Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: zScq7cIK0/6eLwj/gvWNZ8T0juqW4yWovrtQGg+3bYE=
Subject key identifier: 2C:B3:ED:C1:2A:CE:B9:67:09:9A:61:3C:35:27:49:C2:1D:DB:E5:D1
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0196C6BAC5BF628E45C0B1312865C9A998C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 02F1
Signing time: Mon 12 May 2025 23:00:51 +0000
Manifest this update: Mon 12 May 2025 23:00:51 +0000
Manifest next update: Tue 13 May 2025 23:00:51 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: mYhRiMw8VFcXl6RYACfNKY2HCzERMIzpmEmzaievvj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:c5:bf:62:8e:45:c0:b1:31:28:65:c9:a9:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: May 12 23:00:51 2025 GMT
Not After : May 13 23:00:51 2025 GMT
Subject: CN=2cb3edc12aceb967099a613c352749c21ddbe5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:60:69:57:b8:9e:23:18:b1:eb:e6:e8:dc:
10:14:b8:71:76:09:6d:38:f5:da:51:e5:2f:d9:9b:
47:cc:e7:94:8d:dc:0a:a5:4b:b4:63:ea:aa:3d:ae:
33:12:d2:42:d0:a5:3b:78:70:fa:ae:8c:ed:23:e7:
d1:98:92:10:c1:eb:5b:39:16:8a:ff:14:e6:84:ed:
9a:40:8c:d6:f8:92:47:33:43:e3:5a:b5:51:98:24:
f2:1e:7a:fb:0a:e3:ee:e6:ba:87:ba:3f:4e:f4:91:
6c:9f:db:0e:96:39:1f:4c:ed:29:69:6f:99:e2:c2:
5d:7d:7f:27:3b:d3:08:40:eb:6d:15:73:5c:25:73:
12:ce:01:2b:f9:00:93:61:93:42:11:c0:03:7d:75:
3c:23:78:9c:dd:10:4f:f5:ad:05:6a:2f:b3:92:15:
2b:20:a1:ba:05:f8:bf:5b:1f:b1:5c:1f:a8:ed:ab:
7e:90:cd:a5:2c:6f:bd:c9:d9:7e:c4:1b:cd:d3:10:
9f:2d:bb:0a:6f:df:e3:ff:24:ec:3b:e1:80:be:8a:
4d:c7:44:c4:ff:bf:92:b3:a2:19:7c:be:53:8a:4b:
12:1e:ba:30:3d:ee:0c:bb:61:f0:49:ee:2d:8e:a9:
0a:42:4c:ee:dd:45:1c:a7:d5:f1:2a:d7:22:9d:60:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:ED:C1:2A:CE:B9:67:09:9A:61:3C:35:27:49:C2:1D:DB:E5:D1
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c9:f6:60:ef:e7:eb:de:3f:30:49:e7:71:27:11:f1:cb:3e:
33:0f:d7:08:33:af:73:74:3e:30:cb:a3:11:1e:66:71:55:e3:
80:f1:33:25:ec:48:41:61:f4:64:e7:48:05:06:20:8e:bf:77:
3d:56:ea:a7:b4:50:1b:a8:d9:47:cc:bf:00:ca:c7:74:cb:32:
c4:51:7b:30:96:27:e2:8f:f5:82:fa:c6:17:f5:38:12:4d:c7:
13:62:65:14:ac:6b:39:28:6a:49:23:a6:75:58:2c:88:7e:f6:
84:82:0d:79:b9:1d:02:c6:b8:55:61:88:93:90:ba:ac:9f:ad:
51:f5:9c:78:b9:a8:9b:62:cd:54:3d:f1:e0:e1:b4:76:09:c4:
e3:07:75:76:2c:e0:42:23:8c:f3:b5:2e:84:27:48:b4:9a:bc:
c3:10:84:72:95:a5:4f:5e:6c:e7:ed:13:01:e7:a2:b4:cc:5e:
02:f9:02:8f:8c:3e:3d:b4:0a:cb:2d:39:80:f5:eb:5e:c2:78:
29:7c:b5:d9:16:79:fa:00:95:d1:58:74:1e:e4:6d:60:44:88:
eb:8e:cf:b9:a0:07:53:f2:f5:f9:df:81:53:44:d5:6b:ac:06:
c3:43:b4:59:fb:0c:f6:97:1e:ee:d0:8b:82:e2:58:34:03:35:
05:20:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:09:40 2025 by rpki-client