Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: OQ1UcOz1sYTYvXGkE3mVoo65Th8kuvZeX3AIhThaa2k=
Subject key identifier: 2C:A9:27:13:9A:37:82:21:A9:FF:89:04:E1:21:88:02:4B:0A:11:6D
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0196A164139CCE7C4CF3688CD7D2C0B5EB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 17:00:12 +0000
Manifest this update: Mon 05 May 2025 17:00:12 +0000
Manifest next update: Tue 06 May 2025 17:00:12 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: b5rAnbq2w22PE+mL5EBUsx1teQI2YKcleXnI85cVAdU=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:13:9c:ce:7c:4c:f3:68:8c:d7:d2:c0:b5:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: May 5 17:00:12 2025 GMT
Not After : May 6 17:00:12 2025 GMT
Subject: CN=2ca927139a378221a9ff8904e12188024b0a116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:eb:b7:24:a7:3e:b2:23:55:85:2a:d7:38:
a9:81:e4:57:bc:47:c2:bb:26:eb:c5:b9:b2:52:47:
63:f7:48:42:3a:4b:ef:7e:77:6d:ce:98:ca:1c:b0:
0b:53:d8:56:cb:59:17:88:c7:75:e4:60:03:a7:e3:
eb:ac:b0:cc:3b:08:e6:42:02:ef:4c:5d:92:92:7f:
6a:75:e6:d8:cb:83:28:70:90:81:0e:1f:f8:31:63:
e3:f5:d8:5c:2d:9a:46:5a:76:7a:0d:1c:9c:71:dc:
2f:c4:b8:cb:ee:50:6a:dc:63:d9:9d:d4:e7:21:c0:
c9:8b:56:76:ca:15:20:68:71:8d:29:f9:fa:a0:be:
9d:de:e5:af:2b:25:75:a7:fb:3d:13:11:7a:ba:8e:
03:e5:99:d1:10:10:5f:53:ff:44:b5:ea:3a:f8:55:
d4:ed:26:c2:e5:d2:03:c1:35:18:03:77:22:c1:f6:
2a:54:dc:b7:11:fd:4b:11:7b:3d:4a:39:0f:24:3e:
c7:09:31:60:a4:ce:85:12:75:86:ca:9b:a2:53:49:
74:0f:44:06:c9:53:14:f4:b7:eb:fc:64:d6:26:91:
2a:c9:bb:0a:bd:f6:bc:d1:ea:97:da:16:e4:df:62:
51:4f:4a:18:25:9e:2d:2e:89:aa:35:0e:7e:40:ff:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:27:13:9A:37:82:21:A9:FF:89:04:E1:21:88:02:4B:0A:11:6D
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:96:a8:fd:1f:47:2c:07:b5:4c:6d:94:a9:ec:e8:81:37:32:
a6:bc:5e:a6:ac:cd:e8:5d:b9:e4:7f:cf:ba:2e:f6:30:6e:ff:
2f:b2:d9:8e:b0:14:1b:b2:2d:e8:a8:c0:79:a0:06:5e:15:58:
93:a1:e7:aa:26:ab:b2:ed:ca:9d:06:a9:1b:35:c5:cd:f2:40:
89:c4:d6:ca:3b:55:8e:48:15:21:b1:4b:84:45:07:61:0b:88:
44:16:dc:61:9c:04:25:79:5b:39:05:e6:3e:b2:f9:55:92:a5:
d8:35:18:7e:5c:7c:21:e1:c7:59:5e:3d:a0:46:02:b8:12:08:
c4:9d:1d:12:fd:d0:60:2f:66:06:02:f4:9c:20:7e:e8:93:38:
cc:20:6e:46:28:ee:f0:cc:82:0d:10:23:54:a0:1f:32:a1:fe:
4b:04:05:65:43:cf:56:4c:75:6a:68:fe:6c:cd:f5:81:56:cf:
91:70:93:bd:40:0e:26:11:fc:f4:55:4a:0c:f4:a1:da:1c:a2:
0e:9f:c7:15:f9:e1:9b:0b:e2:27:16:06:46:1a:af:9c:c8:cd:
99:0e:4d:05:48:7a:c2:80:63:0c:ad:f2:cc:1d:5e:7b:c9:00:
45:a0:60:c8:4e:24:31:8b:53:9d:cc:b0:6b:68:8b:8c:97:c2:
03:d0:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:03 2025 by rpki-client