Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: FWAPHj/C1VIGYLGFP69iRj6bAP0p+uj0BLSpdC4D290=
Subject key identifier: F5:98:64:30:0F:55:52:4D:B5:A3:8C:E4:0C:D8:57:95:88:18:28:E3
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0196A79D7670B8FE7C73045ABB9A6BAD38CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0BCD
Signing time: Tue 06 May 2025 22:00:36 +0000
Manifest this update: Tue 06 May 2025 22:00:36 +0000
Manifest next update: Wed 07 May 2025 22:00:36 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: Vbu0fuc2djjie+n4SmgH2s3+n+Y+FxRwCcpRAtbdpQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:76:70:b8:fe:7c:73:04:5a:bb:9a:6b:ad:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: May 6 22:00:36 2025 GMT
Not After : May 7 22:00:36 2025 GMT
Subject: CN=f59864300f55524db5a38ce40cd85795881828e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:d1:90:5e:da:88:9e:cf:98:49:bb:c9:0d:
74:6d:a4:a2:d8:7f:d4:34:96:1a:3b:eb:1a:a6:b5:
98:1a:17:a8:c9:ce:98:24:e2:a5:b4:10:f9:3d:cb:
64:54:50:a5:ba:dc:0e:44:67:57:ce:dd:89:e8:51:
21:b8:4e:54:44:a0:c5:e1:cf:17:e6:9f:30:45:9f:
c0:4e:6a:d5:3c:04:57:68:fa:a9:9d:d2:c2:f5:0b:
ee:3b:6a:61:f4:89:12:9d:df:fd:92:a3:4d:b3:63:
20:54:50:ff:00:71:8b:b7:83:8f:f0:bc:63:ee:21:
2e:ba:91:9c:0a:dd:ea:bf:58:1f:ae:55:fc:e1:7c:
dc:d0:44:e8:d5:92:38:4a:39:3b:98:28:cb:c0:eb:
99:64:ff:45:ba:48:4f:01:51:64:e2:ed:4c:32:1f:
df:b5:01:b7:3e:30:08:8c:27:00:9c:06:38:95:3c:
e3:e4:88:99:de:6c:e3:97:8e:b1:0d:4e:fc:68:ba:
8c:b0:bf:b7:68:f8:14:ac:b2:e8:5d:58:9b:82:02:
cd:14:35:57:01:dd:6b:92:22:a0:06:9a:ef:76:c1:
d6:ab:1a:5e:af:eb:23:53:1d:74:bd:71:b1:e6:f2:
e4:5e:65:72:e8:79:39:2e:d1:fd:a0:a9:38:1b:1e:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:64:30:0F:55:52:4D:B5:A3:8C:E4:0C:D8:57:95:88:18:28:E3
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:87:66:0c:83:c2:f9:98:9f:3d:bd:e8:82:59:a6:89:f7:7a:
35:3f:0c:db:ef:89:97:0d:df:85:98:4a:16:8f:b4:6d:8d:1f:
57:b3:11:0f:29:61:19:c2:f2:d7:64:5a:aa:37:8f:5c:93:3c:
e5:35:1b:5c:b8:28:ee:bc:45:a4:47:44:90:d7:5e:38:d7:04:
9b:7d:89:84:03:a4:3a:5b:a2:bc:70:77:d9:b3:0a:a0:b5:f9:
c2:3d:ee:87:7c:81:51:77:5c:36:a5:02:1a:cc:a4:6b:d1:ab:
0e:cb:42:13:13:97:43:eb:4f:bc:f5:a6:33:6f:14:1d:ea:27:
d5:75:66:85:0b:1a:25:ae:51:90:9c:b3:68:06:2a:f6:b4:92:
c8:fa:cd:d0:06:f1:1f:be:6d:90:e6:e2:fc:80:fe:39:86:77:
aa:3f:b0:44:40:f2:f9:eb:05:c0:04:76:92:a9:1e:9a:da:62:
e4:7f:b6:be:2e:52:3b:7a:84:e6:ed:ed:f2:7a:29:28:a9:23:
7c:f0:d5:3c:b9:79:c8:0a:20:ab:e5:5d:f7:1f:f5:e8:8c:2c:
3f:c6:59:10:10:60:91:1b:24:b8:f3:cf:99:61:9f:6b:cb:c4:
9f:10:14:d6:45:32:dd:f0:9d:ff:9c:c9:06:2a:79:ea:dc:0c:
22:cf:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:33:17 2025 by rpki-client