Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: lijJDZXqZT5shHcZYrIiV/vtWCZIzamYyyPmIKFqg70=
Subject key identifier: ED:79:FD:C8:8A:BF:C5:35:80:33:9D:CF:3E:03:AC:59:BD:FD:C2:1B
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01969FE3F8F436905DCBFA77B035004FF7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:39 +0000
Manifest this update: Mon 05 May 2025 10:00:39 +0000
Manifest next update: Tue 06 May 2025 10:00:39 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 9OpK2g3w9KscvFmK/iBGx/9b9+vKuCV7BpRbVijKO8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:f8:f4:36:90:5d:cb:fa:77:b0:35:00:4f:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: May 5 10:00:39 2025 GMT
Not After : May 6 10:00:39 2025 GMT
Subject: CN=ed79fdc88abfc53580339dcf3e03ac59bdfdc21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:64:5e:58:12:00:d4:b6:50:57:bf:50:9b:
ba:b2:95:1c:0a:11:11:4d:ce:06:49:98:8f:06:52:
3a:c0:3e:5a:44:a1:c8:0e:79:25:0c:f7:3b:b0:90:
1d:70:3d:57:1d:fd:c5:33:7d:7c:d8:d8:91:82:db:
51:39:f3:53:82:42:05:ab:65:ce:91:ea:3a:69:e2:
a2:1b:ca:30:82:dc:45:dd:61:16:c4:0b:0f:e1:19:
14:4f:2b:7b:59:5c:63:45:f9:79:98:06:8d:b2:2c:
6b:77:88:ba:7c:c6:8a:7f:77:b3:fa:8b:da:a2:de:
db:3e:51:f3:a8:a5:00:d2:04:5b:83:c4:f6:bb:99:
3d:b2:7d:28:3c:37:56:dc:7e:13:bc:5d:55:84:37:
27:a6:bd:cc:fe:96:48:fd:aa:8f:cb:85:16:42:e7:
d5:4f:63:71:b7:58:6a:f1:28:80:cd:60:87:2d:bb:
52:58:71:dd:58:4a:49:13:3d:6d:b3:73:af:dd:ed:
05:4a:d3:7a:83:d7:dc:ff:e4:d4:29:89:ce:e8:16:
fe:06:79:59:f6:35:48:c8:4d:d8:1d:a7:b8:25:6f:
40:c9:21:6f:47:dd:f2:42:ef:08:1b:fc:4b:77:76:
c4:8a:2b:4a:a9:5c:a4:1c:49:71:11:b8:37:70:bc:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:FD:C8:8A:BF:C5:35:80:33:9D:CF:3E:03:AC:59:BD:FD:C2:1B
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cf:52:8e:d9:2e:8b:4e:f8:be:52:24:9d:57:7d:bb:f9:c4:
44:b9:40:db:e5:1b:0d:a3:5f:49:5d:0b:c1:2c:73:98:98:8b:
4c:b0:60:b3:a9:7e:cb:ec:46:54:d9:e7:c2:72:95:5a:9f:6a:
91:4c:c3:30:35:4a:4e:85:bf:53:e3:61:02:a6:2c:fa:d6:52:
35:f1:03:19:8f:41:6e:23:30:99:8d:63:8b:dd:b0:67:bc:e8:
ff:0b:11:97:ec:70:51:c3:83:20:74:96:2f:c6:2b:9f:c0:89:
99:a1:be:5b:fb:e0:23:3b:12:a5:c4:b7:1c:71:96:f6:86:71:
58:0b:35:41:c0:79:71:d3:df:90:f3:14:10:02:5c:91:e4:e2:
5c:2c:f5:43:b8:c3:5f:73:c8:60:f7:74:25:f7:ac:cb:0d:ac:
1c:d1:ee:e4:9c:04:5e:6a:61:7c:f8:5f:a6:bf:19:e1:9c:8c:
f4:95:85:ba:1e:ce:46:3f:1b:4e:0d:bf:79:5e:f6:42:44:84:
bc:49:df:b7:b4:ac:42:5c:45:a9:4c:4d:14:8e:57:08:05:99:
cf:8b:61:82:69:1a:73:f9:19:23:ac:4a:1f:f8:0c:ab:25:69:
2e:51:65:b2:d2:94:18:43:c3:8e:2a:e7:59:f8:0a:b8:fa:43:
36:82:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:43:14 2025 by rpki-client