTAYQfnhE7sJAw2fRyk2D7kk=)
2: khdNE-TXPiQU7_zhseWvcPNxKjs.roa (hash: Y6s3dJ3krWnGKL8gHHrqA2GAVorou6mJqcyj5OaAz3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f7:fe:ee:dd:01:5b:d6:46:92:d6:23:84:1a:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: May 16 12:00:53 2025 GMT
Not After : May 17 12:00:53 2025 GMT
Subject: CN=6e7276fe849e6423597b9ac9b0c84f7797401c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:78:88:94:d7:74:79:8e:af:7f:93:ab:61:
40:da:14:28:be:6c:2b:f3:da:13:82:65:c0:70:d2:
4d:80:22:e7:e3:f6:b2:4a:2a:72:ad:07:3f:7a:81:
a1:90:a8:9b:0d:a3:b9:7d:65:f3:6b:f5:cd:c0:a6:
44:90:d6:0d:74:c5:4d:66:35:59:5e:9b:cd:36:27:
5f:91:6b:0f:ba:ea:55:c4:d0:c6:c6:0a:20:3e:04:
6a:69:56:85:da:35:bb:91:4e:67:d3:cb:b8:b7:fb:
ea:ea:78:9d:6d:04:46:6c:09:2d:2f:25:bc:b4:c8:
97:8e:54:c4:f9:41:3d:da:6d:20:46:a1:e0:bc:d6:
ba:d1:7c:13:81:05:18:31:61:73:6d:8d:a4:45:87:
6c:a2:f6:a7:4c:00:2b:73:f9:f3:0d:86:48:00:ba:
fe:3d:39:66:b4:6d:be:0e:c5:10:6c:8e:17:5b:10:
fb:a7:e2:f8:27:2e:e6:cb:e5:a6:63:ad:ef:c9:9e:
18:40:2e:ac:c8:64:0f:9a:a4:64:f4:69:e2:25:e8:
86:97:c1:5d:2f:50:59:41:c0:f6:1c:2c:7a:55:85:
67:36:51:df:a8:f3:4a:04:bc:5c:62:e3:b4:d9:f2:
39:14:06:10:96:1c:83:eb:44:7c:14:2e:94:2e:97:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:76:FE:84:9E:64:23:59:7B:9A:C9:B0:C8:4F:77:97:40:1C:43
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:90:42:9f:eb:30:87:bf:5a:3b:f8:0f:0b:3a:de:17:2f:2f:
9d:9d:53:31:12:0e:5d:15:d6:ca:2d:52:4d:11:d2:3d:ec:7f:
30:f6:86:40:c1:9c:23:3c:b8:34:7b:b6:66:77:ee:26:b0:aa:
d2:3d:54:96:94:a6:b1:33:b7:c2:d1:91:f4:7c:92:6f:19:1d:
81:2a:8c:61:1d:05:ed:3f:8b:13:96:4a:44:2c:42:c0:af:63:
4c:80:e2:b8:90:ba:eb:0d:bb:27:e4:db:a1:5c:d6:f6:94:b6:
f6:11:7a:b5:30:96:81:01:3d:18:0d:3a:8b:24:52:74:22:f6:
38:59:88:c3:da:2a:76:89:7b:64:92:24:0c:fa:7e:e9:15:0c:
86:62:65:38:b2:79:72:75:fd:5c:77:9f:05:6d:7b:a2:ca:78:
86:fa:34:58:dc:d0:b9:fc:97:3b:e8:4f:34:ae:ac:dc:d9:c6:
ad:97:72:20:44:d9:90:87:01:2a:cc:7b:97:4d:c4:e6:45:c9:
11:01:a6:1b:c8:4a:65:e9:10:99:ec:7e:6c:b5:68:0e:01:b0:
8c:a1:a1:d9:7b:c8:d2:2b:90:d5:fe:bf:33:7d:94:27:8e:39:
29:c2:97:c4:03:82:e8:65:e5:32:2c:88:5e:0c:bf:2a:b9:a2:
b6:f5:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:03:30 2025 by rpki-client