Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: xHrfchAtb++NlO5Ozx5LGaOftHkQNWx31SBlo4OjA74=
Subject key identifier: 57:C7:44:5E:F0:F9:84:E9:13:EA:18:30:37:3C:BB:66:31:DD:76:34
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0196B8FECA412AF0FC17BEDB5839DDC777E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 07:00:27 +0000
Manifest this update: Sat 10 May 2025 07:00:27 +0000
Manifest next update: Sun 11 May 2025 07:00:27 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: ouyd9l1RWzqXXYIQwFA04r7hz4cEMlriVCQ7TBJ6sgI=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:ca:41:2a:f0:fc:17:be:db:58:39:dd:c7:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: May 10 07:00:27 2025 GMT
Not After : May 11 07:00:27 2025 GMT
Subject: CN=57c7445ef0f984e913ea1830373cbb6631dd7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:19:c5:81:ca:f8:6d:05:46:55:3f:68:4b:
39:d2:4d:92:17:52:3a:bc:83:06:2e:8d:26:55:ab:
7d:88:65:4a:84:31:f2:65:ac:bd:ca:4b:28:d3:ef:
f2:b0:a0:f5:71:33:01:29:02:37:7b:50:82:5f:98:
64:e0:c7:4d:40:a5:cc:18:0e:80:5a:5e:14:db:4c:
6d:fc:ee:9c:05:3b:84:b3:5c:15:5e:36:57:d6:b4:
c9:92:f9:1e:41:bf:45:25:a1:25:1a:4f:64:27:35:
2f:84:b8:79:84:f1:aa:4d:3c:c2:de:41:43:ce:5a:
f7:2e:54:9a:36:57:69:43:da:10:43:8c:48:ef:7e:
d2:69:ad:a2:b3:d3:4a:5b:cd:9a:1c:42:a1:84:35:
27:7c:3e:18:2f:72:87:98:90:f0:69:ec:9a:d1:dc:
04:4f:62:84:bf:b0:dd:b3:26:c7:a4:ef:a3:40:ea:
5f:02:a5:ea:42:57:fd:a3:dc:f3:c0:b2:bf:64:f1:
65:ec:b8:03:98:e0:26:11:99:bc:d8:8d:68:98:c9:
94:e2:8a:fa:7d:bf:59:cd:ec:23:5a:dd:5f:07:89:
a4:ea:7e:b5:b6:64:7a:2d:9f:d3:2d:c5:2f:f7:cb:
05:be:04:be:06:a5:3b:53:49:27:34:8d:c3:9e:d9:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:44:5E:F0:F9:84:E9:13:EA:18:30:37:3C:BB:66:31:DD:76:34
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:1d:0b:69:8d:fe:2f:fb:93:bd:f8:c5:ca:01:88:48:c4:
f7:8a:34:c3:03:c3:37:81:c8:c9:70:38:5b:d0:11:4e:95:4f:
b5:ee:06:c4:0b:d5:1e:c8:4f:e0:ad:65:14:ce:c6:b9:c3:95:
84:06:ff:fc:df:cb:b4:a4:2b:56:49:d1:32:70:8d:bb:2d:6b:
12:c2:8c:47:9e:cc:0a:0f:1d:1d:eb:d9:04:f6:22:13:64:46:
a1:c5:77:58:fa:57:83:47:16:34:d8:b0:d5:1d:93:9a:16:87:
a9:cf:17:fa:1e:0a:79:2c:8b:58:5e:a8:68:a1:6e:2d:da:8b:
8a:06:e5:7a:e7:85:1b:60:05:23:e2:60:1e:e6:ed:9e:66:40:
7c:cf:b2:8e:9b:fa:f6:9c:24:6c:59:c4:41:3e:23:88:57:a6:
21:8f:92:a5:e6:ad:44:4f:a7:f3:b7:f7:50:2e:76:3c:6d:2a:
d4:11:c7:dc:ed:57:94:41:8b:61:bf:4a:7c:57:f9:23:25:99:
45:bf:d5:a1:f4:25:a6:c6:97:cf:60:87:21:42:83:27:7c:c1:
34:3b:2a:b1:e5:49:d0:e7:f0:28:0e:c3:1a:53:4a:40:53:e8:
73:29:14:96:20:8f:86:48:38:2c:29:1c:32:6d:25:75:44:e3:
50:7e:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:55:59 2025 by rpki-client