Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: 9Ex33P7C0VRNPF72phr9vX0qIZOJJwRvVBgcV+Efz0k=
Subject key identifier: 45:72:68:62:FF:45:15:FD:2D:10:9B:9B:32:4D:29:F6:81:BD:B5:92
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0196108E026EFAD189DCD2E2CC8FB9A0CB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 14:01:04 +0000
Manifest this update: Mon 07 Apr 2025 14:01:04 +0000
Manifest next update: Tue 08 Apr 2025 14:01:04 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: JDAvcVk8MsZRxLX0b51x+Tt6NxFBqrOtiNvkkcygEj8=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:02:6e:fa:d1:89:dc:d2:e2:cc:8f:b9:a0:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Apr 7 14:01:04 2025 GMT
Not After : Apr 8 14:01:04 2025 GMT
Subject: CN=45726862ff4515fd2d109b9b324d29f681bdb592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:65:8a:0e:42:9b:ab:6a:ee:eb:d8:ae:d5:d5:
17:3e:c5:4f:92:2b:00:61:e6:1b:2f:be:40:b2:29:
02:8d:85:ca:d9:b7:9a:c0:b0:72:b6:c8:ae:64:9e:
a7:9c:8e:18:fa:19:1a:b7:c9:ee:f1:59:47:2f:c1:
a1:14:9c:30:b5:60:68:f8:b8:b5:66:be:f7:08:f1:
b7:22:f3:9e:f3:1f:1e:db:6c:82:f2:0f:50:0d:60:
e1:af:f2:6c:ee:38:42:f9:72:0b:07:cd:b1:ea:2f:
26:51:2f:a5:59:63:27:07:9e:3e:be:02:3f:f4:a9:
5d:a2:49:dd:86:f8:41:a5:d8:5e:8d:1e:c8:01:d0:
3d:c2:7d:98:07:66:a7:b7:b7:d5:6d:f1:81:b4:4e:
2b:d7:d7:b8:7a:e2:e6:12:18:f4:e3:ac:b0:09:53:
f3:b1:2b:80:af:02:b2:f1:d2:01:8f:3b:e1:ee:c5:
18:fb:60:f6:ba:42:58:3f:3a:e7:b5:2c:74:69:ff:
7f:26:9b:25:26:a1:8e:ea:43:c1:32:da:c6:c4:15:
98:a5:b7:d9:4f:c2:39:c2:6e:f4:c4:1a:56:d9:3f:
91:0a:dd:ae:78:ef:77:ff:31:dd:8f:82:22:23:bf:
88:0a:8f:d6:71:40:48:03:e8:f7:19:bd:e2:60:53:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:68:62:FF:45:15:FD:2D:10:9B:9B:32:4D:29:F6:81:BD:B5:92
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:14:10:90:85:11:0c:9d:fa:d0:5b:5e:29:0e:b6:73:77:45:
b7:ea:ed:23:b5:6e:d8:0d:6a:fc:84:78:ae:31:86:a5:17:b1:
eb:19:f9:a1:8c:7a:49:28:3c:a5:51:5c:79:f5:c4:7c:e8:90:
79:b0:77:71:eb:e0:9b:ea:6e:fc:54:85:d2:52:fe:f2:09:12:
e4:e3:8c:d1:6b:d9:91:b2:6d:42:fb:b2:58:08:20:24:e8:52:
2e:dd:f5:f7:ef:c3:90:61:ca:13:df:c1:62:94:f6:b8:c3:eb:
f6:aa:3d:aa:0f:13:c0:ee:65:eb:08:c3:28:f3:2a:f7:33:2c:
4a:23:b6:d7:18:05:ab:f7:1a:3c:c0:c3:52:d3:60:fe:3c:c8:
fe:f3:ab:69:6e:79:24:95:71:d6:7b:ca:91:95:b4:92:08:c4:
ce:9a:d8:ed:82:59:4c:4f:0a:73:06:c5:52:76:e5:80:72:79:
e4:ea:8c:de:e8:e9:e6:14:4f:83:b8:e4:e2:2f:e8:b8:df:87:
88:b5:5a:de:1b:5f:2e:11:a8:2f:82:7b:42:89:1b:6d:85:de:
ba:1e:57:b0:05:96:8a:4e:75:b6:27:d9:19:ca:5d:00:14:42:
6e:8b:60:cb:2c:97:69:9d:bb:47:8b:e4:1b:18:f4:6d:e7:c7:
f9:a6:41:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQjgJu+tGJ3NLizI+5oMt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjUwNDA3MTQwMTA0WhcNMjUwNDA4MTQwMTA0WjAzMTEwLwYDVQQD
Eyg0NTcyNjg2MmZmNDUxNWZkMmQxMDliOWIzMjRkMjlmNjgxYmRiNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mWKDkKbq2ru69iu1dUXPsVPkisA
YeYbL75AsikCjYXK2beawLBytsiuZJ6nnI4Y+hkat8nu8VlHL8GhFJwwtWBo+Li1
Zr73CPG3IvOe8x8e22yC8g9QDWDhr/Js7jhC+XILB82x6i8mUS+lWWMnB54+vgI/
9KldokndhvhBpdhejR7IAdA9wn2YB2ant7fVbfGBtE4r19e4euLmEhj046ywCVPz
sSuArwKy8dIBjzvh7sUY+2D2ukJYPzrntSx0af9/JpslJqGO6kPBMtrGxBWYpbfZ
T8I5wm70xBpW2T+RCt2ueO93/zHdj4IiI7+ICo/WcUBIA+j3Gb3iYFP03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVyaGL/RRX9LRCbmzJNKfaBvbWSMB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xQQkIUR
DJ360FteKQ62c3dFt+rtI7Vu2A1q/IR4rjGGpRex6xn5oYx6SSg8pVFcefXEfOiQ
ebB3cevgm+pu/FSF0lL+8gkS5OOM0WvZkbJtQvuyWAggJOhSLt319+/DkGHKE9/B
YpT2uMPr9qo9qg8TwO5l6wjDKPMq9zMsSiO21xgFq/caPMDDUtNg/jzI/vOraW55
JJVx1nvKkZW0kgjEzprY7YJZTE8KcwbFUnblgHJ55OqM3ujp5hRPg7jk4i/ouN+H
iLVa3htfLhGoL4J7QokbbYXeuh5XsAWWik51tifZGcpdABRCbotgyyyXaZ27R4vk
Gxj0befH+aZBPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:40 2025 by rpki-client