Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: HQypYLlFKk+Rzwfl9CRAoNmW+rTP+jfGMpgG6B0L/WQ=
Subject key identifier: CC:54:3A:68:FA:1D:20:15:1D:58:39:EB:56:C1:F3:51:6F:D4:0E:E9
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 0196451FA29A67D2FA5A70C6FC31EFB213D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 19:00:23 +0000
Manifest this update: Thu 17 Apr 2025 19:00:23 +0000
Manifest next update: Fri 18 Apr 2025 19:00:23 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: l387edlV/S1x+e7nWF/YowaVV3PtS52xIXE4phHa7IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:a2:9a:67:d2:fa:5a:70:c6:fc:31:ef:b2:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Apr 17 19:00:23 2025 GMT
Not After : Apr 18 19:00:23 2025 GMT
Subject: CN=cc543a68fa1d20151d5839eb56c1f3516fd40ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:01:22:c5:5c:96:07:2b:7f:77:2b:27:a8:
26:f4:b3:af:19:5d:e6:43:28:75:ae:26:3f:7d:e5:
7e:e2:ed:6a:0b:a0:9f:1d:8e:0d:21:b0:cb:c5:d9:
3e:07:67:10:9a:03:4c:49:2a:a9:a1:12:9f:f2:5f:
bf:d7:0c:52:00:04:2e:77:ac:0f:ec:93:fb:bd:03:
0d:30:57:67:93:41:9b:76:11:12:3e:f3:ff:f8:1c:
15:44:93:d8:00:be:22:09:a7:ab:8f:6d:a0:b3:e4:
87:f5:74:d3:6c:cf:62:8d:9f:c4:78:0a:a7:1a:82:
f6:04:48:f1:c0:53:87:e9:13:6d:23:06:d7:8a:18:
e8:af:3f:0f:b0:bb:33:be:9a:f3:5a:b1:b7:55:66:
4e:33:9d:95:83:f3:9d:41:5f:6a:41:87:25:63:59:
2e:93:08:1c:ac:52:70:32:3e:3e:a5:2d:a5:b3:5e:
84:3d:e0:7b:1f:97:b7:0c:d0:b8:0e:cf:0b:49:06:
0b:35:9f:86:25:27:a1:0c:52:50:ae:8c:af:7e:ff:
86:89:ac:53:2f:c3:ba:e7:8c:48:c5:dd:3a:0b:38:
cb:6c:72:19:ba:65:ea:06:fe:03:2b:be:cc:08:4d:
19:2e:9c:2e:1e:e0:d7:43:96:36:7c:fb:57:ef:c9:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:3A:68:FA:1D:20:15:1D:58:39:EB:56:C1:F3:51:6F:D4:0E:E9
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:30:23:05:20:b4:60:5b:b6:2f:8f:ec:f4:64:e6:96:e3:
5c:ce:a0:e8:52:f4:85:db:be:ce:5f:0d:b0:e4:44:bc:a6:f7:
f0:05:a4:92:83:06:ec:18:92:af:e9:be:c6:a8:4d:f4:c6:5b:
b2:ab:fe:06:30:c8:72:b6:3d:fe:88:24:14:76:b4:2c:40:dc:
08:6a:80:d1:d1:dd:36:55:5c:fb:58:0a:40:2e:ad:26:74:47:
e8:67:79:bd:d6:ac:90:cb:1e:53:76:a8:fe:a7:42:19:02:4d:
f5:08:69:6e:0c:a6:8e:8d:38:48:00:e5:e4:eb:8b:b8:34:e5:
4c:72:ac:c6:a2:5c:6d:d1:ce:8c:5d:46:0a:8a:f6:82:9f:b9:
f3:66:ef:43:ce:ae:18:61:06:f8:5f:d6:10:d0:a0:6b:9b:34:
5a:4e:bd:5b:65:e8:4f:6c:b5:23:52:53:c8:7d:c5:44:d6:c2:
d1:3b:6b:15:5c:5c:a0:0e:2c:a4:37:1a:80:23:7e:be:b0:99:
50:51:b9:41:ca:3c:a3:72:ae:89:c7:dd:8a:fb:f1:be:8e:2a:
9e:aa:73:6b:12:bd:b2:11:40:75:bf:d6:da:15:41:07:11:9e:
f7:10:cb:45:b4:f9:7e:0c:ee:b8:08:fe:55:b0:d7:9e:cf:62:
85:da:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:55:37 2025 by rpki-client