Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: 9Xk/qZ9nvZlJejw/2ImYN2QSq596UkmCqs5KFzcjq7M=
Subject key identifier: E9:C2:7B:82:ED:9C:D4:CC:20:C7:FE:28:5D:30:19:CC:52:A0:8E:A0
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 0196A80B4C53A3B2BB311D74F6A4E8C19575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 00:00:34 +0000
Manifest this update: Wed 07 May 2025 00:00:34 +0000
Manifest next update: Thu 08 May 2025 00:00:34 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: LcEJOqE/lLto6bgteztSRRvDL+FEJT8kJUJ9PJcGB8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:4c:53:a3:b2:bb:31:1d:74:f6:a4:e8:c1:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: May 7 00:00:34 2025 GMT
Not After : May 8 00:00:34 2025 GMT
Subject: CN=e9c27b82ed9cd4cc20c7fe285d3019cc52a08ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:30:c9:04:4e:32:5b:a0:6a:d7:b1:3e:ae:
d5:0e:79:e2:38:15:11:19:90:ea:d6:12:65:fe:d8:
8d:22:4f:ad:4d:c2:5e:4c:c5:3b:f0:5b:36:2b:26:
90:13:dc:f8:0d:6c:b3:d8:99:6f:61:03:9f:9b:68:
92:e7:cc:81:3c:d6:6c:42:81:49:f5:73:ee:4c:d6:
f1:e6:45:4a:0f:5c:13:32:03:5f:50:1f:ee:7f:82:
38:8b:ba:3e:e7:ae:50:52:87:ef:e8:43:d3:00:10:
f8:e1:73:e8:ea:04:98:bd:bd:1a:cb:e6:2e:99:ad:
ce:c8:9b:cf:c6:48:af:b0:00:85:89:9f:e8:97:07:
b2:f2:55:c9:05:6b:23:98:f6:8f:0e:a3:e0:aa:b2:
01:58:c4:26:75:41:f3:9c:e1:ad:e3:0e:9f:92:de:
dc:a9:cb:82:86:d3:5e:ca:a5:1c:54:be:5e:ad:80:
88:68:14:7e:e5:b5:43:47:a3:e5:f8:36:68:a4:91:
5e:91:cf:33:f8:a2:db:7c:9a:d7:33:b7:b6:bd:a1:
0f:53:65:36:43:0f:07:5a:a5:d2:85:47:04:aa:16:
b6:cd:37:f7:81:d4:32:6f:cc:7c:c7:bf:a6:1f:1c:
8b:b3:89:d3:23:d9:34:ea:6e:f7:b6:da:88:f7:9b:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:7B:82:ED:9C:D4:CC:20:C7:FE:28:5D:30:19:CC:52:A0:8E:A0
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:d4:f4:53:e1:4e:77:dd:c6:89:99:77:fe:e0:1b:6d:23:
9c:e6:e5:a1:89:a9:bc:22:6e:62:43:23:73:d9:1a:23:ed:79:
54:f5:6a:ce:cf:88:07:14:66:ec:21:08:68:7d:e0:bb:49:38:
83:6f:19:ca:ea:85:ef:e1:79:97:49:44:dd:9e:4f:c1:a8:02:
9b:43:2d:ea:71:ec:0f:2b:59:5b:53:49:e2:16:00:5a:65:8b:
d1:fb:ee:d2:4a:c3:ce:70:78:c0:2a:b7:56:2e:32:99:1d:3d:
d4:5a:55:26:44:a8:c8:d3:de:4a:aa:4e:70:bd:b0:41:6c:52:
ac:c5:02:38:3c:b9:5f:3c:ce:08:b0:a4:0a:7f:46:be:91:d3:
0e:04:15:bf:b1:88:e2:46:fb:c3:fa:52:3a:a8:1c:27:f3:1a:
4e:03:0b:11:d0:3b:d7:92:2c:47:06:2b:2b:00:c1:0f:27:8c:
ed:bd:50:4d:84:1d:81:0c:20:f7:8f:f4:fa:16:bf:39:30:48:
ac:99:51:76:15:a1:20:f9:c2:ec:6d:3c:d5:d1:0e:98:37:2c:
0e:18:6e:18:c2:0c:86:dc:62:ff:da:40:36:b1:f6:f9:5f:28:
4f:b0:85:1b:b4:5c:d3:6c:84:d4:aa:61:e8:6b:f3:ab:e0:e5:
3e:b3:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:43:31 2025 by rpki-client