Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: c5gRyHqo0XrF2Dm/wQV5KMWKAxh1d8QtKdoHQtjOLIw=
Subject key identifier: 4E:8C:90:31:0D:DF:F4:B6:44:AB:70:9B:59:D1:40:B1:80:90:DA:AD
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 0196BE254EC37D69A85B7A210C8684026E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 1138
Signing time: Sun 11 May 2025 07:00:38 +0000
Manifest this update: Sun 11 May 2025 07:00:38 +0000
Manifest next update: Mon 12 May 2025 07:00:38 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: BBAKRZj+anPEIw+lCqcNb5vm8cVZP71CaxXLaHy74Ds=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:4e:c3:7d:69:a8:5b:7a:21:0c:86:84:02:6e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: May 11 07:00:38 2025 GMT
Not After : May 12 07:00:38 2025 GMT
Subject: CN=4e8c90310ddff4b644ab709b59d140b18090daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:8f:a5:80:fe:68:69:32:a3:7c:21:38:e9:
e3:3b:3b:b5:d3:68:33:44:b1:30:eb:49:cf:ba:9a:
70:30:41:3b:4a:aa:7f:d8:37:33:82:54:f8:29:21:
98:fb:19:90:55:84:85:10:57:04:c1:f7:28:cc:bf:
e3:d6:f1:00:da:5b:4c:65:9a:6e:92:85:76:03:56:
4c:76:4e:cd:de:ed:a6:f8:70:c2:40:de:b5:e1:f8:
26:79:8c:28:6d:06:3d:74:fa:a1:24:6f:57:80:11:
e5:b3:49:46:6d:72:b0:59:3b:a7:d4:62:bb:77:62:
f3:84:d0:1f:61:4f:c1:0b:bc:bf:15:84:a2:d1:1e:
20:a7:47:fe:6c:d3:54:aa:8d:44:07:ac:93:85:be:
04:c8:41:ba:5d:40:3f:5b:63:92:23:17:9c:b4:5c:
5b:e3:6e:62:5e:0a:11:ad:87:c7:a8:6d:cf:be:7f:
4d:8b:f1:8b:75:f1:7e:7d:9b:fe:3a:cf:0d:05:c5:
67:82:6f:b0:c9:d6:99:35:96:d3:54:20:17:d1:b6:
a7:4a:ee:7c:fa:15:6f:fa:4d:8c:e5:56:6f:fc:ec:
2f:da:cb:5f:9f:f2:57:82:0b:54:69:52:5b:ba:e8:
13:bf:b8:cf:18:70:41:a3:48:06:67:be:d4:e1:e6:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:90:31:0D:DF:F4:B6:44:AB:70:9B:59:D1:40:B1:80:90:DA:AD
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8f:3a:e7:c9:31:e2:c1:ef:ed:37:3c:db:32:80:74:fd:08:
9c:dc:fb:0e:33:c6:fb:4c:95:69:4b:66:a0:84:3c:63:4f:4d:
c6:c1:f3:b8:49:08:b1:57:e4:1e:28:5a:2b:8c:c8:0b:1f:e5:
e7:e4:e2:1d:0b:a1:36:1c:8e:a9:64:a2:38:79:c4:0e:93:50:
0d:84:22:74:97:58:67:2f:e0:0e:d3:24:a5:ff:03:36:c0:d3:
3d:48:f3:13:44:48:b2:05:55:7e:d0:ec:04:93:d6:7a:37:32:
42:58:85:e8:40:58:e7:ee:d6:e3:b7:d1:13:ce:c2:7b:72:8d:
3e:e2:82:0b:74:e2:08:ba:cd:82:25:3a:4c:62:2b:e8:0a:d2:
ed:fc:d6:63:52:df:31:22:11:71:5d:b0:cb:54:e0:07:fa:ac:
34:f9:c7:89:9a:25:6a:35:15:cf:53:6a:3d:ee:80:47:21:0b:
25:b3:60:6c:81:b8:14:a1:ad:1e:79:91:e7:52:51:3c:a5:b2:
ab:0e:57:30:ed:ed:5c:31:58:64:e2:24:26:39:78:4b:5f:90:
be:c0:ae:7e:14:b5:69:8d:2a:81:18:3e:7e:a2:d0:24:10:09:
22:50:2b:fe:e6:2d:1d:bf:e6:fb:63:15:b4:81:54:17:0e:81:
0f:bf:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:09:20 2025 by rpki-client