Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: 4oC9utEsSvpyUBEKlFaDYb3NISkrzh4mSGw/IGIJVAY=
Subject key identifier: 06:90:73:6B:44:B4:79:2E:16:49:63:E6:07:0B:E7:D1:91:A3:1D:F6
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 01969F76524285C0ACA1A976F99D5F70AD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 1078
Signing time: Mon 05 May 2025 08:00:53 +0000
Manifest this update: Mon 05 May 2025 08:00:53 +0000
Manifest next update: Tue 06 May 2025 08:00:53 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: pwOOauG7Zaa9NTBX8CNKdorw8w5w4DVWafNBbmFLeZE=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:52:42:85:c0:ac:a1:a9:76:f9:9d:5f:70:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: May 5 08:00:53 2025 GMT
Not After : May 6 08:00:53 2025 GMT
Subject: CN=0690736b44b4792e164963e6070be7d191a31df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:37:8d:b0:e4:35:4c:aa:ff:a3:81:35:11:
f9:b6:c4:f5:c3:c3:20:31:d2:a0:a5:2c:80:2a:d9:
57:95:9f:bc:47:64:da:2d:e3:ea:91:91:cb:23:a8:
79:8c:42:2e:c1:90:fa:76:cd:f2:ec:cb:c6:90:40:
8f:e0:2c:8b:c3:74:fd:d0:c8:de:59:18:3e:76:87:
f1:b8:30:48:ed:d8:57:2d:48:76:91:9a:3d:3b:33:
cd:af:95:d5:ea:1a:3c:81:85:c3:21:52:de:45:68:
65:04:33:eb:6e:32:9c:2b:51:ad:5b:41:bc:1f:46:
78:aa:22:6b:a8:54:1b:99:07:8f:95:55:37:38:d5:
20:61:a1:3e:16:33:bf:0c:79:b5:3f:ff:ed:3e:d8:
56:ee:a2:ca:1b:c9:ec:3a:3e:a1:f4:be:bf:07:b0:
91:bb:f1:5a:b3:bd:92:a7:d9:b9:3e:db:55:81:52:
19:f5:c2:ed:dd:a9:2d:b5:04:bb:17:86:41:75:bc:
95:47:8c:07:ca:1e:15:05:45:1d:3c:f1:17:34:3b:
65:f8:e0:ab:e7:71:cf:9a:18:27:58:a7:c0:0d:d2:
d2:ce:8c:0e:6f:e5:67:5c:95:3f:13:41:35:4f:17:
4f:62:b4:3c:99:29:71:5a:46:f5:41:ca:1e:8d:20:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:73:6B:44:B4:79:2E:16:49:63:E6:07:0B:E7:D1:91:A3:1D:F6
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:85:67:d2:5f:36:6c:63:ab:7e:a9:21:82:43:4f:ff:d1:e9:
6d:5d:81:73:28:eb:8d:01:4e:3e:2b:0f:b4:24:ba:6e:07:a4:
ac:70:e9:73:e3:da:4e:a1:66:fd:55:8b:7f:70:0a:be:01:3a:
4b:c9:4c:e3:54:69:3b:76:40:79:82:eb:6a:80:a0:0e:ce:0b:
a4:2e:63:7a:53:55:9b:60:46:3d:64:07:e0:e8:d6:47:56:34:
13:0a:00:9f:ea:a3:4d:be:d3:8f:5e:cc:2e:3c:9b:7b:4c:0e:
24:51:6f:d3:82:97:6e:bf:28:85:e9:5b:b9:8f:ac:1d:ee:b7:
39:2a:7d:a6:9c:21:97:48:5b:de:10:e9:c9:9e:a4:77:a7:ed:
19:5b:a6:19:64:a2:82:a8:c2:85:30:99:84:8d:e6:e4:7e:ae:
3b:c6:5c:dc:5f:42:e9:6f:86:17:98:81:65:3d:cd:cd:e6:44:
60:c5:25:9a:a0:3d:63:eb:cc:fd:94:52:97:c3:06:68:5c:8f:
03:89:ba:fb:55:1b:35:9b:5c:39:70:54:22:13:e1:da:bb:11:
da:02:64:65:0d:4b:10:e7:32:e3:13:be:cd:b5:92:7a:aa:42:
87:00:a1:5e:f3:64:d5:7d:4e:08:9a:ac:e9:45:0e:77:a7:40:
75:9d:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:25:45 2025 by rpki-client