Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
File: cnS17iqgd4rxMENYIlrGflUXCog.mft (raw, json)
Hash identifier: 29bDhek6wyXR3C0O3+2TAZ2E3ZTR9/EZp2bXcclIDyo=
Subject key identifier: BF:E8:27:F6:F4:5A:2B:08:52:B9:E1:F6:08:29:17:99:FC:3D:4F:CD
Authority key identifier: 72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88
Certificate issuer: /CN=7274b5ee2aa0778af1304358225ac67e55170a88
Certificate serial: 019658387478F5AA8509576884EBABEC6113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
Manifest number: 082B
Signing time: Mon 21 Apr 2025 12:00:16 +0000
Manifest this update: Mon 21 Apr 2025 12:00:16 +0000
Manifest next update: Tue 22 Apr 2025 12:00:16 +0000
Files and hashes: 1: Ck9V105I1WzILyho--HhjxtMhOo.roa (hash: n/nSiTnqvWrHsmL1agIClZLa+JDSNKpvkkGREC8GFbY=)
2: cnS17iqgd4rxMENYIlrGflUXCog.crl (hash: BxRAYVAFIFR4evwaHJTojtjHQz4JwERxRv3qdPzO+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:74:78:f5:aa:85:09:57:68:84:eb:ab:ec:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7274b5ee2aa0778af1304358225ac67e55170a88
Validity
Not Before: Apr 21 12:00:16 2025 GMT
Not After : Apr 22 12:00:16 2025 GMT
Subject: CN=bfe827f6f45a2b0852b9e1f608291799fc3d4fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:18:34:df:41:17:8a:c6:1f:a5:44:c0:9a:
46:01:ea:ce:02:ea:55:94:e6:55:a6:64:dc:7f:78:
39:71:08:34:ae:72:8e:76:61:ef:b3:37:8a:4b:6a:
c8:f9:b2:93:f3:42:44:53:9e:a2:36:2d:a9:6e:6e:
ae:b2:8a:58:50:d0:46:d1:b8:96:6b:84:54:ad:5a:
93:12:90:37:59:f7:c6:96:66:c0:fe:e9:c7:7d:cd:
54:97:f7:68:ca:96:99:f7:23:63:91:e7:95:6c:7d:
f5:25:6b:fe:2d:f4:60:18:92:19:dc:27:85:78:5c:
13:67:d2:6a:5b:a7:d1:78:af:8f:dd:b3:68:4b:56:
a6:d4:77:72:4c:7d:bb:6b:f4:fb:25:e5:f8:29:a2:
95:a4:97:fd:b8:e7:9b:2c:1f:09:10:82:31:9e:f4:
7f:ef:c3:f6:eb:c3:cd:25:e6:af:20:fa:9e:21:ac:
63:b9:f5:82:01:2e:ad:71:5c:79:b5:05:e4:bb:78:
fe:5a:05:1b:04:d8:20:44:45:cf:9c:f5:ab:4c:ae:
c6:b2:8b:2d:dc:9c:9a:ab:87:c2:2b:2e:79:06:aa:
ef:c8:84:17:66:d3:64:fe:67:58:9b:a8:ee:37:46:
ff:c8:3c:81:f8:44:3f:58:bb:d9:9e:4e:6f:e8:7c:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E8:27:F6:F4:5A:2B:08:52:B9:E1:F6:08:29:17:99:FC:3D:4F:CD
X509v3 Authority Key Identifier:
keyid:72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:67:fa:36:7f:64:f8:af:f8:b0:2a:04:3d:cd:59:99:c4:6e:
5d:e9:fb:ca:9f:59:43:dd:86:3c:c5:4e:0b:a4:79:0e:42:dc:
ae:ce:8d:60:fc:f7:2c:e4:37:2c:00:22:be:ea:4a:37:69:2f:
9f:b9:a7:df:a9:25:b2:39:b0:50:ed:55:0e:f4:fa:e6:93:89:
44:05:f5:11:6b:60:fc:c8:b8:ad:92:7b:f2:f6:ba:b4:1a:64:
9e:1e:3b:88:11:56:08:be:20:46:a8:2d:c0:05:58:6e:07:89:
53:fd:f1:6f:c0:9f:19:8e:cf:38:e1:c6:71:0f:92:2b:90:1c:
93:9e:0b:73:32:b4:b1:e6:80:f2:7e:1c:6d:a7:c2:1f:f4:79:
33:e8:a6:d3:5d:66:9e:5f:f8:60:af:c6:c2:0d:58:2a:16:87:
fe:5f:07:1a:08:41:9a:45:ff:fd:2f:eb:2b:7c:43:5e:56:ec:
32:75:28:99:fd:df:2d:7f:9d:42:fb:1e:09:8b:7a:6b:fc:64:
96:ef:09:b1:1c:61:2f:0c:a6:7a:49:2a:ea:ec:f6:bc:a1:e1:
7c:26:65:60:ea:19:f8:8d:92:00:67:5a:64:c6:88:14:4b:a9:
a2:04:ee:39:85:d5:a6:47:41:f1:29:08:fb:92:86:e5:52:24:
cb:b2:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:36:41 2025 by rpki-client