Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: eb9juxPnFTbBdrtwL1VlY7G45uPSWKCnYE80Ygb8LzM=
Subject key identifier: D2:11:59:80:58:B5:DC:FD:99:BA:EB:BE:46:2A:3A:E9:8F:16:64:9F
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 0196C0B822587BD8AD8050992B8B31FDDE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0C7C
Signing time: Sun 11 May 2025 19:00:14 +0000
Manifest this update: Sun 11 May 2025 19:00:14 +0000
Manifest next update: Mon 12 May 2025 19:00:14 +0000
Files and hashes: 1: ZViEJUena9no3k6Ae1_F2TCUJ1s.roa (hash: 9w7jEI95jS2WRSJaPLFBNXTWhCP7KfI5YnDHB0UiSYE=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: yFj/H0XBXFLohwvjpLLJBStIAVL9zCZZ/OlVrOB914U=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:22:58:7b:d8:ad:80:50:99:2b:8b:31:fd:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: May 11 19:00:14 2025 GMT
Not After : May 12 19:00:14 2025 GMT
Subject: CN=d211598058b5dcfd99baebbe462a3ae98f16649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:c6:c3:a3:9b:81:b7:b0:55:66:6c:5e:d7:
ab:70:d7:18:f0:68:ef:43:8b:be:73:e7:6d:e4:73:
96:a3:9f:f7:d5:61:fd:7d:84:d5:ff:f1:4f:54:0d:
68:e3:d1:9b:4d:4c:aa:62:df:14:33:d6:c4:44:95:
22:80:15:21:26:3a:c5:b8:01:8f:ba:0c:f4:8e:86:
31:2f:7b:b5:18:ae:61:ed:63:d2:18:cd:c9:71:b4:
fe:1e:f9:f3:16:b3:38:d0:43:89:3e:c6:c0:e1:23:
38:7b:c4:01:4e:fe:7d:42:d8:d5:ef:d8:c0:88:d3:
49:28:31:30:7b:8a:41:87:60:fb:8e:07:af:5d:31:
fc:a7:79:45:96:27:e0:ff:36:7a:59:f0:c4:06:5e:
c3:76:93:d7:64:17:25:f1:09:d4:d1:13:05:c7:b4:
33:d6:c3:ac:5d:83:da:16:9b:ec:68:c5:54:4d:2a:
b2:3e:fa:39:bd:dc:9c:ff:bb:5b:b3:b8:4d:be:57:
6d:49:08:5c:10:55:69:35:65:38:91:a2:6d:f9:4e:
e2:f8:f6:fb:5c:90:07:e4:c2:da:24:fd:97:dc:7d:
ba:c7:67:d2:34:64:95:f7:78:09:bb:92:4d:f7:cc:
de:a5:51:ac:72:c8:21:b7:bd:4f:ba:6d:bb:43:86:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:59:80:58:B5:DC:FD:99:BA:EB:BE:46:2A:3A:E9:8F:16:64:9F
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dd:c3:53:8a:71:a1:34:73:65:7e:4c:77:82:1d:a7:8e:39:
56:d4:62:0d:a4:32:b0:c4:4c:26:4c:7c:14:74:7b:b8:c0:4e:
b1:b4:60:69:f6:38:bb:2d:1c:61:76:8a:99:7d:71:f1:94:df:
8c:fd:be:2e:a2:19:b5:8a:e7:21:c0:e8:6b:cb:1b:6c:44:b7:
ea:43:f7:21:3e:78:7f:32:3f:b8:1e:31:c6:3f:fb:d6:f9:df:
2c:0a:25:14:25:ad:6e:5a:73:cb:68:58:af:1c:f0:c0:b5:e3:
e3:d6:39:ae:c3:be:58:9c:43:51:63:77:58:f6:64:36:5d:b7:
40:e5:fa:ba:9e:c2:74:47:cc:25:87:39:e5:28:23:18:70:e8:
3e:63:90:fd:b5:df:3c:c1:c7:6e:c8:31:dd:19:b2:d7:80:97:
cb:79:00:61:37:92:ee:f2:73:00:11:60:cc:a4:ca:42:fa:6f:
18:f0:09:f3:ff:c2:70:1a:e4:a1:89:5b:34:a1:b9:da:3b:0d:
83:33:b3:e2:7e:10:53:25:1d:3e:e9:d7:b0:49:51:49:e3:20:
90:1a:c8:28:55:f6:43:06:c1:97:dd:a5:48:d6:04:e4:a1:72:
2e:c0:83:4a:f8:91:1b:d1:5d:27:d3:1e:ef:49:54:99:a9:20:
3f:e1:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:39:59 2025 by rpki-client