Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: CizOx+0Hg40UrAlmAf7nW8iW6twH6hSu5iUmTxSSEQg=
Subject key identifier: EB:13:32:1C:C8:0F:F3:3E:8A:FA:48:55:A0:70:39:B7:8C:7A:B9:04
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01964E598138FF10D963062E3BD561E025E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0B0F
Signing time: Sat 19 Apr 2025 14:00:10 +0000
Manifest this update: Sat 19 Apr 2025 14:00:10 +0000
Manifest next update: Sun 20 Apr 2025 14:00:10 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: gLA3qPX+7e+8NAgBjHYVlhi/+xI01VfQt17jihlFFrM=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:81:38:ff:10:d9:63:06:2e:3b:d5:61:e0:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Apr 19 14:00:10 2025 GMT
Not After : Apr 20 14:00:10 2025 GMT
Subject: CN=eb13321cc80ff33e8afa4855a07039b78c7ab904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:f9:c6:90:56:0b:45:4d:c3:43:12:62:29:
9a:60:d9:87:b9:29:3b:24:c4:81:95:5e:42:de:64:
7f:dc:14:3f:85:8e:5f:3f:9e:e1:f5:f4:65:78:e7:
7c:31:1a:b2:8c:b9:49:9c:09:81:07:4a:fa:58:67:
6c:58:ed:8f:ec:fb:f0:a7:23:50:74:b7:61:e8:31:
00:98:b4:ff:b9:63:dd:e7:43:07:8f:61:33:1b:88:
9d:35:ef:39:e6:db:af:c7:6d:d3:18:77:e2:68:47:
b1:c4:16:a2:59:51:f4:72:a8:9f:45:6a:da:78:22:
45:07:72:3f:53:44:64:42:e0:b1:b1:f3:bc:6a:33:
d2:b8:83:be:c8:93:96:75:e0:a2:66:46:ad:f4:dd:
eb:f0:95:bf:e9:d8:0a:95:b6:1b:8f:3c:1e:56:ae:
bf:a6:ef:cd:55:d1:6e:79:73:2a:a9:9e:42:51:91:
81:41:54:91:53:1b:57:1d:9a:56:87:95:b0:3f:36:
f5:bc:e9:2f:22:59:87:f0:99:27:81:ac:a5:d2:30:
e3:79:da:25:dc:22:a7:12:9d:cc:f5:16:76:ef:d7:
ca:5f:e4:9d:a9:91:c0:7c:ca:92:3a:6c:1e:22:79:
71:aa:4d:1b:72:77:35:26:38:96:9e:bc:56:f1:0c:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:32:1C:C8:0F:F3:3E:8A:FA:48:55:A0:70:39:B7:8C:7A:B9:04
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:39:b5:f2:d9:8a:39:6d:42:f7:75:67:65:53:8d:c3:e0:
b7:28:a9:85:cf:56:07:1f:4a:c6:87:84:9e:b3:a8:dd:2f:7b:
0a:3b:21:12:4b:c1:00:3c:a0:b2:ea:62:7d:c4:8f:ce:14:39:
74:67:76:47:23:9e:97:1d:e9:3e:e1:c6:5c:de:57:65:40:16:
80:92:f7:df:1c:97:89:67:88:96:dc:8f:15:a1:14:fa:6c:60:
0e:96:15:9b:54:38:76:7a:d0:15:f6:7d:84:85:7b:c1:62:b9:
86:ff:b1:7a:64:49:92:a5:c5:8a:c5:e5:e4:96:d3:41:f7:16:
ac:39:2c:c8:99:94:e2:fe:20:b3:0e:d2:a6:3c:0a:42:74:99:
9c:8c:1f:b9:22:59:ab:9e:7e:db:36:08:df:9d:c7:6a:5e:55:
e2:a4:ca:f4:53:e7:4c:57:8f:43:ae:6b:7f:ec:e3:1c:c5:f1:
41:e2:5c:e8:9b:2a:7f:59:ca:73:b1:8b:d4:6a:bf:e4:0f:83:
89:d8:52:cd:0e:fa:bb:79:4c:93:28:d1:a8:14:3c:67:14:3e:
0b:b7:0b:10:24:e8:e1:da:0a:d0:18:4c:af:9b:1c:05:28:d5:
c0:25:55:96:f1:3a:80:6f:2f:a5:9b:a8:39:9f:aa:35:a0:03:
e9:ba:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:42 2025 by rpki-client