Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: zkwFf9B9HTbpLlRRs4lxoJy69Navf7H8GCgSwYNjttw=
Subject key identifier: A9:75:12:78:94:17:6A:FA:BE:8D:62:AE:F3:53:D3:23:76:FC:72:8F
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019655006EAB16A1F567ECCDBD38AD7F76D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0B65
Signing time: Sun 20 Apr 2025 21:00:13 +0000
Manifest this update: Sun 20 Apr 2025 21:00:13 +0000
Manifest next update: Mon 21 Apr 2025 21:00:13 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: EAI+uOBWEAu8xyOScIjLc5GCKUdG8WH4RbiiQvFNQDk=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:6e:ab:16:a1:f5:67:ec:cd:bd:38:ad:7f:76:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Apr 20 21:00:13 2025 GMT
Not After : Apr 21 21:00:13 2025 GMT
Subject: CN=a975127894176afabe8d62aef353d32376fc728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:1d:6e:cf:cc:89:42:c9:63:94:d9:3b:2b:
51:30:c1:72:f1:54:d9:03:28:04:b4:d8:ad:27:b0:
10:3d:1c:53:ac:8a:ad:e1:16:cb:74:83:d2:87:71:
a1:40:08:4a:c3:c7:f2:f4:9e:4d:b8:83:5c:08:4c:
59:a1:fd:ce:f7:12:8a:f3:5c:8d:20:a6:be:25:6d:
97:cb:b6:16:98:63:e0:34:18:82:d0:70:bf:c1:a0:
c1:69:82:ee:34:18:60:f8:6f:68:98:a6:22:89:1f:
a9:d7:48:49:d3:23:51:2e:ae:e4:d5:78:16:ef:1e:
76:36:cd:fa:f6:65:43:30:bf:b6:6c:a7:2f:de:96:
4d:95:e0:74:f4:61:b0:21:6a:93:6a:13:4a:25:42:
01:0f:14:40:b2:bc:a1:92:ac:29:ba:f3:89:e8:ca:
8c:78:27:60:c0:76:21:25:a1:56:cb:9d:0c:d2:43:
dc:fc:4b:f0:90:8f:fb:f8:12:0e:ac:13:11:61:1f:
f9:32:6a:67:65:e9:76:82:43:5d:c1:c5:e0:fd:bd:
84:8c:64:c4:00:43:9d:f4:bd:5c:db:0a:12:36:39:
f6:11:c3:e6:ca:6e:39:32:f7:e9:92:29:18:c9:db:
6f:cd:05:00:66:d4:d9:e9:d2:2e:7d:40:f1:4b:fe:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:75:12:78:94:17:6A:FA:BE:8D:62:AE:F3:53:D3:23:76:FC:72:8F
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c4:60:76:61:f6:2f:48:66:da:32:44:52:47:f6:db:f1:30:
d7:07:6c:af:e9:6a:9d:03:27:79:6a:bb:fb:d4:d0:71:e0:90:
a6:a7:a8:6a:8c:9f:43:70:9f:4e:c6:f8:2a:9f:ea:3d:36:16:
07:7e:cf:cd:56:2f:e1:bf:8f:e4:16:9c:3f:93:1b:66:18:eb:
6e:20:ea:c9:a0:8b:b5:3b:92:de:60:34:63:32:af:8f:ac:bf:
cf:ed:27:24:14:5d:b9:9f:19:b9:02:e2:36:d0:2c:20:7b:6c:
3b:3a:01:11:b0:3d:27:a6:97:a4:72:20:a2:e0:63:79:ac:72:
a9:d9:78:69:b5:92:68:21:09:13:5e:c1:f1:20:55:4e:72:23:
3b:87:f5:a5:1f:b4:81:71:05:79:58:44:21:ae:ae:51:ac:0a:
59:71:62:b4:29:d7:95:53:98:d0:9d:2a:4e:c6:70:d8:aa:ef:
dc:7e:e6:76:7c:1b:6e:a3:ce:a2:c8:ae:ae:8d:14:ce:39:42:
ff:0f:bd:15:a1:fa:41:ad:35:23:9a:38:0c:43:51:82:fb:49:
10:74:1a:7b:02:f0:36:44:fc:a7:ca:04:6f:05:a4:f5:2a:93:
b9:c4:8c:b7:b7:ba:6f:ac:2d:b7:42:bc:8f:0d:a9:a2:e7:ac:
4f:d6:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:40 2025 by rpki-client