Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: FxmUpn28SvjJbZU7IOcAIhjZ9ze6ZHCysNmoJrblUwY=
Subject key identifier: 03:17:68:3A:52:A6:BA:58:14:F1:DC:9B:FB:87:7A:39:FB:2F:1F:4D
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 0196B4460E8B1DC2B741B27B8F1A2DF96556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1268
Signing time: Fri 09 May 2025 09:00:12 +0000
Manifest this update: Fri 09 May 2025 09:00:12 +0000
Manifest next update: Sat 10 May 2025 09:00:12 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: mZK/njviFqkYbeLBdnHZnL0u4HVKrLJKY0QLZHZ1D78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:0e:8b:1d:c2:b7:41:b2:7b:8f:1a:2d:f9:65:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: May 9 09:00:12 2025 GMT
Not After : May 10 09:00:12 2025 GMT
Subject: CN=0317683a52a6ba5814f1dc9bfb877a39fb2f1f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:c2:75:f8:02:b2:7a:e9:9f:5f:89:81:b3:
66:55:c0:31:05:33:9d:6c:16:62:97:a6:62:44:26:
b2:a7:ad:38:2d:45:b7:49:bd:92:ee:12:dc:eb:6d:
86:95:2c:70:ee:c1:a7:90:ca:5d:ce:d7:44:f1:58:
0f:4d:70:71:fa:da:d9:58:b9:a3:2f:0b:ea:75:98:
bc:d0:7e:de:c3:7c:07:e5:e4:21:4d:87:5c:46:f4:
1f:b4:97:08:72:6f:3a:29:77:a0:4d:9e:f9:ac:d8:
e4:38:1d:31:4d:c9:b1:00:fb:d6:cb:64:ac:aa:6d:
01:b6:3f:7f:04:33:9f:01:23:f5:df:68:26:b8:49:
8a:a7:ac:67:43:83:d2:02:8d:9e:be:15:ce:67:11:
79:b8:bc:78:80:a8:d7:d3:62:f9:42:1a:e1:0f:04:
ee:79:5d:32:c9:7d:97:47:29:02:a5:9d:33:39:35:
40:e7:7e:18:2e:1e:44:fa:f6:33:87:4e:14:22:82:
10:53:32:f2:fd:b6:85:f4:ea:84:71:ee:b8:ff:55:
35:01:56:02:87:99:2b:bb:29:e2:bc:e1:df:e2:f6:
f0:f3:db:e9:b2:74:a3:c7:a3:29:f3:03:51:67:cf:
8f:df:5f:85:a6:12:14:d9:91:fb:5c:90:b1:fc:70:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:68:3A:52:A6:BA:58:14:F1:DC:9B:FB:87:7A:39:FB:2F:1F:4D
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:a4:21:36:df:7c:dd:06:78:c4:26:03:92:c0:05:5b:5e:
01:9c:6a:98:dd:20:9e:8f:59:aa:55:5f:d6:98:62:a7:a7:49:
bb:77:87:b4:1a:69:89:30:18:7a:5e:7a:00:fd:0f:52:e5:fb:
f9:66:bc:4b:19:f4:72:0d:31:e7:f6:e1:17:b3:b5:ef:d5:64:
88:6a:bf:62:63:ea:d8:75:2b:0c:4d:2e:ee:27:0e:96:b0:68:
84:17:25:19:27:4d:e9:69:10:69:b6:a7:cb:d9:e1:d8:e9:63:
84:8c:cb:58:86:8a:24:88:4a:53:5a:93:a9:76:e4:1f:7e:82:
e8:57:80:f8:c9:17:bd:f5:47:ed:fb:53:ae:80:6b:51:3b:9d:
03:2b:00:e0:ad:2f:3c:11:3e:24:b4:51:2b:3e:10:84:30:ff:
d4:a8:d0:40:0c:eb:ca:9e:68:ce:ce:00:f3:35:56:db:1a:d1:
48:2c:b8:a4:17:08:61:52:13:6a:69:e2:f2:65:1b:8a:95:80:
f6:30:32:f2:7a:fd:64:48:fa:de:95:47:0d:ff:ea:3f:56:4e:
e1:33:3d:68:aa:98:72:b5:3e:76:fb:6a:06:89:e9:57:05:ba:
d5:58:4e:68:3b:03:4a:6f:1d:b3:bf:de:08:64:42:7e:16:75:
5e:69:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:03 2025 by rpki-client