Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: pRlUlH0QssNYD6Rw4M10ME6fCGTsZsC+1F9uE/aqiJ4=
Subject key identifier: 94:3D:98:A2:4D:04:10:44:07:98:F0:49:AE:F7:F3:90:9F:6C:74:F4
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0196AE0DA731D39E38CE39C4D6A24BA0A84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 1541
Signing time: Thu 08 May 2025 04:00:52 +0000
Manifest this update: Thu 08 May 2025 04:00:52 +0000
Manifest next update: Fri 09 May 2025 04:00:52 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: hdmu+9BYhkiGmHYcFloVPmEHAixVXVv+mwhahIUMscs=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:a7:31:d3:9e:38:ce:39:c4:d6:a2:4b:a0:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: May 8 04:00:52 2025 GMT
Not After : May 9 04:00:52 2025 GMT
Subject: CN=943d98a24d0410440798f049aef7f3909f6c74f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:66:86:bc:c8:60:f2:6f:09:a4:cc:58:64:
3e:fc:52:5f:20:ab:21:c7:45:45:d3:56:a8:81:2a:
36:10:5b:44:ec:17:3b:42:cd:dd:f4:11:ec:c3:0f:
17:22:e0:20:2a:0a:a9:83:c4:37:aa:11:6a:8f:5f:
9d:d8:cf:7e:5f:5e:87:6b:86:07:4c:40:1e:66:78:
45:21:f5:2c:ec:14:ec:b6:e2:ef:61:25:b0:81:c4:
55:9a:c3:92:a4:bf:05:1a:3b:27:75:80:54:fc:98:
0d:0f:be:b0:20:37:bb:76:4b:30:f9:29:6d:46:2e:
df:2d:3b:f6:e8:20:7b:71:89:84:ba:2d:fe:9a:59:
ca:06:70:4b:69:d4:36:46:9d:64:09:ac:dc:53:88:
68:c9:9e:9d:53:1a:a1:68:95:a0:60:f2:84:b9:dc:
83:ed:7e:3a:1e:d6:33:b3:36:cf:48:67:73:8b:fa:
b3:b5:7a:be:73:d0:6d:09:8e:c7:55:63:72:79:f4:
f6:08:63:86:07:d0:7c:cc:d9:ea:cf:85:a6:c8:12:
54:c8:51:dd:08:a4:47:ac:6b:80:e7:80:d8:54:cf:
19:6f:0c:cd:db:6e:e6:85:c3:77:62:76:cc:e7:25:
7f:4d:0e:12:2f:55:ad:f3:73:8c:fd:99:95:30:42:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:98:A2:4D:04:10:44:07:98:F0:49:AE:F7:F3:90:9F:6C:74:F4
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:dc:58:b3:b5:90:d4:6e:5c:fb:ef:35:77:32:80:c0:f1:53:
52:e8:72:8c:7e:d9:50:f2:41:71:ee:c5:de:38:6e:8e:81:c3:
8e:86:a3:50:d8:4b:a4:f2:9a:e5:1f:fe:34:a4:82:b4:38:b4:
c5:97:a2:f1:52:71:00:bb:ec:a4:91:f1:02:e9:fc:8e:dd:12:
1f:95:da:7a:bd:84:79:86:7a:7c:d5:05:40:f1:ea:36:de:c4:
cb:cf:d8:5e:60:7b:ca:51:10:65:cb:53:dc:04:9a:8f:2e:86:
84:d6:88:97:db:ec:9b:a0:c9:56:d6:ff:ea:0f:4d:9f:4a:9f:
d4:e0:97:d4:16:cb:29:b0:bb:4a:34:2e:2c:09:a2:14:96:8c:
15:28:97:1e:2e:3b:fd:af:aa:8a:e6:5d:ba:98:f5:3c:c8:36:
4e:75:9d:13:54:02:0c:8b:ce:4f:db:b5:30:46:94:93:2d:be:
0a:d8:c0:d4:31:bd:07:e2:44:01:f8:d0:b0:98:7f:0c:fb:16:
7a:aa:a6:b8:29:77:4a:07:df:33:b1:e0:e4:28:7e:db:7d:4f:
a6:ba:9e:57:33:93:9d:47:4a:5e:db:21:14:3d:1d:54:4b:98:
a4:b5:b1:61:ef:dc:d4:d3:d1:e2:9a:09:50:1e:01:a2:ec:a4:
43:b5:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:29:21 2025 by rpki-client