Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: DPrsB3steN6ijMAGhljlGebDNjs/piop/Stoc7JC8Z0=
Subject key identifier: DF:7F:41:DF:05:7A:E0:0B:3D:25:02:03:E3:36:F3:73:D9:C0:A7:CC
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 0196BCDBB35212AEEDB4101263AC888D1DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 1223
Signing time: Sun 11 May 2025 01:00:36 +0000
Manifest this update: Sun 11 May 2025 01:00:36 +0000
Manifest next update: Mon 12 May 2025 01:00:36 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: 5oT6fe6qZOi/zSN+HVUM322RebhzHviSq9DvayiwbTQ=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:b3:52:12:ae:ed:b4:10:12:63:ac:88:8d:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: May 11 01:00:36 2025 GMT
Not After : May 12 01:00:36 2025 GMT
Subject: CN=df7f41df057ae00b3d250203e336f373d9c0a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:5b:27:70:87:7a:a0:f6:d3:fa:b4:56:51:
64:e0:3f:fa:d7:ee:5b:f8:d1:f2:02:ff:72:95:2a:
37:9e:35:05:c7:b0:e4:d4:8e:ec:86:c9:8b:8b:a6:
c4:c4:09:0f:7a:f4:55:82:91:28:32:6b:c9:86:75:
da:69:9e:6e:1e:2f:85:2c:05:4e:71:f6:76:48:00:
38:3f:81:ad:02:83:a8:14:bd:27:2c:f5:64:2c:e4:
7d:b6:20:2f:e8:d7:63:11:63:e5:6f:25:3c:7f:61:
4a:7e:f4:8d:21:25:cb:39:42:37:86:13:24:d4:cc:
e0:59:65:9b:5f:f4:7c:8a:ef:53:48:43:a4:0d:54:
ce:7f:e6:82:f3:f7:8d:8a:21:ed:93:26:8d:7a:86:
cb:f8:bf:83:24:e2:69:ea:76:0f:88:1b:1f:75:0f:
04:34:07:75:e8:0d:28:4d:6c:3f:41:3a:ad:39:74:
e0:2d:6e:53:f0:14:4d:f1:0a:e7:a3:a5:cb:52:7b:
56:03:af:d6:3a:77:f6:73:58:44:e3:0d:34:34:eb:
6f:9b:36:27:21:f6:30:b6:9b:86:da:de:e8:f2:5e:
9e:ae:93:e3:da:a5:16:72:d1:8a:ea:95:fd:0a:97:
e4:c6:ff:58:dc:0f:43:77:8e:b0:c5:f6:3e:a6:39:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:41:DF:05:7A:E0:0B:3D:25:02:03:E3:36:F3:73:D9:C0:A7:CC
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:34:f4:30:f3:37:33:86:79:67:8d:86:bb:e0:1f:b7:32:
af:75:b4:4f:c0:61:81:bc:a6:99:9b:30:f4:a8:0e:8f:d0:7e:
d5:e4:50:92:10:0e:da:10:55:85:d1:15:df:b8:54:f3:ce:65:
83:d8:6b:32:f6:8c:60:83:4c:ce:7b:bd:fa:f4:60:18:c8:20:
fd:be:16:50:26:af:08:44:23:53:bf:7d:4e:30:07:01:0b:19:
6d:ce:cb:3a:78:68:f9:4f:9d:21:9a:e2:46:0a:01:83:b6:59:
99:95:70:ef:8f:f0:af:9b:b4:8b:6c:d9:8d:17:d7:49:bd:ba:
8c:2c:60:21:82:cd:07:dd:7e:dd:08:9e:7a:4e:d0:2a:14:85:
b5:94:33:6f:42:8e:c7:9d:ab:9f:48:25:d3:30:b8:28:09:f5:
85:09:9b:b7:b2:4e:c5:a1:b3:da:39:76:b9:a0:53:28:c4:6d:
1e:69:60:52:29:71:27:ed:33:c0:90:16:51:40:7f:69:95:83:
de:fe:78:b3:94:09:1c:6d:1d:5b:e9:19:c9:38:37:5e:3d:e9:
8d:9c:23:7a:ee:5f:95:47:98:f6:55:37:6a:c4:9b:02:20:9f:
72:9b:86:4d:9e:22:1a:fb:6f:e5:93:f9:9d:28:66:32:8b:9f:
e7:65:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:21:27 2025 by rpki-client