Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: 4HYnJcv/PbnMFd0/ZJi8YPMljk3QgUzDFZOYEXgDmlY=
Subject key identifier: E1:01:AA:67:40:D5:C4:3D:23:16:7F:F6:18:76:57:2B:0A:F0:F4:5C
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 01969E2C9A16D3EA63F674ED58B845BC9247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 11F3
Signing time: Mon 05 May 2025 02:00:45 +0000
Manifest this update: Mon 05 May 2025 02:00:45 +0000
Manifest next update: Tue 06 May 2025 02:00:45 +0000
Files and hashes: 1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: Z/JpufBAp2tjSZPjyhq+PKjxloomAb6nHKV/EYR7sH4=)
2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:9a:16:d3:ea:63:f6:74:ed:58:b8:45:bc:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: May 5 02:00:45 2025 GMT
Not After : May 6 02:00:45 2025 GMT
Subject: CN=e101aa6740d5c43d23167ff61876572b0af0f45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:2d:27:dc:98:9b:0c:7f:78:53:33:b5:46:
0c:e5:d4:86:4a:24:dc:69:e8:f3:2a:1f:4c:49:b4:
59:7b:0c:7f:11:c9:a0:9d:b7:3a:c6:9c:2a:93:ab:
7b:87:a5:45:a4:5e:8c:c2:86:0a:a1:3b:f4:77:be:
d5:3c:fc:ad:9d:a6:bf:38:51:81:7b:9f:35:42:a2:
19:95:75:2b:7e:12:04:87:01:4f:5b:93:03:ec:71:
b0:b0:79:35:dc:f7:35:7d:d3:da:50:45:0d:3c:1f:
16:97:dc:1f:4f:63:39:2b:c1:4b:df:f5:1f:78:69:
1d:de:0a:b4:a1:50:95:de:6b:1c:a7:ef:77:e0:c1:
06:6c:d9:b8:48:2f:ff:67:bd:72:80:25:d7:56:db:
70:11:d7:08:86:83:0b:36:44:ad:ad:33:dc:da:29:
0b:ef:29:56:44:1c:6f:da:43:09:57:89:d8:ce:a6:
58:d4:8c:a0:63:a7:14:94:0f:6d:2a:b0:52:c9:ee:
36:0e:d5:5f:f4:5a:ec:81:4b:03:92:4f:4b:13:ad:
89:59:8a:c3:23:2f:96:c9:15:80:0c:50:51:fd:e6:
5e:96:91:e4:f0:10:a8:dc:78:6d:d9:ec:54:56:92:
79:44:ad:36:e0:ef:e5:9b:e7:01:8d:13:e2:96:0b:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:AA:67:40:D5:C4:3D:23:16:7F:F6:18:76:57:2B:0A:F0:F4:5C
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:cc:2a:f6:00:ac:ec:57:d6:94:91:0b:ad:73:e7:83:89:
7a:52:a3:17:08:83:e0:03:c8:b4:41:3f:38:20:4f:68:8a:4b:
ca:c7:ec:d1:cc:b4:5a:c4:4a:36:e6:dd:cd:cf:13:c7:36:d5:
bf:a2:bb:07:35:0d:c9:c6:86:3c:14:6f:39:94:64:8c:23:23:
f4:e4:4d:0b:bb:9b:8c:76:40:19:48:d0:3f:cf:da:46:d6:e1:
9a:f2:07:44:00:0c:12:9e:b9:ed:f0:e6:b8:5a:e5:8c:26:ab:
c5:64:86:4b:e7:87:14:a0:92:2e:44:9a:e5:b9:05:ee:9a:6f:
f7:91:26:cd:f9:f9:26:06:e6:5a:5a:f8:7c:3b:b0:91:f9:16:
ae:46:57:9d:57:e5:e4:4d:fb:5b:af:2c:1f:33:10:0e:9e:7e:
80:95:82:fa:67:9f:87:bd:30:a3:2a:57:f9:80:5b:7f:c1:4a:
08:c4:6c:9c:c4:fd:54:65:a2:fb:f2:b6:a8:e7:b0:5a:c6:7a:
31:4b:ab:c5:aa:f9:4f:c2:b8:b2:23:dd:34:07:30:d7:3a:9d:
8f:d9:cc:40:08:5b:8b:d5:0a:cf:a0:1f:66:a5:0c:f4:8d:ba:
57:60:ea:78:b1:e7:4b:e5:99:e3:08:41:9d:6e:e1:59:ec:31:
0c:3c:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:35:17 2025 by rpki-client