Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: 4h73sqXMGGdi3UZsHCR1Up7J4Pi0vQWWGzbThM83OAA=
Subject key identifier: CF:FD:20:BD:D5:2C:64:45:93:37:B0:0A:0B:91:3B:78:E4:18:15:DB
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01969ED164415DC79A8B52B17F748A65A942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 05:00:44 +0000
Manifest this update: Mon 05 May 2025 05:00:44 +0000
Manifest next update: Tue 06 May 2025 05:00:44 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: 7Az2PHJz89Ish8ODQN5NT0XKIw0FDbzCrGH4Ruj/XQA=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:64:41:5d:c7:9a:8b:52:b1:7f:74:8a:65:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: May 5 05:00:44 2025 GMT
Not After : May 6 05:00:44 2025 GMT
Subject: CN=cffd20bdd52c64459337b00a0b913b78e41815db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:43:c7:e7:e1:d5:40:0f:f6:e2:0e:59:63:
21:de:77:88:45:92:35:b7:0a:2a:68:45:4f:c5:d5:
94:75:45:1f:38:a7:ac:77:2e:ce:8c:96:66:52:81:
01:e0:d0:d2:cd:3e:6d:e9:01:17:57:aa:11:87:96:
9d:6f:1f:5f:ae:b3:80:87:e9:6d:5e:60:94:a7:a0:
9c:4d:ee:45:bf:f2:cb:22:e6:20:30:b6:d9:05:c2:
cc:f9:25:21:63:c2:25:34:d2:eb:b5:fc:70:bb:5c:
ab:d3:83:90:db:25:1a:c7:bd:8c:77:18:bc:eb:d8:
cf:71:c5:d1:9e:cd:20:84:dd:04:cd:b0:cc:16:c9:
d8:3e:33:07:2b:0e:c5:5c:1b:0b:23:d9:d1:dc:09:
dc:37:7e:d3:f5:7f:e0:3c:9b:18:fa:6c:f8:e1:f3:
bf:13:e2:58:9f:bc:f0:3c:43:89:f1:c9:13:f7:3a:
d2:ba:d2:5a:6d:eb:cd:5f:d4:5d:a3:c4:e7:5b:97:
7f:d5:bd:bc:f0:8f:2d:a3:36:e1:74:33:df:c6:51:
dc:bf:0e:04:d1:8d:7f:88:c8:ac:3d:4e:58:cd:07:
8d:8d:80:bd:2a:ed:16:25:7e:96:31:ae:66:2e:8a:
76:f2:cd:3f:e5:ec:6f:7f:73:95:35:3e:77:d5:10:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:20:BD:D5:2C:64:45:93:37:B0:0A:0B:91:3B:78:E4:18:15:DB
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:60:80:0d:97:a7:34:b0:f8:e8:8a:ff:bf:d0:b7:0c:86:21:
8c:ad:ac:db:6c:ff:07:06:4f:dd:5d:6e:ce:90:05:f8:c9:7c:
b6:3f:ce:cb:a7:96:47:65:86:3e:7b:a1:d1:b9:7c:f7:01:a0:
6b:99:4a:2c:d1:f5:8e:7e:65:ed:28:c9:21:67:bf:49:90:a4:
d6:7b:0a:5b:c4:a8:8a:fe:0f:93:e3:60:c0:5d:35:01:63:97:
98:93:24:26:28:f9:d0:c0:9e:81:5a:cf:9a:b0:1a:be:ba:db:
05:2b:05:18:cb:73:85:73:35:d4:e2:d9:23:53:59:5d:26:78:
36:75:1c:40:0b:32:03:11:3a:4a:b2:f8:73:7e:2a:34:62:65:
7c:02:ed:bc:63:e3:c0:f3:65:71:28:ed:9b:21:4d:78:0f:c9:
f6:bb:b7:5c:6e:45:4a:a5:61:62:29:0e:80:db:51:bb:81:b5:
9d:71:e6:35:64:bd:41:e9:b3:52:83:05:d5:bd:f5:2b:ec:28:
a7:c4:bf:a1:92:67:c2:56:26:86:76:63:da:78:74:2f:82:3f:
c8:37:3a:d5:bb:5b:bf:ff:4d:c0:aa:ba:b2:06:f5:89:d1:b3:
e8:f5:b9:96:f8:90:bb:7f:2e:0f:d4:44:a5:87:e7:2b:33:af:
5d:4b:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:04:46 2025 by rpki-client