Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: ME7bK/ZLLNUt5QcYKAapyB6gmW6TQibWBiMe1gwluhI=
Subject key identifier: E1:C8:E2:D0:42:29:AB:F8:79:9E:4C:D1:9F:8F:FC:A5:5A:A9:A0:60
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019611D7EB03592E8F846C62DEA3D3244C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 20:01:25 +0000
Manifest this update: Mon 07 Apr 2025 20:01:25 +0000
Manifest next update: Tue 08 Apr 2025 20:01:25 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: gvGtnPk4oXKr/JbmzMJv3JYJA6oZ1w7xo4Ay8DR9t5M=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:eb:03:59:2e:8f:84:6c:62:de:a3:d3:24:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Apr 7 20:01:25 2025 GMT
Not After : Apr 8 20:01:25 2025 GMT
Subject: CN=e1c8e2d04229abf8799e4cd19f8ffca55aa9a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:29:a7:1b:8f:9a:50:4b:c9:bd:7e:53:8c:
3b:d3:e3:22:09:82:5e:f7:20:e9:0b:4c:0a:d0:5c:
df:be:74:14:a5:c0:3d:fb:8e:00:d8:b9:bd:b7:5a:
f7:eb:b9:2e:04:f3:9b:1c:b8:0b:5a:11:03:80:d9:
2e:e9:a3:d1:80:e1:fc:f4:9f:2a:0e:78:f1:7c:eb:
93:56:34:2c:99:bc:55:46:20:9b:db:fe:77:f2:3f:
ae:ae:07:27:67:2c:0a:7e:cd:9e:23:4d:2f:a5:c8:
a3:23:6f:86:20:cd:ac:41:ed:93:b2:83:2a:8f:5e:
50:29:d4:e2:d3:89:e9:fe:ff:c7:a9:4c:d8:f4:cc:
5c:84:15:eb:f8:2b:cb:fc:72:89:58:91:f0:19:5c:
6b:1a:e6:ef:63:49:48:8a:37:5e:3d:d0:2a:41:a1:
ed:3e:26:fa:e3:39:71:f8:4e:9b:9b:82:d0:51:e9:
e1:fe:5d:37:1f:7c:d8:14:67:78:10:62:6b:2a:e7:
91:6a:49:ec:be:d0:2d:6f:ad:84:e8:d5:e7:c4:a5:
8d:65:9b:54:55:9e:42:3d:f0:72:b8:07:70:80:66:
13:46:c1:dd:b3:49:ad:ad:99:c9:15:52:6c:61:87:
8e:68:d1:fd:35:f8:ec:b1:ad:16:d0:34:09:0b:81:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:E2:D0:42:29:AB:F8:79:9E:4C:D1:9F:8F:FC:A5:5A:A9:A0:60
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:eb:e8:61:32:29:fc:06:49:fc:56:42:d5:8f:5e:7b:75:
01:2f:6a:79:ed:0d:5f:68:3b:c7:b6:17:05:4a:a7:9a:57:27:
b9:ee:28:16:b7:c5:d8:15:59:f9:47:c8:e5:6c:c0:6b:51:74:
20:56:7d:cb:65:b6:d0:38:5c:25:6e:95:24:af:47:81:fd:fa:
af:4a:b4:52:cd:c2:ec:68:b6:55:9e:35:aa:0c:73:07:e8:4d:
d2:04:d3:2c:da:aa:6e:cf:a3:c7:4f:1c:1f:85:56:dc:e3:31:
5f:14:8c:b4:79:5b:13:33:16:99:2d:17:58:58:db:08:e6:6a:
ae:a5:b3:79:f2:b0:8c:42:6a:14:aa:c0:a3:fb:f1:ee:67:c1:
97:2f:a6:0b:91:2f:ca:d5:d7:81:35:40:bf:ff:74:df:1e:f7:
cb:47:f0:e3:fa:66:b7:f0:f5:8f:fe:95:d6:03:4f:41:ee:b6:
5b:5f:24:a3:d1:e4:a8:2f:43:fe:ad:a2:4c:60:c4:40:80:73:
94:b2:40:2d:ac:57:f7:45:4b:5a:40:90:64:00:8a:3d:41:92:
16:09:45:b0:7f:10:3d:42:7c:8c:bf:cb:b9:2c:ff:30:9e:48:
cf:20:37:21:a1:1b:b3:4f:df:df:b0:bc:e7:d8:e8:e4:0c:e8:
37:65:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:13 2025 by rpki-client