Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: 61umbQ3vlcIAR0KnMML7Cz5rhtRcAbGXpCnjurSt/pg=
Subject key identifier: 7D:63:75:83:90:10:8B:11:6E:8B:94:AF:D4:CA:77:CC:51:B7:95:BF
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0196BE5C15F9474A2171D561DEBC8E2A80C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 08:00:28 +0000
Manifest this update: Sun 11 May 2025 08:00:28 +0000
Manifest next update: Mon 12 May 2025 08:00:28 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: gPX2Xt8YWtKaU3o0fXp5b+7lvMx7bqk2jFQiZg6URSY=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:15:f9:47:4a:21:71:d5:61:de:bc:8e:2a:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: May 11 08:00:28 2025 GMT
Not After : May 12 08:00:28 2025 GMT
Subject: CN=7d63758390108b116e8b94afd4ca77cc51b795bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:a6:04:b9:2d:38:e0:77:19:51:44:f0:9c:
60:68:69:c2:19:cd:dd:71:93:3f:20:8b:5c:69:62:
a6:12:ed:1b:fb:fb:ff:5b:5a:61:ec:98:c6:5d:ea:
b2:36:b3:51:cb:a6:c2:05:38:0f:5b:99:86:ac:4f:
dc:b8:ac:5b:e7:54:fc:27:2a:34:92:f7:ca:26:5a:
b7:02:a4:71:3e:80:c9:95:f0:80:4f:fa:ff:59:71:
ae:d8:6a:27:a0:43:14:9e:02:ca:8e:38:26:7f:9e:
ee:ee:1d:18:0d:98:d2:ac:1c:00:ed:89:75:54:cd:
ea:5f:d8:3c:aa:8b:6c:34:a1:8c:63:8a:bd:24:c9:
61:e4:bb:25:21:10:d9:d9:2a:83:bb:72:18:b7:1c:
74:1e:a4:89:d2:06:0a:55:b7:5c:8c:d9:d7:57:54:
bd:ea:11:a7:0f:1d:56:b7:2a:1e:02:9c:d1:25:3c:
9a:d8:09:9f:7f:ac:d3:e4:f6:a1:37:d4:d1:4b:6e:
43:ac:92:04:bc:4f:89:6c:53:81:3b:d9:b5:e5:b1:
d2:cb:18:37:72:26:d4:dc:e8:44:2d:ae:0c:1f:5a:
68:de:fe:32:ff:b1:5f:d5:99:7b:30:79:a7:28:06:
dc:9e:95:db:08:37:e3:f3:8f:7e:18:5a:a2:76:d7:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:75:83:90:10:8B:11:6E:8B:94:AF:D4:CA:77:CC:51:B7:95:BF
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:66:e3:eb:c0:1b:55:ad:0a:a7:d6:33:19:a5:f2:3c:53:fe:
27:3c:ba:b5:75:55:67:30:00:f1:39:7f:ec:22:0f:af:c5:1c:
c9:f7:35:de:63:6c:fb:2a:3d:cd:a8:04:c1:d2:e3:f1:6d:15:
15:e3:1f:5b:d5:51:22:4a:94:01:e6:06:c7:f6:cd:22:d7:57:
a1:2b:65:0b:58:c2:d7:4c:6b:b9:b1:b8:e8:db:dd:9f:63:f3:
13:a5:c5:ae:c5:94:22:d8:32:89:2d:bd:1d:52:96:e7:83:c9:
4e:95:41:d3:43:76:ae:aa:6d:2b:bd:19:ac:05:f6:31:af:3d:
bc:29:98:21:1b:11:eb:a6:f2:c3:3a:a3:22:2b:cf:f2:89:47:
92:4c:a5:72:c8:53:b6:69:f8:d5:6d:c4:ef:cb:0c:92:ca:57:
0c:26:da:d0:6f:a7:3c:2e:99:57:7a:79:eb:f9:a1:12:00:99:
42:3f:60:a6:04:6e:c3:23:d1:60:d6:a0:0b:1d:b8:26:5e:27:
86:ec:60:ee:aa:8d:48:9b:2b:84:de:3b:57:23:81:12:71:53:
ce:81:41:6a:0d:fd:83:6b:36:02:ee:dc:5b:05:ae:3e:ad:3b:
a4:ab:c9:45:4b:ac:46:d8:db:f4:bf:fa:23:1a:d0:71:05:af:
76:f1:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:50:08 2025 by rpki-client