Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: pSvxFJr248YuKgC/YW9b5LuMINmOpkibtGx/nYsHaNg=
Subject key identifier: 92:1E:50:56:83:B2:B5:21:5F:1A:41:A3:D4:E2:05:1B:34:62:56:E0
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 0196C1CB9ECC9F8B04A358CB8A0F34AF352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 00:01:09 +0000
Manifest this update: Mon 12 May 2025 00:01:09 +0000
Manifest next update: Tue 13 May 2025 00:01:09 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: jIBS3aLd4biy8Va4c8wiMAb6hf6dOlsXHzyxlCZ+qpA=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:9e:cc:9f:8b:04:a3:58:cb:8a:0f:34:af:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: May 12 00:01:09 2025 GMT
Not After : May 13 00:01:09 2025 GMT
Subject: CN=921e505683b2b5215f1a41a3d4e2051b346256e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:70:20:39:6c:1b:4b:37:9d:db:f2:a7:cb:
c4:1a:59:f6:b1:0e:dd:49:2d:81:de:41:e9:ba:fb:
cc:84:66:6d:d0:2b:90:a7:ca:5c:22:25:b5:b1:6f:
e6:ee:60:4c:78:0a:29:1d:86:37:12:4a:6d:24:89:
d1:62:75:77:2b:51:6b:f1:1a:f0:a1:86:2d:75:6c:
fc:f1:6f:56:8c:b3:ad:7e:21:8d:61:62:bf:53:7f:
06:48:a0:53:f0:27:8c:1b:3d:1c:05:ce:20:0d:77:
7e:73:11:f6:c7:20:8a:d6:03:72:65:f8:c8:45:66:
1b:ec:ca:ff:be:e6:7f:43:84:67:d9:ef:58:1d:9d:
90:f6:d7:6c:23:bf:e8:f1:1c:f9:80:36:5c:8b:95:
75:3d:d6:67:8c:8a:b7:2f:d2:7a:91:cd:64:04:01:
fe:fd:60:f1:27:7e:3f:c0:ec:9a:8e:96:ed:d4:9e:
f1:8d:eb:cf:dc:05:a5:78:08:be:d9:76:de:36:b4:
bf:f6:91:c7:6c:07:43:36:90:f5:7e:74:c3:4b:09:
29:d7:18:60:29:ff:5c:de:0e:d7:b0:07:e3:20:9a:
28:bc:c9:28:2f:b7:d5:5b:9b:5f:71:c9:60:81:00:
63:9f:47:0c:ec:3c:e9:bd:32:82:40:fc:e0:8b:15:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:50:56:83:B2:B5:21:5F:1A:41:A3:D4:E2:05:1B:34:62:56:E0
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:f8:e9:39:f3:4c:21:11:15:dc:64:87:d2:b1:9a:65:02:
96:53:f0:38:9a:ff:7d:ed:9b:a5:fc:fc:5e:a7:f5:3b:d5:83:
c1:56:d5:3c:7e:62:d8:47:b7:87:db:9e:1f:69:75:99:85:7b:
78:3a:cb:06:a9:73:27:65:2f:de:7e:68:1c:9a:ba:6c:87:d9:
21:cb:be:d8:77:c3:7c:cb:5a:d8:52:d1:68:8c:0d:a8:78:84:
a3:9c:bf:c6:15:19:2f:26:f3:7e:65:5d:30:ba:cb:60:94:25:
7e:0d:f9:db:8d:64:74:3e:17:f2:48:d0:f4:3c:d2:72:f4:fa:
a9:07:60:b9:78:cf:7f:d8:33:09:3d:1a:3f:d1:b7:e9:b2:bd:
b1:42:e9:85:09:5b:f7:d7:14:ef:9b:2a:c2:16:78:a6:e8:4e:
29:b2:75:ea:f7:b5:3c:bf:b9:4c:0c:64:81:c2:ff:e9:9f:2c:
51:9b:05:39:6b:dc:86:d0:9d:16:27:7a:32:9c:c6:35:7b:6e:
88:2e:57:aa:d9:0c:38:52:2a:6f:c7:1d:7f:1a:15:8a:56:7f:
da:9d:57:8f:0d:53:44:ac:cf:91:87:9d:f4:7c:af:6e:66:ce:
97:6c:0e:1c:06:1d:d8:6a:ae:12:a9:18:d3:f2:d2:c7:56:6c:
b4:59:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:42:34 2025 by rpki-client