Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: fPHdicf4MvENuiKmluKDPBh6Umsw4tIQT0RRgCeH35w=
Subject key identifier: 98:34:14:7B:4E:62:54:1E:E8:66:21:40:4A:8D:AC:F7:F1:FC:9C:01
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01969E9B1E431F15EB6C53BA8851FB94F57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 01AA
Signing time: Mon 05 May 2025 04:01:28 +0000
Manifest this update: Mon 05 May 2025 04:01:28 +0000
Manifest next update: Tue 06 May 2025 04:01:28 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: Cod0cvtDS6XDNrY25VaUf7HkRhYFd0eG83DSgqbCKhc=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:1e:43:1f:15:eb:6c:53:ba:88:51:fb:94:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: May 5 04:01:28 2025 GMT
Not After : May 6 04:01:28 2025 GMT
Subject: CN=9834147b4e62541ee86621404a8dacf7f1fc9c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:8c:fa:14:35:c2:7e:b0:3d:77:a8:0e:c8:
49:b4:f2:47:c1:2a:c3:cc:ef:0a:d6:5d:b8:2a:4a:
00:0e:5c:34:a3:c1:b5:ef:df:ce:a5:30:67:7a:ac:
1a:f9:e9:66:bd:13:c7:ad:df:81:8c:82:94:3c:48:
34:10:aa:de:d0:43:4d:1b:08:ca:f8:a6:5e:8a:5a:
41:77:9d:4e:22:4a:6c:a0:11:e9:cc:d6:93:2b:6a:
ea:d9:6a:9d:a4:65:f8:7e:d1:1a:45:f7:62:62:42:
91:bd:f5:11:18:83:2d:f5:27:74:22:c9:7f:a2:d0:
61:40:af:bf:6d:db:98:43:09:76:cc:47:77:1a:33:
2c:ca:7b:cd:e4:db:7d:ec:d8:55:0f:45:6f:04:ea:
95:2d:7b:08:0c:bb:ec:7e:18:cb:07:f8:1a:4d:a0:
fd:39:b1:63:6d:5e:20:6d:6f:57:9d:bb:e1:29:b9:
42:69:d3:12:f0:fb:15:46:b4:16:94:8b:c3:83:8e:
e7:a8:e5:50:7d:8a:15:10:97:1f:00:a1:0c:56:c3:
f2:2b:5c:e4:4e:a9:09:de:fa:e4:67:0a:62:f9:bf:
6c:d5:d8:10:33:b0:05:a2:26:62:60:e5:54:95:8d:
85:04:a1:f6:4a:17:c8:90:96:48:24:b9:a8:5c:27:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:14:7B:4E:62:54:1E:E8:66:21:40:4A:8D:AC:F7:F1:FC:9C:01
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8a:fa:13:5d:1f:ef:dd:b3:32:0f:46:ed:9e:61:5f:9a:98:
db:8a:a8:f6:ba:3c:1f:08:6a:34:45:84:82:13:b5:5e:ac:00:
22:96:27:bb:35:4a:5d:1c:3c:4b:a8:37:00:dd:94:2a:77:0c:
ec:8c:f3:9c:67:d7:84:61:88:aa:bb:37:c1:a4:56:b0:68:01:
a1:45:7f:34:39:ea:d6:e8:bd:dc:3b:6c:5d:3a:1b:4b:91:ae:
25:34:c7:10:ce:7b:4c:bb:dd:bc:16:04:9d:74:62:d1:10:17:
74:b6:40:dd:35:75:e8:56:28:b5:6c:51:6e:63:a4:21:dc:48:
b1:33:07:e1:6e:a4:df:24:8a:68:b8:72:e7:dc:18:86:36:33:
a2:2c:6d:4d:91:75:90:b0:cd:9f:73:61:a1:12:26:bd:5c:0e:
ef:06:f6:22:c3:bf:c5:39:2f:8d:1d:78:09:36:b1:b8:9e:3a:
7b:19:12:0c:d9:e9:e9:1e:97:56:b0:da:44:44:ee:83:62:4b:
6b:9a:44:0a:bc:b6:cb:a8:79:38:6a:e4:89:4c:86:47:c8:65:
5a:fa:8d:a9:c5:bb:63:78:a8:2b:20:23:3d:1d:60:6f:a1:3a:
3b:37:3c:de:37:4a:d3:97:f6:30:3b:d0:11:41:6e:41:86:1e:
04:45:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:31:51 2025 by rpki-client