Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: RLHTKtuQmu/v6LEeHvGmzc8KnL6L9cKUYQkbJHYGzc4=
Subject key identifier: 09:28:6C:B2:42:FD:22:5F:21:B5:B1:AF:41:0C:AC:64:C5:C0:68:F5
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 0196A7D48448618D69769A4BB3EAECE454A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 23:00:44 +0000
Manifest this update: Tue 06 May 2025 23:00:44 +0000
Manifest next update: Wed 07 May 2025 23:00:44 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: 33Ah4kLlQnEs0HbJfpvvILGMIQkEyAdRB2onIyqa9mI=)
2: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
3: kKi1E3PbMMVFH7DkXfoL7bN1Y8Y.roa (hash: KU0qbsM0A1KDDa+DQi187g2Fd0zrIojzhDbTUg8nXDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:84:48:61:8d:69:76:9a:4b:b3:ea:ec:e4:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: May 6 23:00:44 2025 GMT
Not After : May 7 23:00:44 2025 GMT
Subject: CN=09286cb242fd225f21b5b1af410cac64c5c068f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:52:5e:ab:d9:3c:21:0a:46:19:09:c3:94:
e2:47:95:b7:af:ea:6d:10:e1:19:c0:d6:1b:f2:8d:
01:21:49:41:ae:b4:e6:49:4c:37:5d:e7:9f:e8:47:
0f:d3:a9:cb:3c:ad:2a:ad:fa:64:3b:3e:a4:d2:26:
3b:2e:8f:59:9c:f8:98:6a:3d:0d:e8:5e:b4:b3:01:
6c:35:71:c0:e9:ed:28:70:6a:26:6d:c9:3c:52:75:
53:58:49:6a:fc:77:bb:a2:0d:a6:3a:68:f0:a2:4a:
a7:61:ea:14:61:83:c7:a2:b6:9f:01:41:f2:88:da:
46:34:89:6a:b8:bd:84:30:cc:6a:d3:2b:5f:d6:d4:
32:90:24:e9:fe:15:1e:af:64:16:cf:61:b9:00:07:
ec:d3:e7:37:42:27:6a:e7:19:74:3f:37:55:ad:c0:
55:fc:d7:40:3e:1b:32:6b:58:6c:e8:0e:79:d5:7c:
95:ce:b1:53:ea:53:d4:f6:c8:e3:6b:a5:b9:90:3a:
be:cb:bb:0a:2e:44:c9:93:60:ef:35:1a:2e:97:41:
9c:99:13:b8:68:2c:20:a0:07:70:ff:cc:31:9f:98:
85:26:99:92:50:0f:ad:42:65:e8:46:b8:9e:6e:b2:
81:c3:5e:2f:14:2f:f4:ea:57:56:72:19:5b:8f:d1:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:28:6C:B2:42:FD:22:5F:21:B5:B1:AF:41:0C:AC:64:C5:C0:68:F5
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0c:5f:b9:7e:4e:bf:bc:37:cf:31:31:fa:8b:a9:d0:34:c4:
28:59:be:d7:ef:24:62:e1:2d:95:48:60:2f:f0:49:ce:a0:fc:
0f:f8:37:00:f9:38:86:87:16:60:00:dc:7a:f5:67:a8:2e:09:
24:cd:91:d9:a4:67:45:06:c7:90:8f:53:34:e2:72:92:3f:98:
20:3b:8a:54:1b:82:33:5a:e2:8b:91:eb:0f:4d:e3:50:f0:24:
d4:21:7f:6a:b3:27:14:92:1c:eb:fb:61:87:9c:17:59:62:2d:
ce:45:e0:8c:44:e1:71:17:99:75:5c:cd:f8:7f:d3:f4:9c:ba:
20:e5:d3:22:9b:8c:a8:30:e3:bb:63:9a:d0:60:1f:ca:9a:24:
3a:40:6b:87:98:65:a8:ed:58:f9:3b:53:8e:60:e4:86:0a:bd:
76:38:39:8a:e2:55:3c:fb:66:f1:c8:71:2c:0d:72:ce:40:cf:
12:29:33:39:5a:9e:12:0d:c8:10:ae:2f:e6:6e:96:00:22:7b:
16:ec:06:94:90:c1:49:09:36:89:93:d5:b6:49:88:e2:e1:62:
af:d2:a7:82:66:5e:1b:bf:6a:79:bf:8d:c0:69:c0:61:e1:2f:
bb:4c:8e:1c:3e:40:51:28:46:73:78:cf:db:c4:cf:83:84:75:
81:2a:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:55:47 2025 by rpki-client