Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: NzbeolZ64Q/D/SxgmqZRShYtZVhf29Fslw0Sm69pUl4=
Subject key identifier: 68:70:4C:3C:12:BC:6F:57:A8:B8:CF:50:23:DC:BF:CD:EC:78:EC:A0
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019654C9BCE727814C15E8EDB9F136557A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1101
Signing time: Sun 20 Apr 2025 20:00:29 +0000
Manifest this update: Sun 20 Apr 2025 20:00:29 +0000
Manifest next update: Mon 21 Apr 2025 20:00:29 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: eteG7Pv9Cn89rFL3T4y9aTDT957J17O6m+jANEfFbes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:bc:e7:27:81:4c:15:e8:ed:b9:f1:36:55:7a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Apr 20 20:00:29 2025 GMT
Not After : Apr 21 20:00:29 2025 GMT
Subject: CN=68704c3c12bc6f57a8b8cf5023dcbfcdec78eca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:38:f2:20:d2:6f:10:97:b2:0e:36:f7:b0:
43:b3:15:ab:e9:b1:69:3e:b1:4d:48:c2:61:de:29:
f0:2f:c7:ae:4d:62:89:75:4a:cc:15:06:05:8a:fc:
26:6d:63:7c:82:0f:6c:9e:8c:0b:1b:b4:56:fb:73:
79:a4:90:49:a9:12:79:d8:3f:50:17:fd:c5:e0:52:
d1:62:66:b9:77:43:b9:d9:15:3f:bc:b3:2b:0e:67:
a7:51:77:7a:c5:3b:8d:45:60:1c:99:3c:9d:46:40:
f4:4e:ad:a7:b4:d1:09:15:6b:43:0f:c2:4b:42:8a:
8c:67:4f:1a:99:8e:9a:32:ce:56:6b:d3:4b:80:dd:
23:37:69:e5:b1:e8:46:9e:a7:7a:14:95:80:18:ad:
77:fe:5f:43:ea:e3:3a:be:81:95:89:37:90:24:4a:
c2:af:54:37:be:a8:2c:45:1a:0b:f7:0e:69:c3:5f:
77:22:09:13:15:7a:66:f3:3a:c6:c7:b9:c1:f9:33:
f2:17:eb:e6:14:97:87:a3:52:5f:13:b9:fe:e0:d2:
bc:99:c5:8a:fd:fb:6e:97:fa:4c:48:0a:58:2b:8e:
43:fa:e6:88:b4:83:11:a0:26:df:75:66:a0:ef:aa:
cf:66:a9:f6:b3:eb:27:2d:e8:6d:87:e6:c1:b2:5f:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:4C:3C:12:BC:6F:57:A8:B8:CF:50:23:DC:BF:CD:EC:78:EC:A0
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:c6:47:e8:47:38:e9:b4:d2:7b:9e:aa:a7:11:32:82:82:
c6:86:cf:09:49:03:d3:91:a1:7c:24:52:d6:61:fd:0b:30:23:
23:0d:ec:e2:a3:1d:bb:ad:de:35:11:20:c5:c4:45:ab:52:f5:
d2:ee:19:99:cf:c4:d6:ab:7a:da:38:ba:c5:96:a3:1a:61:57:
1b:07:18:79:56:09:f0:c4:71:1b:83:18:b6:29:d4:ae:cf:ee:
6f:27:fc:fb:e6:71:f7:9b:48:cf:d5:be:c2:a8:d2:06:82:d2:
13:fc:19:a9:b8:e5:f2:06:7d:eb:65:61:82:12:28:32:97:5a:
3c:e4:bb:26:4c:12:63:76:2f:65:45:70:f8:2d:3d:4b:dd:e6:
98:bc:e9:1c:3f:4d:f4:8d:8e:7a:e0:53:cf:e6:38:45:a6:db:
cd:5c:f5:8b:39:a8:c5:6a:d2:fa:3a:d9:d0:06:ab:7c:d6:7e:
6d:c4:22:8f:46:eb:c3:44:bd:ed:d0:43:4d:66:f7:28:ec:37:
ab:fb:16:1e:e9:38:69:fe:3e:d4:9d:79:78:95:07:41:a9:00:
d8:82:55:1e:5a:c1:61:13:33:e5:b4:31:55:55:b3:e1:13:e1:
d4:9c:cd:81:68:ab:36:fa:a2:91:10:75:71:ad:7d:59:99:08:
19:27:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:18 2025 by rpki-client