Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: dXayy7JUj9YF6h1SwVoT4a8+ujurQDvMfOfpx/jus50=
Subject key identifier: 3F:3A:85:1C:B0:C5:CA:B6:6E:2E:DC:11:08:CE:EE:AE:E3:1A:FE:59
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 0196458DC981E130B0CAD68481BD56903CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 21:00:42 +0000
Manifest this update: Thu 17 Apr 2025 21:00:42 +0000
Manifest next update: Fri 18 Apr 2025 21:00:42 +0000
Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: F87NkDZ5INN2HGDPgKw2Dq+/QldJFMhD9yDBBb4aml4=)
3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:c9:81:e1:30:b0:ca:d6:84:81:bd:56:90:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Apr 17 21:00:42 2025 GMT
Not After : Apr 18 21:00:42 2025 GMT
Subject: CN=3f3a851cb0c5cab66e2edc1108ceeeaee31afe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:9a:1f:b9:b2:a7:18:6b:40:29:d6:e8:ba:
e7:1e:39:9f:0a:10:73:c3:df:e1:f5:3f:d8:ff:73:
f7:60:e8:e6:5f:b2:59:42:cd:1e:ea:0a:b4:d1:c3:
5e:14:db:8e:71:dd:8b:53:ca:03:13:a9:91:a2:9b:
82:a1:e8:9c:db:fd:1e:43:f7:0a:73:ae:82:5a:40:
ac:7f:db:40:45:1d:4f:70:99:41:17:5d:05:c9:e2:
2d:25:b7:3d:cd:36:e4:2d:f9:e7:27:fb:68:ae:48:
9b:83:46:07:3b:43:65:9f:f9:b3:06:9a:1a:db:a3:
50:9a:0f:98:b7:32:3b:41:10:82:9c:b8:a9:2b:af:
04:3d:b7:61:30:9a:02:1e:0f:ca:64:ca:c9:a1:14:
27:0f:6b:c9:76:c5:bd:bf:e1:8a:29:46:22:da:a1:
79:c7:80:22:b1:fc:14:9f:b1:bb:6a:f4:5a:cb:24:
87:49:8c:44:e7:ac:1f:c6:7f:06:1e:a8:8c:ac:3a:
87:81:34:9b:d4:63:e0:04:34:06:f0:a8:70:2b:56:
2a:e7:2f:1c:3c:91:00:c4:f5:19:ba:8f:a7:d1:ed:
25:48:9a:01:07:fa:0c:87:95:e7:66:01:28:81:bf:
f2:bf:4c:44:7c:fc:11:72:b5:62:bd:40:9d:a2:6e:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:85:1C:B0:C5:CA:B6:6E:2E:DC:11:08:CE:EE:AE:E3:1A:FE:59
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:cd:16:40:42:b3:11:3c:37:8e:7a:57:e3:61:e7:d9:73:
1b:86:b7:67:dc:4d:45:82:f5:78:5c:20:99:d8:d0:d8:eb:40:
48:56:6e:91:39:e9:58:bb:2f:72:58:4f:12:af:a4:a0:a4:1e:
5e:3e:e3:18:2f:13:5e:2b:12:48:af:b4:b9:e3:cf:78:3c:05:
c1:6f:17:b3:8a:60:af:c9:92:22:85:a9:3d:81:0d:60:f2:71:
86:b6:68:68:6e:18:3a:25:b3:89:b2:1f:e0:24:35:49:16:b8:
48:cf:aa:1e:e1:6b:b1:d8:51:47:cd:76:67:90:73:eb:8e:34:
d5:8e:b9:a6:51:ae:e9:97:dc:ad:e6:13:0d:76:0c:2d:c1:d1:
e5:76:72:48:d9:22:11:d4:ca:15:39:36:b5:9a:df:2b:0d:64:
3d:ab:85:28:5e:c8:08:3a:65:ba:19:89:d8:52:74:04:fe:87:
aa:dc:80:06:a7:15:42:67:17:a9:c5:c4:34:1d:d8:ce:ce:b9:
a6:21:f8:f3:70:ab:63:26:06:55:dc:5c:6f:50:9f:d5:3d:e0:
79:01:5b:f8:e8:07:cf:4f:7a:0c:09:8a:39:ac:09:26:df:b1:
4b:3a:4c:5b:9f:93:77:d6:e3:06:56:ce:a3:6e:52:2c:7f:19:
a5:84:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:57 2025 by rpki-client