Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: MkTcFkf9POWrTnWhrFeTuo4a0PnuGmIW4YfPg6aQz74=
Subject key identifier: ED:B6:A0:2E:3B:7C:AF:7B:61:D1:5D:60:7C:F7:1E:EA:11:3C:B1:44
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 0196B6D95A1E1A089F41AC6307DE9C23011B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 21:00:19 +0000
Manifest this update: Fri 09 May 2025 21:00:19 +0000
Manifest next update: Sat 10 May 2025 21:00:19 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: msHwZe2yJmUjdiZp5TGM3ZaJgw0TKckcWIkGXM1tWIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:5a:1e:1a:08:9f:41:ac:63:07:de:9c:23:01:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: May 9 21:00:19 2025 GMT
Not After : May 10 21:00:19 2025 GMT
Subject: CN=edb6a02e3b7caf7b61d15d607cf71eea113cb144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:4a:8b:7f:2c:bd:b7:24:5a:4d:bb:d5:68:
b0:e3:c8:df:c6:b2:9f:e3:56:53:9b:4b:14:ea:d1:
ed:4f:97:32:fd:73:bc:f1:73:3d:cd:2b:09:3c:e9:
db:38:77:52:ff:1a:16:70:20:1f:62:71:9a:94:53:
9b:89:91:08:a3:82:21:a7:c4:14:20:2d:5e:09:61:
1d:fe:78:49:2d:c6:cd:53:2b:fd:c9:be:e1:da:c3:
94:18:a4:5c:1b:df:27:cd:c3:68:d4:44:4f:f0:d9:
8f:43:a7:00:e6:2d:74:2b:7c:de:e5:5c:a8:52:a8:
32:6b:f4:17:df:f4:eb:4d:86:a8:27:a6:d4:ba:8f:
9e:7f:25:5a:b4:72:12:56:d3:01:69:36:1b:d9:9b:
5b:ac:e2:e4:92:30:89:49:71:e9:39:33:bc:2e:ab:
ab:36:07:92:b7:a2:38:17:8f:49:cc:e7:9d:f6:db:
0a:5a:74:91:65:41:52:64:70:d9:7e:90:e6:07:e8:
38:e5:10:26:b7:cd:f7:c0:a8:bc:2d:87:e1:a5:56:
de:c6:24:fa:54:92:17:de:f9:39:3e:a1:d1:ac:78:
0d:49:c8:c6:25:fb:a3:3b:42:24:78:b5:ac:dd:be:
66:8f:0c:d8:91:11:4d:7a:64:59:d8:85:b3:cb:30:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:A0:2E:3B:7C:AF:7B:61:D1:5D:60:7C:F7:1E:EA:11:3C:B1:44
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:43:dc:6f:e1:92:4f:3b:48:ba:cf:ab:3b:77:7f:66:80:4b:
d4:a0:15:6c:29:5e:66:53:8b:10:21:e8:a7:aa:56:ad:ee:4c:
7c:43:9f:45:3c:05:34:18:26:75:31:8c:e9:dd:b3:b1:cc:41:
ca:4f:76:1f:6b:b0:22:95:9a:0e:8f:25:47:92:04:20:8a:88:
99:0a:21:a4:8d:41:82:33:95:27:a4:b7:cc:7a:46:8c:ff:9c:
e5:81:ae:9c:d5:7f:2c:34:da:c8:6c:84:e0:99:52:40:47:4a:
c3:7f:91:5c:f4:29:a9:e8:aa:f7:2a:4a:29:a4:ff:8e:1d:c7:
d6:f4:90:ef:88:20:e5:1b:75:0f:52:81:45:77:44:a4:da:0d:
21:ce:e9:63:ae:fa:06:1d:18:dc:e6:cb:00:13:19:bb:1e:f6:
9c:74:b4:b8:90:75:08:b4:af:b9:7c:7d:e8:0b:d5:40:4b:1d:
ce:1c:b0:56:2e:85:41:65:bf:9a:1b:d4:92:97:f3:34:d4:44:
d9:19:00:8e:fe:0b:33:33:32:4a:64:a4:94:28:a1:df:38:f3:
2f:ab:f8:65:33:9d:77:5e:3e:ac:a9:27:2d:ee:88:e9:2e:2a:
33:45:59:8c:b0:2f:f3:8e:25:d2:05:31:d9:fd:c3:25:12:dc:
9c:e2:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:57:14 2025 by rpki-client