Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: fMWKN19im5U7si1ujQD0fvuOjRB5zq3HrLqxn7BGXJY=
Subject key identifier: 85:31:CB:F5:28:60:6A:0A:1A:DC:6B:2E:C8:FC:39:AB:3C:E6:AE:E5
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01969F76519D8975EFEAB60FAE2332748598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0D66
Signing time: Mon 05 May 2025 08:00:53 +0000
Manifest this update: Mon 05 May 2025 08:00:53 +0000
Manifest next update: Tue 06 May 2025 08:00:53 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: meghUV/8OOOj6WXI7M0Ib6aLnHpczg6mQzrvPiYFPsw=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:51:9d:89:75:ef:ea:b6:0f:ae:23:32:74:85:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: May 5 08:00:53 2025 GMT
Not After : May 6 08:00:53 2025 GMT
Subject: CN=8531cbf528606a0a1adc6b2ec8fc39ab3ce6aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:60:9d:7d:8b:ec:95:4f:83:80:19:32:9b:
7e:ff:24:db:fe:f3:cd:e4:b1:c1:69:bf:c0:05:70:
42:92:c0:f4:e8:84:99:42:31:80:78:22:6b:3f:e6:
aa:11:7f:b9:ed:78:f0:a9:6e:2f:9a:ef:8f:fc:3f:
99:f6:66:99:1d:1e:2a:a9:66:ad:ca:eb:18:90:7a:
48:fe:83:12:c6:0e:70:88:85:cb:dc:00:3e:38:00:
20:5a:15:ad:46:bd:26:32:96:29:ac:93:bd:d6:eb:
00:71:59:a2:62:ac:75:08:76:a1:a5:d7:11:38:d7:
ec:fa:34:97:7b:cc:f6:40:35:27:2e:b5:8e:2c:78:
51:0a:8a:43:f4:25:f9:02:d2:9d:66:2d:68:ea:7c:
ed:45:f7:af:90:69:ac:49:a4:1b:c4:6f:48:7a:2d:
d4:0c:62:c7:c1:ee:69:b6:ca:39:02:fa:16:d9:e5:
ca:eb:e1:88:be:6b:2c:cd:89:3d:cf:5a:b6:be:e8:
fc:89:92:3e:ba:be:8d:bd:49:80:aa:6b:3b:0b:e5:
f4:cc:4a:49:8c:5c:bd:7c:ea:43:ae:31:50:53:15:
ab:52:64:3d:8f:a1:a3:a2:8a:39:09:eb:b5:40:f8:
50:0b:e6:8d:d6:95:5d:fe:85:85:35:22:7f:41:6d:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:CB:F5:28:60:6A:0A:1A:DC:6B:2E:C8:FC:39:AB:3C:E6:AE:E5
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:5f:ca:27:6a:d6:b9:ab:77:54:56:c6:b6:3a:4b:b8:48:
02:fa:47:a3:68:01:cb:02:6b:07:64:79:f9:7e:28:9a:c5:9d:
5e:5f:ca:20:05:cf:9d:fd:af:88:37:bb:bf:f4:65:80:11:bd:
78:a0:1d:e3:48:97:36:43:d5:05:51:50:3c:4b:67:be:16:57:
4b:2d:9f:03:9e:de:4d:f3:36:ae:f8:79:54:b9:3e:74:90:3e:
27:41:df:e3:63:c6:a7:52:4e:d1:48:0a:47:a0:5b:a0:87:62:
dc:49:76:45:e4:f5:63:1a:51:0a:95:c3:35:0c:72:2b:fb:ba:
d8:a1:cc:ea:d4:21:b2:9b:30:07:f9:20:bf:c1:f5:94:7e:fd:
7b:54:d3:e5:7d:85:6e:b5:24:65:f0:93:af:4e:31:9b:55:ac:
91:c3:f2:eb:5a:96:9c:04:67:6f:09:a2:3e:dc:2d:61:cf:40:
04:6b:d1:4b:ec:2f:cb:78:f9:b9:20:75:67:20:92:70:a5:d8:
b9:2b:94:e1:2a:79:d2:21:29:24:d6:32:c0:1f:c2:a3:44:72:
b4:34:09:80:5c:26:c4:e9:6a:e1:32:f9:e4:95:35:87:f2:dd:
f9:5a:6e:c2:6f:bd:3c:07:ad:f5:17:65:85:22:91:4b:ac:fd:
80:0c:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:18:25 2025 by rpki-client