Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: oNFEotHf4I8URjDfPD+/yWqA8MnChJ8+etn47XX6l3c=
Subject key identifier: 74:8C:51:3F:62:A7:2F:F4:93:54:80:10:4F:D5:37:B7:80:CA:B4:7B
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 0196C98523FFBD2EC76D2924D0B62997A956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 022F
Signing time: Tue 13 May 2025 12:01:07 +0000
Manifest this update: Tue 13 May 2025 12:01:07 +0000
Manifest next update: Wed 14 May 2025 12:01:07 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: KsV6MFSukEjSyFcX3R0mVDMHVf0mhcwTko1CKLlNBG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:85:23:ff:bd:2e:c7:6d:29:24:d0:b6:29:97:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: May 13 12:01:07 2025 GMT
Not After : May 14 12:01:07 2025 GMT
Subject: CN=748c513f62a72ff4935480104fd537b780cab47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:e0:a7:88:fe:4b:5d:35:ad:5c:fd:c3:b2:
cc:29:99:02:9d:f7:43:3d:d0:26:6e:03:a4:3e:d6:
8f:28:f2:b0:53:90:3c:91:d1:dd:1d:27:9a:ab:e8:
ca:ed:1a:ce:40:76:f1:94:18:60:7c:df:f5:56:61:
28:4f:d1:5d:3f:b8:8c:64:af:f9:6a:f1:7b:51:5b:
9b:49:b2:0d:6a:d4:7a:dc:05:eb:99:7c:ce:09:ef:
4f:02:a0:61:9e:e1:76:6e:22:51:ad:0f:a6:ed:85:
db:b9:71:9c:f7:3e:0d:e6:06:05:3e:ed:8c:d6:dd:
9f:89:44:2e:66:2a:e1:e6:96:80:c2:8b:79:68:b5:
33:b8:c9:e1:62:50:dc:3e:88:b8:26:95:2e:c8:f5:
9c:20:87:a1:c6:ca:5c:7f:92:34:db:36:06:1c:93:
04:d0:24:90:6f:44:fc:d4:0e:b0:dc:a4:8a:47:ac:
76:e5:5e:b1:04:00:3b:ca:a1:5c:67:77:2b:3a:9e:
05:2f:a0:bf:a3:bf:f3:9f:44:e6:18:1a:f8:7d:61:
1f:de:59:d6:87:e1:91:37:ca:3f:35:00:ec:3c:6d:
47:41:d6:44:3a:c8:50:57:75:61:48:7b:94:58:10:
a0:c7:1d:55:db:d0:79:64:02:c8:19:4e:bc:32:22:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:51:3F:62:A7:2F:F4:93:54:80:10:4F:D5:37:B7:80:CA:B4:7B
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:91:a8:cf:e4:7b:07:02:db:02:76:7b:7e:e2:82:82:9e:
cf:33:bd:71:ce:e8:a0:8f:ff:dd:0f:94:0c:86:92:e4:35:38:
dc:e4:b5:9a:f7:78:b0:8e:70:b5:20:b5:66:00:44:fa:29:6a:
f3:be:c1:b7:c2:c8:ab:dd:f0:1d:30:6b:78:6e:94:a8:cb:6b:
59:48:95:a5:42:71:3e:9e:8c:4f:c9:e9:97:bd:95:db:e7:ac:
ba:33:0d:16:b2:ea:e4:a3:e8:e4:56:8e:49:ef:34:d6:41:61:
52:3a:9c:28:69:db:42:13:06:e1:0c:7c:bf:7c:8b:b7:f5:d0:
f9:f1:aa:d4:50:2c:8b:a0:55:ef:6e:b6:d0:6c:94:e6:e3:95:
78:74:e8:8e:6f:73:09:b2:5c:c9:a6:88:60:1d:9a:08:79:3d:
44:ee:5f:d6:b5:6e:5d:43:3e:26:1b:1e:13:0b:9a:37:2a:51:
0c:13:2d:50:27:2a:9a:3d:c3:1a:67:d4:ea:41:d5:ff:29:71:
dd:cd:81:16:f4:3e:eb:80:c4:12:69:d0:a9:13:71:74:7f:3b:
c9:05:63:38:6d:44:a7:9f:ed:a1:eb:2c:b1:a5:a7:1c:31:e2:
25:ce:90:72:63:ea:fc:20:ce:06:ca:72:46:e7:f5:d5:cb:ab:
49:f2:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:47:41 2025 by rpki-client