Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: mk7O1Ax8lSdWJ7RpV71FemKk9DP1+h2oN5V0DszHH9Q=
Subject key identifier: 79:23:88:68:41:38:31:79:F6:93:E6:7B:C2:8B:7A:F9:BC:05:C5:CF
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0196C0EF5AC313E2C7139684E1DF80B083AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0126
Signing time: Sun 11 May 2025 20:00:33 +0000
Manifest this update: Sun 11 May 2025 20:00:33 +0000
Manifest next update: Mon 12 May 2025 20:00:33 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: UdZnjWBrgGoo11gTLRjMTuwp62HHjnBXjEgslX+BA94=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:5a:c3:13:e2:c7:13:96:84:e1:df:80:b0:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: May 11 20:00:33 2025 GMT
Not After : May 12 20:00:33 2025 GMT
Subject: CN=7923886841383179f693e67bc28b7af9bc05c5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:98:a7:50:a6:d4:85:54:d4:87:80:d6:cd:
ff:00:2f:48:05:b8:bd:45:f3:fa:48:5c:50:0b:8a:
f9:b0:d1:17:75:a2:1c:6f:bc:ca:75:8b:6d:34:21:
73:78:fc:19:de:29:91:a8:44:a3:6d:ef:76:ff:44:
23:3e:83:cd:f7:c5:07:f6:f7:46:ea:36:8b:11:5c:
e0:82:05:8e:27:73:00:ba:7d:71:7a:62:a4:d9:8d:
9e:24:e2:0a:7e:0a:d9:03:a6:e5:d5:40:a0:1f:e1:
9c:42:2a:58:14:f9:91:27:4d:df:77:20:f5:7f:db:
4e:e8:c4:24:92:15:33:7d:db:ce:f2:88:0e:34:de:
fc:9f:38:f4:78:e4:9d:bb:92:a3:b2:85:6a:25:df:
b8:47:57:b2:2e:e8:0a:6d:b7:b1:71:be:a9:44:a5:
26:b7:4e:af:f0:e4:63:59:93:7a:a8:19:07:fe:12:
e3:77:07:67:f2:f5:d3:5f:95:d5:a2:27:9b:0b:5b:
f9:a1:2f:56:da:b0:dd:ea:62:c7:dd:f0:58:e8:1e:
03:86:73:ec:97:24:d8:9b:e0:22:91:5c:bc:2a:52:
06:51:8c:52:a1:4d:06:92:6f:b5:f5:c9:1a:58:d3:
95:b6:81:20:35:3b:07:f4:9b:00:4f:2c:f4:31:4a:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:88:68:41:38:31:79:F6:93:E6:7B:C2:8B:7A:F9:BC:05:C5:CF
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:98:97:ef:7b:ef:13:8f:cf:7c:2e:1c:ae:c3:19:d2:04:
64:bd:4c:6a:97:fd:31:29:a2:21:9e:cf:aa:fb:f5:bc:fe:20:
74:b3:bb:1a:06:32:88:9a:d3:39:88:43:d3:fd:7b:95:d1:8c:
5c:75:96:64:61:d6:c0:b3:fc:a4:b8:03:b1:a7:36:2a:74:77:
70:7a:6b:99:98:99:b5:16:be:50:1e:92:37:3c:1a:d8:38:e1:
88:77:dd:5e:d6:93:a0:64:10:93:20:21:97:06:ec:60:4f:12:
59:a9:1b:92:c9:24:37:9e:d5:99:81:a3:a9:b4:02:5e:ee:a4:
ab:48:23:d4:32:9c:cf:61:df:a4:bf:64:c6:38:b0:23:c7:2a:
a9:22:35:ad:03:00:5f:ba:b4:4d:3f:e0:76:46:2a:8f:26:4a:
0c:5e:17:b2:ee:b3:bc:25:1f:36:59:65:c4:af:66:c7:19:bf:
60:f8:25:8f:9d:84:dc:a5:cc:5f:53:84:ba:c0:19:5a:f5:d8:
e7:b8:bb:02:b7:e6:ab:0f:db:33:5b:49:b7:07:19:db:72:57:
17:0a:65:52:3b:a3:6f:06:fb:f5:68:26:e5:3e:66:62:7a:ce:
25:4c:a2:49:2a:8d:29:cc:00:b5:1c:bf:4d:8a:9d:86:29:8d:
3f:50:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:27:58 2025 by rpki-client