Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: emrwAPUKQJIbXr8PBl4BEXsHMSWSSo3tr20miBg7kj0=
Subject key identifier: D5:23:EB:26:65:80:6A:32:00:3E:CD:A2:95:B1:EF:87:7A:16:95:02
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0196BFDC6B3DECACDCAB794E16D92A5E6527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 15:00:15 +0000
Manifest this update: Sun 11 May 2025 15:00:15 +0000
Manifest next update: Mon 12 May 2025 15:00:15 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: zJgOPGCarUyGye5OupogVXKEruXUIfdEcOoT0g/SGsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:6b:3d:ec:ac:dc:ab:79:4e:16:d9:2a:5e:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: May 11 15:00:15 2025 GMT
Not After : May 12 15:00:15 2025 GMT
Subject: CN=d523eb2665806a32003ecda295b1ef877a169502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:1f:58:31:04:96:9a:ca:93:db:4c:46:df:
2c:79:04:eb:43:f7:ee:54:b8:37:17:93:6b:c5:fb:
93:4c:ee:58:6f:b9:f5:c7:74:33:3e:4f:e2:1a:7e:
37:de:32:98:e6:f2:84:23:76:0c:1d:a7:fc:c2:47:
74:91:76:09:ae:c4:50:ac:81:65:5d:ce:c9:ff:72:
5f:4f:ec:af:74:b9:e5:cb:97:d5:04:2e:14:27:d7:
d8:ad:e3:93:24:b7:bb:6e:6b:5f:04:40:f0:2c:3a:
f9:67:bd:ac:b8:88:1a:1b:3f:c9:7a:fa:f7:57:3e:
0c:fc:61:50:62:5d:74:8f:cd:6a:9a:94:32:be:d5:
8b:1b:b8:72:4d:de:2f:34:9b:7c:ad:d0:f3:72:83:
e6:bf:27:ff:1d:2a:47:e7:88:3f:bb:7d:ea:39:18:
a9:c2:ac:ed:31:29:78:86:51:48:8e:62:8c:9f:72:
77:c3:d8:44:40:7f:2f:1d:b8:2c:8b:32:e3:65:0f:
e7:2f:9f:70:a6:10:f5:e9:83:ba:85:58:04:e6:21:
81:23:a5:71:79:55:e7:41:8b:cf:c9:3f:53:0a:6c:
cc:5a:ef:ad:34:25:95:14:a6:6f:68:53:b4:19:8a:
1a:5f:03:ca:8d:54:cd:d6:e8:a0:17:33:d3:b4:18:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:EB:26:65:80:6A:32:00:3E:CD:A2:95:B1:EF:87:7A:16:95:02
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:45:64:80:7b:13:6e:dc:13:07:25:4c:81:54:27:5a:8d:
0c:aa:65:db:8d:56:74:bb:6e:bc:01:e5:ae:74:f2:ec:3a:89:
62:96:79:0b:41:1f:2d:7a:bf:73:08:b3:00:f4:0b:de:d9:a8:
c6:65:da:e0:e1:db:4c:31:9c:20:6f:e8:a3:a4:9c:46:17:7d:
d6:07:76:93:ad:57:41:a0:b7:7c:4a:d7:8f:a6:ab:5d:84:51:
e4:2a:0f:56:70:53:9f:88:17:16:3d:70:28:e1:17:04:60:b8:
b3:6c:3f:fe:de:f4:9c:b6:43:57:60:20:2e:46:5a:1d:8a:ea:
19:f4:1e:dc:e0:38:8d:ff:88:98:95:43:a0:a1:fb:2e:d6:ea:
f3:fe:55:40:0f:b7:2a:ee:83:89:68:e5:92:e4:04:18:aa:a9:
3e:8c:3e:1b:49:f0:5d:00:b5:c0:75:fb:7c:56:b3:4a:d5:65:
cf:64:d1:c2:4d:83:57:5e:d7:8e:c7:8a:cc:8c:29:6f:fc:78:
4b:81:fa:80:8c:41:78:96:c5:1b:ec:e0:ab:c0:a1:7c:41:d2:
ec:2f:d7:6b:af:24:d8:34:b3:43:e7:73:78:50:59:73:b9:e8:
9a:ba:ff:04:52:3b:31:9b:44:49:75:5f:df:56:59:7b:a7:04:
0b:37:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:30 2025 by rpki-client