Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: MuL88X6Dw5OtydOIbBSF2ecXtgswLTYQuiL4IVNjpsk=
Subject key identifier: 1C:E5:C6:9B:B7:84:F3:5E:A0:6C:8A:E2:41:0C:A8:AF:83:6D:0A:75
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 0196BFDCA06DF127387FFEA96A12C6F846DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 14CA
Signing time: Sun 11 May 2025 15:00:29 +0000
Manifest this update: Sun 11 May 2025 15:00:29 +0000
Manifest next update: Mon 12 May 2025 15:00:29 +0000
Files and hashes: 1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: tmTK5XJQuuge+/ZklGv453bv01XDrJpvFz3ZbXP8maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:a0:6d:f1:27:38:7f:fe:a9:6a:12:c6:f8:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: May 11 15:00:29 2025 GMT
Not After : May 12 15:00:29 2025 GMT
Subject: CN=1ce5c69bb784f35ea06c8ae2410ca8af836d0a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:d0:a0:39:7c:68:5c:0b:e3:81:e1:98:6c:
6f:42:ff:5b:8a:10:81:f2:b5:30:7a:dd:e8:4f:0d:
6a:4d:26:83:d1:c9:f3:9d:87:ad:6b:2c:8b:23:3b:
46:84:20:85:ba:db:6a:89:10:36:20:b5:d2:8a:a6:
c6:5b:e7:78:94:97:be:81:e5:90:a2:12:ea:54:65:
49:aa:68:67:80:ac:87:36:33:f5:64:dc:cb:a3:80:
21:f7:20:7d:8d:0f:a1:93:f0:96:75:e5:27:10:ab:
86:63:ac:73:53:d3:7a:1a:d3:e5:4c:54:27:9f:98:
71:b2:7d:2e:55:f8:4d:72:51:db:02:7b:60:45:ba:
65:9c:dc:91:14:2f:e7:99:56:19:ad:a5:2f:57:e3:
68:9f:ad:3b:94:1e:30:d1:3f:c9:20:52:88:d6:75:
54:04:02:b0:22:99:c0:1f:0d:eb:33:ee:79:b1:99:
e3:6b:9e:5b:0a:79:f3:18:d7:5d:07:c1:89:2d:c2:
e2:57:46:81:0e:dc:01:83:9a:26:9c:1c:b4:f3:4b:
57:32:c4:c6:34:e4:b8:42:c6:61:43:8c:eb:8e:e0:
a4:30:65:84:e2:3c:6c:1c:a9:2b:c5:6f:d6:dd:0f:
77:87:57:4d:5e:7b:7b:d7:52:41:ed:68:97:32:ac:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:C6:9B:B7:84:F3:5E:A0:6C:8A:E2:41:0C:A8:AF:83:6D:0A:75
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:3b:89:bd:01:6c:34:cd:c0:94:3e:cc:9a:6d:1b:63:90:
4b:83:a9:d1:a5:53:fc:c8:0d:e9:f4:cc:52:65:08:ca:33:be:
ec:db:9c:15:7a:12:dd:39:19:cd:63:4e:bd:d0:dd:35:72:74:
5c:e5:bb:18:65:1a:b1:4e:31:33:06:e6:5a:d6:3b:a9:a1:c3:
14:9b:18:aa:ea:a8:26:cb:be:1a:a7:53:32:82:97:e7:09:8e:
e2:52:24:90:b7:83:75:a9:70:26:da:3c:7c:7d:09:53:da:bf:
3b:11:af:f8:e2:e8:27:b8:97:91:84:86:28:cc:56:d1:70:a7:
62:24:65:cb:4b:77:12:b8:0f:86:96:6f:56:8b:76:a9:1c:d5:
ca:90:a9:30:44:70:46:c4:cc:13:eb:7b:5e:51:25:ee:bb:2f:
60:96:9f:6b:2d:ed:e1:2e:dc:17:48:03:42:e6:a4:d6:6c:99:
14:de:e8:7d:f0:cc:fd:ce:21:61:9e:52:a5:5f:34:65:ec:4b:
98:8e:4c:a1:7c:a4:2d:46:86:d7:a9:76:00:00:25:34:f2:1f:
cf:6c:48:4d:24:30:9e:27:22:bc:7b:f1:b1:0c:81:61:80:b5:
76:cd:92:54:b4:40:3c:d0:37:8d:1d:ba:31:2e:10:49:9e:b0:
cd:19:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:40:23 2025 by rpki-client