Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: daWacqCYuWdg/ZznWPQ8gmqW/pdxqQkuCGJTPFeewoM=
Subject key identifier: D9:00:DC:DB:86:23:A3:6A:8D:AA:05:88:00:A7:A3:CC:E8:5B:F3:E9
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 0196A1642F680546D835912CA79C90DE72FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0EEF
Signing time: Mon 05 May 2025 17:00:19 +0000
Manifest this update: Mon 05 May 2025 17:00:19 +0000
Manifest next update: Tue 06 May 2025 17:00:19 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: dNmwTziJJ+j0TDGNQTcMMNBxIN6IXq8dMULk3aNxmIY=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:2f:68:05:46:d8:35:91:2c:a7:9c:90:de:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: May 5 17:00:19 2025 GMT
Not After : May 6 17:00:19 2025 GMT
Subject: CN=d900dcdb8623a36a8daa058800a7a3cce85bf3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:c6:4a:50:4b:ee:eb:60:aa:3a:65:f5:4b:
04:f2:e0:1a:d9:45:a2:3d:63:b4:33:81:b9:e4:ab:
83:85:c0:c1:f9:06:18:89:b3:ce:15:51:9a:6d:ff:
fb:83:a5:03:b3:4f:a6:48:65:91:2b:d8:b4:1b:5d:
83:f9:c9:20:2b:3f:2e:b0:e1:0f:f3:96:2f:4c:f7:
d9:be:e8:92:69:69:bb:30:20:6f:2b:8a:0e:b3:c8:
31:ee:6e:bc:b9:64:77:b4:79:17:4b:33:f9:73:b1:
f1:3f:33:51:3d:77:27:40:f0:15:87:b4:4f:0c:61:
35:bf:1a:f1:0a:c8:ac:71:83:09:76:e8:50:be:7e:
55:60:a4:1d:cd:de:53:c8:4a:d1:ff:81:ec:5c:8d:
8b:88:87:d8:4f:db:27:88:01:45:ff:99:bb:be:fe:
da:42:ec:a5:37:9a:db:41:06:33:f9:34:e9:c9:39:
fc:56:e9:69:de:24:9e:58:ac:50:57:8f:dd:46:43:
20:22:e7:3c:4c:56:5c:24:57:af:05:a5:3b:cb:bb:
cc:44:16:03:b3:34:61:a7:4f:45:65:a5:18:e0:c0:
90:0c:19:49:6a:68:e7:4d:91:7e:c8:2f:20:6e:b6:
a4:3d:55:d1:0e:fa:f2:05:2e:72:87:a0:e9:60:6e:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:DC:DB:86:23:A3:6A:8D:AA:05:88:00:A7:A3:CC:E8:5B:F3:E9
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:52:ed:87:e3:d6:4f:6c:65:8f:2b:b9:9c:a7:10:14:18:
9b:a0:92:d7:ef:fe:1e:80:de:d1:4a:89:5c:e6:b6:28:84:ca:
c8:7b:d7:8a:de:97:ca:50:88:b6:8e:13:0f:2c:5e:af:9e:8b:
03:bf:33:3a:36:50:0d:b0:19:c1:43:40:57:df:fa:2d:31:9f:
13:e3:de:1a:a5:5f:c9:b7:8e:00:79:76:4a:0b:b2:ce:1a:2e:
63:c8:f4:7b:e1:18:3a:54:61:53:b0:08:8d:6d:65:b3:bb:6c:
a4:ed:18:80:8a:5c:b9:f4:7a:ce:c6:04:f9:bd:f7:ac:94:00:
f3:a7:f8:6b:9e:29:18:0c:1c:d7:29:0c:d6:0a:9f:b5:8f:48:
e4:06:a3:78:84:da:55:1d:d1:e0:c1:af:ee:2d:c5:e4:8f:35:
85:a4:79:4b:09:bf:a0:7b:47:ed:70:b4:d8:6c:6b:97:db:75:
1d:bf:cf:3b:30:98:40:ff:8a:24:9c:97:1a:62:95:71:b8:f9:
a1:bd:4c:11:57:78:88:2f:e2:cd:a6:8f:d9:16:b1:ba:36:b5:
98:11:7f:5f:36:88:58:e8:b9:c1:98:3a:d9:a5:6d:1a:d3:18:
32:80:58:be:7b:7e:cb:21:4f:d1:09:a0:33:2c:b3:de:24:78:
4a:0b:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:35:49 2025 by rpki-client