Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: qx5gp0dCj6l4iVPBL27qn0e13SHUASWKxvvdVJeKGQw=
Subject key identifier: B0:BF:CE:CC:DD:D7:E8:3F:10:FF:75:17:E5:C6:46:7A:0C:FD:B2:F0
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01969E9A2664DAC0AA5451C966D146BD7018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 14B8
Signing time: Mon 05 May 2025 04:00:24 +0000
Manifest this update: Mon 05 May 2025 04:00:24 +0000
Manifest next update: Tue 06 May 2025 04:00:24 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: wveIoxcV6Yl1cU5C4eLE3DDTnj3ZGZosOVelYALUq8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:26:64:da:c0:aa:54:51:c9:66:d1:46:bd:70:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: May 5 04:00:24 2025 GMT
Not After : May 6 04:00:24 2025 GMT
Subject: CN=b0bfceccddd7e83f10ff7517e5c6467a0cfdb2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:74:81:78:c9:f7:ca:a9:28:12:9c:9c:b6:
db:f3:e0:9d:cf:99:78:99:ed:e3:5c:5c:ec:c1:c2:
ae:c6:24:16:5d:d7:d4:ee:85:be:5c:75:41:81:6f:
3f:18:f1:d7:50:da:d5:83:44:5c:30:0b:de:f7:26:
c3:71:e4:8f:96:87:0b:5e:e7:6a:34:af:c8:3c:1b:
0d:1f:bf:52:14:fb:e0:c6:a9:97:a2:9e:dd:b0:f9:
d3:6a:8b:23:cd:f0:96:7f:55:91:d1:9f:6b:cf:94:
4e:6c:f3:11:db:a9:f3:44:ee:9d:b3:c3:47:e6:b5:
8e:5e:2f:b4:a2:e4:21:db:34:fd:ed:bc:d5:fa:08:
b3:1c:ca:cf:2b:1c:b8:08:59:4a:21:a4:35:b7:9f:
5c:06:fa:d5:3d:95:91:6f:2d:f4:fd:fd:33:64:17:
f7:c4:04:39:f6:34:ba:86:24:ad:a0:d4:d4:4a:36:
ee:d5:3f:3b:8b:f5:83:96:8c:dd:5c:75:e3:45:32:
88:15:0f:7d:db:09:4f:ee:88:e5:71:b1:f5:2f:07:
ad:54:0d:15:90:be:f8:6f:4b:b9:ed:6b:3e:dd:3f:
50:1e:ff:85:d4:56:ae:8e:57:8a:6c:b4:4d:06:f1:
e3:9b:36:86:7f:9f:8b:4a:9f:09:d7:29:c4:1a:86:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BF:CE:CC:DD:D7:E8:3F:10:FF:75:17:E5:C6:46:7A:0C:FD:B2:F0
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:d8:0d:a0:d8:3a:60:99:43:5c:65:cc:bf:26:e0:4d:4f:
b9:21:0c:23:d7:41:61:d2:6c:75:a1:7a:ce:8b:ec:43:1a:e3:
e7:ea:bc:d7:5a:e1:c9:79:b5:97:13:03:1b:f0:17:d4:b8:1b:
0d:a0:a2:78:89:81:31:78:c1:aa:dd:aa:59:c7:6b:b9:8e:dd:
16:e9:41:36:a1:ea:af:05:7e:04:73:25:80:35:e1:99:4a:ae:
65:7f:01:28:cf:b8:b7:21:e5:de:c2:49:b5:03:46:cf:02:ad:
7c:de:c5:0b:03:4e:75:28:44:a7:60:d3:f9:24:cc:ad:b8:43:
aa:d5:6c:6b:d4:85:17:aa:b1:e1:74:d1:37:b2:a1:94:38:82:
a3:f2:29:1f:9f:4d:a4:bf:30:80:d7:fe:d7:de:72:33:88:f0:
62:80:48:73:49:1f:22:97:5a:5a:7d:10:e7:21:8f:ed:4d:19:
00:bb:f6:86:fd:13:3b:c5:63:48:8c:52:95:f9:03:72:b1:04:
48:90:80:42:d4:51:87:d8:26:e9:60:98:66:ba:e5:b1:66:1b:
b3:ff:64:21:34:c7:ad:d9:38:a1:3c:1f:4b:bb:57:85:d5:9e:
43:98:69:0d:9e:50:cb:9c:2e:de:99:85:c6:c2:76:17:e8:cf:
5f:0d:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:50 2025 by rpki-client