Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: Ei4qk1lp7E5cYwFNtS42RZfsh9HXhjkngERAC/24OvA=
Subject key identifier: DD:22:75:65:FB:79:D0:39:9F:48:1F:24:14:79:63:13:E5:23:6E:65
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0196B66C09619BA4A91BAA08D7186FDB95C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 19:00:55 +0000
Manifest this update: Fri 09 May 2025 19:00:55 +0000
Manifest next update: Sat 10 May 2025 19:00:55 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: h5aobWNMjMrBBgZzTaJF9Kliwls4RwrMBgAjdr2wMQo=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:09:61:9b:a4:a9:1b:aa:08:d7:18:6f:db:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: May 9 19:00:55 2025 GMT
Not After : May 10 19:00:55 2025 GMT
Subject: CN=dd227565fb79d0399f481f2414796313e5236e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:15:05:f3:78:6e:9f:cd:7f:f8:79:23:d3:
4b:ce:72:de:88:1e:83:aa:20:15:ec:75:9f:fc:e7:
23:b6:b0:c1:83:ca:5d:a6:c8:a9:9d:c0:ae:a7:0d:
78:64:18:2f:fd:d9:ea:de:bd:73:fb:5b:83:f4:4e:
50:68:31:70:b3:54:3b:f2:d9:8b:58:f8:b8:3e:01:
77:5f:e9:13:76:92:b1:9b:0d:01:57:89:52:dc:d4:
0e:ed:ba:98:46:e9:2a:5d:43:1a:0b:70:6f:5b:a0:
23:a8:c6:df:70:09:5f:51:5f:18:24:4d:bb:74:10:
12:83:7a:75:34:9b:0d:cc:07:41:38:7d:a1:20:b2:
3d:b5:a0:a7:68:89:2b:a7:09:c1:8c:0b:cd:cf:e6:
e7:c4:4a:27:ac:c6:fb:c4:c7:1c:1d:d7:ea:68:48:
22:53:c8:7d:05:be:63:4e:47:eb:c9:5a:fd:46:15:
27:8a:36:36:23:ff:7a:3a:3a:f7:e4:d2:14:7b:e9:
6a:ae:53:3f:36:43:d6:47:a7:eb:f3:36:59:94:de:
c9:16:c2:18:fa:57:3f:68:7c:8f:67:da:1c:90:fa:
d0:cd:72:fb:9d:c6:d3:39:29:48:c8:7d:97:13:a2:
ab:23:91:fc:40:ef:99:b2:00:74:49:c8:3a:6e:70:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:75:65:FB:79:D0:39:9F:48:1F:24:14:79:63:13:E5:23:6E:65
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7c:d1:7c:ac:ee:af:eb:b4:69:ef:75:62:69:5f:ce:0d:c2:
1b:65:e8:4e:64:71:1c:53:85:db:b7:6f:7a:92:a9:96:35:8f:
6c:4f:5e:04:b8:b0:26:34:f5:23:de:fa:b6:9b:3a:e8:d3:cc:
29:2d:82:8f:77:c6:31:35:36:91:43:d6:ad:fd:b2:95:7d:3c:
a1:e9:20:f0:83:e6:d7:d7:91:8b:05:27:ea:96:0b:d5:6f:c0:
02:18:22:4b:ec:7e:39:90:4a:b4:19:78:03:37:17:89:4f:79:
0c:76:55:3e:77:93:a2:57:fa:0f:6e:25:4b:c5:46:c9:a5:25:
d3:ca:8a:16:1f:25:10:c4:89:9c:5a:ea:65:ae:fc:5b:18:26:
74:58:a5:59:dc:6d:be:3c:b0:9f:e5:ec:43:d1:50:42:6c:66:
48:0c:c0:66:71:f4:41:00:91:5a:ee:c7:8e:78:b9:e7:c4:fe:
91:73:61:e0:ed:22:4b:66:64:76:15:2f:e9:19:ed:ff:f2:ae:
7e:12:1c:b3:a3:4b:3b:7c:8d:cf:d7:43:b9:66:7f:2e:ea:7a:
a3:a5:3e:80:6b:76:6c:74:45:dc:23:65:7c:3b:86:ad:de:cb:
2f:62:a5:eb:55:cc:aa:15:ef:02:a9:0b:d6:70:04:ff:dd:6b:
1b:09:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:56:51 2025 by rpki-client