Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: D5dD5R9b3Tt+BHfu36IXlAPxhYcQQeSj0ynF/xIJ7/E=
Subject key identifier: 17:9C:9F:31:92:A0:12:5C:2E:13:FC:F4:59:2D:16:A6:C2:6F:19:88
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 0196B96C965056C70F3200D31655E7CD340A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0C12
Signing time: Sat 10 May 2025 09:00:23 +0000
Manifest this update: Sat 10 May 2025 09:00:23 +0000
Manifest next update: Sun 11 May 2025 09:00:23 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: //SVjh4iG5P5Pg0Y5i8D/DCQfKWz8h7qFrSMq/Dwysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:96:50:56:c7:0f:32:00:d3:16:55:e7:cd:34:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: May 10 09:00:23 2025 GMT
Not After : May 11 09:00:23 2025 GMT
Subject: CN=179c9f3192a0125c2e13fcf4592d16a6c26f1988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:c0:e3:d3:68:47:31:cf:f6:27:0a:65:16:
10:44:f7:3b:43:32:9d:d7:ef:76:54:2e:b2:72:85:
b4:eb:c9:73:ed:f6:e9:90:c9:4c:c4:58:69:5e:ab:
7d:16:52:51:7f:ca:98:bf:03:93:19:bd:3e:86:79:
a0:bd:db:a8:66:ad:54:4f:a8:01:64:a0:62:b3:ca:
f6:06:28:10:e9:8d:2f:6f:29:c1:95:2c:90:b7:a3:
24:ba:2a:d8:f5:d3:62:15:f2:09:05:0a:8e:d5:5f:
46:0c:c2:a8:a5:6e:db:fc:18:a4:1c:bb:d3:fe:2e:
28:7c:42:9e:e3:a4:1f:60:93:4a:48:ba:59:93:ae:
78:2f:21:8b:71:74:8d:c4:6b:7b:d8:b2:e4:88:e4:
09:75:db:15:be:f5:7c:4e:ff:4b:32:6d:40:cf:c3:
53:ed:b5:3a:78:52:25:81:2d:80:a8:cc:c0:b3:28:
14:73:ed:df:07:f9:77:8e:79:66:e3:1d:7c:4e:42:
ff:40:4c:81:27:ed:3d:43:56:4f:c4:90:78:56:20:
c7:e6:04:08:09:5d:bc:bd:01:3b:f9:c4:e4:89:df:
36:22:9f:fe:b9:17:75:a7:70:56:72:37:50:aa:38:
4c:f3:0d:c2:f3:19:c3:28:9f:3f:e3:2a:1e:e3:ca:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9C:9F:31:92:A0:12:5C:2E:13:FC:F4:59:2D:16:A6:C2:6F:19:88
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:22:17:40:db:f1:86:d6:c6:8b:29:d2:2a:00:85:06:bc:4f:
0f:31:46:11:88:8a:cf:bb:43:30:f5:ec:cf:f6:82:cf:1a:2f:
59:4c:f1:76:8f:e5:d9:8d:a8:bb:ca:bf:1e:06:a1:10:a4:23:
e2:b6:fb:55:fb:b3:be:60:b7:0f:08:bf:cf:9d:42:33:93:61:
52:89:a4:96:91:a0:1e:02:c8:87:00:2b:27:b6:7f:fd:08:75:
46:8e:77:b5:88:1a:45:92:d1:3a:0d:a7:56:85:26:9f:65:35:
07:ab:a3:9b:cd:7b:c2:2c:81:86:19:7e:e3:2c:78:c6:7b:5a:
63:0e:64:d1:c0:29:12:f7:36:09:f7:17:ea:7e:f9:f9:ea:09:
e1:71:29:7d:bb:d8:fc:10:95:9a:ed:20:6c:ca:bb:69:ad:b9:
4f:b5:78:0a:48:d1:a2:6e:39:43:5c:a6:56:59:40:a5:e7:98:
0c:4f:75:62:06:0a:6a:47:ae:5a:dc:9a:c2:58:fd:3e:d9:1a:
ab:81:ab:a6:dd:3d:2a:02:bc:68:b6:17:4b:1f:6f:0f:0a:cb:
9a:5d:6c:f3:32:42:75:da:4a:3f:7e:bb:6d:71:ec:f3:82:51:
f7:44:34:80:e9:ad:3b:b5:37:bd:00:de:97:e7:71:b8:48:d2:
05:20:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:55:51 2025 by rpki-client