Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: et9x3TFEmTVVj1dQu9ypFOQK3F/R25QbBRvtBHFA1K4=
Subject key identifier: 1E:90:AE:8D:B1:32:ED:50:3E:67:EC:FD:D7:E8:D8:9F:16:7E:97:13
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0196AE0DAC0CA8CA3C6E5F1BBE42C57D1922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1257
Signing time: Thu 08 May 2025 04:00:53 +0000
Manifest this update: Thu 08 May 2025 04:00:53 +0000
Manifest next update: Fri 09 May 2025 04:00:53 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: BkdXI367v7sn1NEHAwgG5tg0OfIpPExLeed3WOUCEOw=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:ac:0c:a8:ca:3c:6e:5f:1b:be:42:c5:7d:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: May 8 04:00:53 2025 GMT
Not After : May 9 04:00:53 2025 GMT
Subject: CN=1e90ae8db132ed503e67ecfdd7e8d89f167e9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:75:97:1d:d0:ac:73:04:4b:5b:87:27:fb:
fc:5a:d2:67:dc:06:8e:80:31:85:0d:bb:8d:48:21:
59:3c:6e:53:51:ce:10:fc:84:dd:23:f7:12:7e:e2:
ea:17:13:06:f1:00:62:1e:b2:50:a5:3f:d5:ae:5a:
56:65:b1:8c:2f:b1:fa:4b:b6:83:be:db:85:94:85:
9b:c4:42:03:4a:8d:e6:48:76:73:62:da:a0:8c:ba:
dc:97:92:b3:3a:f7:5f:07:ee:ae:8b:89:2b:83:81:
f3:c0:6f:0c:23:bf:55:7b:d1:1d:e4:92:c7:78:ea:
06:66:2d:88:16:4c:95:11:3e:8d:e8:61:63:9f:38:
35:42:16:7b:a0:c3:55:e1:26:76:da:de:30:fe:4e:
87:cd:46:36:c6:4b:19:39:c4:a6:5f:08:90:73:79:
d4:55:7f:79:ac:d0:cc:83:9b:b5:9b:f2:fd:c5:b8:
3e:59:4a:45:8f:bc:22:b2:9c:e7:db:c6:57:97:30:
3f:7e:ee:19:09:43:89:13:96:8c:08:66:31:d7:ff:
fe:99:8a:e8:31:3f:e5:9c:4a:5d:ff:30:a4:07:20:
2d:ac:f2:7b:18:25:ef:aa:2d:c4:2d:24:b0:80:e7:
69:2b:a5:4d:45:dc:fb:fa:24:f2:21:39:f3:fb:9f:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:AE:8D:B1:32:ED:50:3E:67:EC:FD:D7:E8:D8:9F:16:7E:97:13
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:27:f5:de:6f:a7:5f:ae:e3:1b:67:11:97:06:1c:33:54:95:
3d:e6:87:c8:6b:3e:dc:55:64:22:cf:67:a9:45:2d:6f:e7:b4:
a8:4c:bb:f0:15:58:51:1f:2b:11:a1:15:37:38:e4:6d:73:7a:
50:eb:41:db:d9:3d:b6:a6:db:ef:12:6b:5b:95:08:98:72:88:
aa:52:08:34:16:6a:87:ea:10:70:20:53:e5:3e:ce:29:34:ca:
53:34:9c:c7:7f:57:81:61:e4:18:61:1c:12:85:f0:99:fb:41:
25:b5:51:57:22:67:0b:e0:7a:45:48:92:9f:2a:ff:43:89:50:
cb:24:f5:96:77:12:b4:e7:5a:b1:4f:09:1c:f8:c4:c6:e2:ab:
b0:5e:54:a3:22:e5:87:fa:a3:a8:70:fd:9b:e9:94:4d:a3:a4:
cb:ea:b5:9b:3c:0b:0d:fa:4c:a0:15:f9:2e:38:92:f2:ee:73:
04:c4:59:c0:7d:39:a2:1e:32:f7:cf:16:f5:40:40:0e:73:f1:
c8:bd:dd:43:ee:89:2f:8b:66:e7:2f:72:eb:5d:74:ab:86:f9:
0c:9e:f2:5e:79:2c:49:5f:f2:9d:e9:e4:b8:db:3b:06:77:e5:
61:c9:9f:6a:93:b4:a5:a2:ca:e9:bb:19:aa:34:44:30:2d:4d:
20:54:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:19:58 2025 by rpki-client