Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: hJeXjPDxQAeh9eGZ5dBBkqcFk0H5qwBYXgfmt70bZL0=
Subject key identifier: 67:7C:9D:D6:BC:9B:E0:32:25:CA:8A:94:06:EF:86:9B:00:1E:36:94
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 0196B66C3B5BCC82106B9E0CFD45A3ED27CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 19:01:08 +0000
Manifest this update: Fri 09 May 2025 19:01:08 +0000
Manifest next update: Sat 10 May 2025 19:01:08 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: XKq6gIMhjT/aFQqG7PFNe2iA+0mb/hKoH365CuhhXPs=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:3b:5b:cc:82:10:6b:9e:0c:fd:45:a3:ed:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: May 9 19:01:08 2025 GMT
Not After : May 10 19:01:08 2025 GMT
Subject: CN=677c9dd6bc9be03225ca8a9406ef869b001e3694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:d6:e8:58:1a:cc:59:66:a3:08:3a:49:c7:
88:56:01:f9:79:2e:ff:53:86:f4:3d:37:ff:e0:24:
a9:ba:7c:98:3f:94:d7:a6:22:88:ca:07:9c:4e:5c:
3f:28:c5:d6:fe:a1:f4:6f:6c:ba:9a:7e:fb:92:01:
5e:59:a7:3a:dc:56:8a:30:a3:ac:6c:63:a1:39:a4:
6f:0c:0d:af:36:38:e0:83:db:be:1f:87:72:f6:85:
20:5b:26:5e:78:59:6e:7c:42:07:2e:5f:7c:da:c9:
24:9c:09:36:4b:8e:1b:e1:15:07:83:0a:7b:49:af:
14:9a:3e:c8:95:82:38:0c:fe:db:7e:87:fb:fe:7b:
de:41:95:55:6f:a6:62:7a:36:d0:bd:90:ad:86:db:
39:e4:bb:b2:5f:f5:50:cd:af:ec:9d:16:59:d3:0e:
4e:09:39:e5:8e:6a:21:b5:e1:e0:ff:d6:62:ed:3b:
ad:27:99:fa:77:01:79:ce:8a:2e:1d:6a:05:03:48:
31:94:ca:42:b5:1c:6f:7b:90:1d:01:d6:3a:53:b3:
35:07:60:37:0e:6c:f6:4e:a2:63:e8:e8:b4:94:fb:
0c:26:f4:37:77:4f:22:9a:fd:08:9d:9b:65:2c:81:
a9:1d:b4:71:bf:50:bc:a7:9e:f3:f5:e7:43:3b:9e:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7C:9D:D6:BC:9B:E0:32:25:CA:8A:94:06:EF:86:9B:00:1E:36:94
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a4:9a:19:6c:3e:c8:4a:94:47:39:80:16:f1:e1:c6:a4:55:
62:9d:8a:5c:6d:ee:6a:d4:97:f0:f4:d5:79:0a:58:74:4c:4b:
cb:55:4f:0e:f6:d0:07:ec:6f:84:ea:35:7e:a8:1a:f4:d0:00:
d2:8e:45:11:35:94:29:b5:51:84:82:29:8d:3a:5b:f8:07:6c:
27:cf:90:89:67:9e:ce:ea:60:ed:3f:e8:89:bf:bb:8e:a3:8b:
45:15:62:b1:86:35:de:bb:56:64:a9:9d:0a:7d:39:4c:0f:f7:
ad:69:36:13:65:fc:95:54:37:ab:f9:af:05:23:bc:8b:c6:d1:
f9:04:8a:c4:53:73:41:e3:f6:94:6c:14:90:a6:1a:15:51:ab:
19:7b:b5:85:fe:39:d4:cd:e8:a4:a3:77:a3:f4:35:ec:18:7b:
55:9d:d3:5a:40:6d:9f:79:4b:e3:06:2a:ed:8a:14:58:35:3f:
16:8f:39:76:e7:f0:d4:e8:87:f6:a1:1b:d7:94:f2:38:3d:52:
e4:62:41:f1:ed:9f:6e:31:46:42:22:93:06:6b:7f:92:40:ab:
34:31:6e:91:e5:e6:e8:95:79:d0:50:c1:88:b8:d0:eb:14:09:
a7:cf:48:34:ab:4c:78:2e:4f:58:47:6b:fa:6c:f5:5c:4f:be:
bb:e9:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:27:51 2025 by rpki-client