Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: ENDO9IRKnFbZ3GB1AJH6gVl1sEW3RExJRzLxAGnoVSw=
Subject key identifier: C8:C3:0E:D4:23:F9:34:3B:B5:B9:B8:88:4A:38:31:A8:D0:4F:73:46
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 0196B0697E872B455BFBB56EF4E054A604AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0826
Signing time: Thu 08 May 2025 15:00:25 +0000
Manifest this update: Thu 08 May 2025 15:00:25 +0000
Manifest next update: Fri 09 May 2025 15:00:25 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: EreSA8aXhQk6GgE9R7KOWr3+9u0gEsOwsPptCSKTwIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:7e:87:2b:45:5b:fb:b5:6e:f4:e0:54:a6:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: May 8 15:00:25 2025 GMT
Not After : May 9 15:00:25 2025 GMT
Subject: CN=c8c30ed423f9343bb5b9b8884a3831a8d04f7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:ad:a5:a5:7b:32:24:e8:75:65:c2:a3:c1:
fb:1c:aa:9e:c7:ab:af:d9:c7:af:b4:38:a2:60:c3:
38:f8:8f:af:bd:ba:cb:b9:c0:e3:23:8a:39:95:98:
a7:cf:98:8d:d9:1b:b3:62:a1:4b:b7:8f:0b:53:53:
62:14:00:ea:2b:65:ca:da:67:f1:6f:30:22:2e:a8:
ef:8a:d1:13:40:11:12:63:e6:63:c8:1a:cc:79:f5:
75:4b:31:24:2f:8f:82:46:30:07:a4:71:4f:30:9a:
4e:61:54:39:0a:3a:6c:fd:e9:18:fc:45:39:4f:88:
f7:3d:58:ea:d2:6a:3e:33:3b:cb:78:fc:f1:f9:93:
37:f1:77:ef:7c:41:fd:aa:13:53:dd:f6:62:a2:38:
f7:79:e6:2f:65:b9:4d:ff:c0:d1:64:80:78:99:6e:
ca:05:22:74:e2:9b:42:7a:d8:80:ff:a8:19:cc:43:
93:c8:a6:92:60:d5:9e:ab:05:5b:1a:44:78:66:fa:
82:1d:4b:0b:8d:81:d8:6c:28:67:9c:17:38:b5:1c:
49:2c:1d:9a:7b:f7:a5:6a:d5:73:bc:9c:c3:36:d0:
57:fc:e9:7e:1c:8e:7a:9d:67:28:9f:2c:13:56:55:
44:3f:62:a9:15:65:f7:93:f6:b3:15:8f:4a:5b:9f:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:0E:D4:23:F9:34:3B:B5:B9:B8:88:4A:38:31:A8:D0:4F:73:46
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:85:b7:65:5d:aa:98:b4:7e:93:55:e7:7c:b1:b6:73:c0:8e:
7b:76:05:98:3b:42:4f:2c:eb:3d:9a:e8:9b:90:f6:2b:50:64:
c9:d0:e4:47:f2:97:cf:a4:e6:9c:2f:a4:45:0a:f5:1c:88:09:
fa:eb:1d:69:8c:ef:2f:8c:38:f9:de:e3:eb:7a:53:c6:d7:99:
e4:e9:d9:93:07:95:54:8e:d9:ac:39:e6:b9:ab:10:81:71:17:
0f:a9:f8:a4:cb:8d:64:ad:8c:36:8f:db:2e:a2:cb:26:90:3d:
12:76:b2:dd:4b:49:c5:7c:93:07:fe:70:ed:d5:65:66:32:85:
42:48:78:74:1b:c0:52:f6:c8:61:5b:6e:8c:dc:73:55:0b:85:
12:f9:23:24:54:e8:b3:28:7c:bb:88:b1:5f:56:3b:77:b6:43:
d8:43:d5:d6:b0:9e:2b:07:c7:ba:9d:28:04:e8:46:2f:02:80:
a5:c2:10:26:a1:1d:b6:6f:d7:96:01:41:1f:7e:20:c3:bc:c3:
0f:f9:b5:7e:0e:d6:71:9f:dd:d4:30:23:3a:b1:27:80:2e:0c:
8c:d9:44:2d:2b:0a:5a:01:a4:5f:14:2d:1a:da:1d:a8:49:25:
1b:8d:7b:f5:3a:f0:c7:81:76:d6:fd:55:10:ad:15:38:af:fe:
df:a6:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:33 2025 by rpki-client