Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: sqk/1HkE/EGMqnFF0pdw/awOIozJVqM98dcCJay3T6o=
Subject key identifier: 78:A2:62:86:C7:A7:A7:69:74:3A:54:52:D0:CF:B9:2E:7A:10:74:DA
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 0196458D50D4D103D9ECDA8A349DD0A1B42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 21:00:11 +0000
Manifest this update: Thu 17 Apr 2025 21:00:11 +0000
Manifest next update: Fri 18 Apr 2025 21:00:11 +0000
Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: 0B1q97nc7m6dfp43P37IY4TSjak3yNa0QP2pLa0aIZM=)
2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:50:d4:d1:03:d9:ec:da:8a:34:9d:d0:a1:b4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Apr 17 21:00:11 2025 GMT
Not After : Apr 18 21:00:11 2025 GMT
Subject: CN=78a26286c7a7a769743a5452d0cfb92e7a1074da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:ac:8a:2c:0d:f4:bd:1c:1a:60:45:e6:47:
4f:76:76:61:33:04:75:67:b1:84:17:8c:d8:f3:4d:
f1:e3:26:d8:4f:0b:ce:ba:ea:de:37:4e:5a:ba:83:
5b:12:bf:05:34:c7:c5:5b:5e:21:fc:0d:7f:5b:7b:
4f:9a:0f:85:3e:bb:30:d7:8c:23:56:ea:2e:8d:f9:
5e:f1:91:74:0d:ab:8a:be:09:03:2d:f3:4b:02:21:
bd:3d:fd:be:13:cb:76:7a:ea:a0:1d:06:ed:94:9d:
76:63:c8:31:bf:c9:be:7d:87:ec:ff:3e:c3:26:f1:
79:25:ad:31:04:58:f8:30:81:a6:b1:95:99:04:7a:
b7:37:dc:74:50:40:e6:13:2f:f6:1a:d6:a3:34:2d:
10:fc:83:1d:e5:6f:cd:9d:1e:b5:78:61:11:49:3d:
09:55:00:38:a0:15:63:51:84:25:86:31:72:c3:84:
3a:81:de:b9:d7:a7:4d:28:c3:24:5b:cb:19:e4:21:
01:e9:96:7d:a6:2d:4e:65:0a:c3:79:bd:a4:70:01:
bb:61:20:fe:0b:6c:8b:23:9a:64:6e:99:dc:50:66:
e9:64:18:1c:4a:fa:bd:a2:9b:fe:3e:14:2d:19:86:
dd:7e:e5:f7:55:4a:09:4d:82:5f:3c:5f:fb:a5:6f:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:62:86:C7:A7:A7:69:74:3A:54:52:D0:CF:B9:2E:7A:10:74:DA
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a1:df:0e:87:ca:1a:09:ff:7f:cf:53:50:5c:70:b0:9b:54:
ae:e0:5f:82:60:44:03:df:5c:3f:ef:08:b3:f6:7d:35:fc:ef:
0e:ca:e6:79:68:53:52:6b:25:b5:83:c1:09:e0:ea:0c:bc:20:
5b:7a:6e:18:40:fb:ed:e1:c4:84:5b:90:76:b3:1a:1d:fe:15:
53:34:a2:06:e3:f8:9c:43:f4:3a:25:f9:f6:a0:5d:5f:51:bc:
11:c2:07:ce:46:c8:1b:9e:c7:68:c2:5f:72:95:2d:47:54:8e:
b6:a3:93:92:b8:5d:fd:5e:c7:02:44:90:2e:3e:02:49:09:4a:
b5:64:69:51:16:1e:30:71:84:25:4e:45:a6:d6:90:a2:ef:12:
0f:ac:ea:64:ea:01:d7:29:07:e2:07:1c:10:5a:35:b1:04:9d:
99:ac:f6:a8:09:8b:03:4f:84:65:38:0a:c8:e0:77:05:33:b3:
02:05:ef:d0:3c:a0:ef:a1:91:17:9d:e4:5e:b5:24:be:93:2a:
18:12:37:a9:55:1d:5d:db:a5:6b:80:71:a3:5f:44:fb:47:6b:
9c:85:fb:5a:60:76:af:41:7c:ac:f2:6f:c4:29:c0:85:5d:c1:
f0:88:01:62:ca:46:c8:02:86:ea:3c:33:1e:b0:e2:51:ec:0a:
a7:9e:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:15 2025 by rpki-client