Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: PwQ/+n1CzE3lK5xBYGdLYOsDhlVrurD3/k6hxr5uwl0=
Subject key identifier: 8B:E9:E6:5A:06:CC:FD:5C:C0:A1:DB:88:CD:68:02:7D:3C:EB:5D:72
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 0196B25802ABE1C33D204BAAA940F50B0306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0A50
Signing time: Fri 09 May 2025 00:00:34 +0000
Manifest this update: Fri 09 May 2025 00:00:34 +0000
Manifest next update: Sat 10 May 2025 00:00:34 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: jnfjHUqSDmKx3dNgq314jP9mlXXFyPSE7xZmcKr2oEA=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:02:ab:e1:c3:3d:20:4b:aa:a9:40:f5:0b:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: May 9 00:00:34 2025 GMT
Not After : May 10 00:00:34 2025 GMT
Subject: CN=8be9e65a06ccfd5cc0a1db88cd68027d3ceb5d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:4a:2c:66:e5:e4:b9:74:62:c8:94:42:01:
4a:35:7e:17:07:41:7b:b3:84:cb:e6:1d:cc:7a:f0:
b4:52:07:e4:5c:20:10:b3:e7:ee:ca:ea:dc:90:ae:
06:cf:f8:eb:6f:18:ed:11:e1:7f:ca:10:eb:98:27:
46:ed:44:22:f4:ad:5c:0c:9c:40:a1:f7:5f:37:2d:
ee:65:39:c3:9a:ae:e7:11:62:5f:79:ae:6c:dc:bc:
c9:61:1b:29:bd:90:7e:fd:c2:7e:bc:b6:07:61:40:
53:ae:25:75:95:67:56:84:c2:9c:db:34:ea:63:c7:
e0:21:22:68:d8:60:c5:a1:16:69:9d:e2:48:90:cb:
9c:90:c4:0d:32:d9:ad:c1:8e:ce:6f:2d:16:7e:86:
d5:d8:92:79:94:95:42:e1:e0:8f:df:00:f0:ba:fa:
b0:17:3b:1f:93:b0:f3:6c:0a:51:fc:ed:58:44:d9:
85:39:1e:cc:c5:ab:1c:83:31:93:50:65:49:98:6e:
55:09:5e:f8:b5:69:2b:50:29:ab:ff:81:65:aa:05:
6e:6f:7b:c3:f0:e7:a0:e9:d1:c7:28:73:18:23:22:
2d:51:98:1a:c5:fb:f0:09:17:be:8d:f1:14:90:50:
1f:72:81:dc:da:72:86:0b:dd:5f:08:4d:a8:3e:91:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:E6:5A:06:CC:FD:5C:C0:A1:DB:88:CD:68:02:7D:3C:EB:5D:72
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:fd:6b:d4:1b:85:3a:f5:af:a3:b7:ab:47:ba:a5:37:84:
3e:10:91:f4:cb:0d:39:33:b7:ec:8b:ed:6f:bb:75:dc:c9:13:
21:b1:82:38:2a:f0:72:cb:3a:40:21:37:ba:bb:e5:1a:4a:21:
3f:e8:76:bc:61:01:8f:52:b3:99:5f:37:98:61:55:ed:95:ab:
2d:61:07:c7:93:90:53:c2:85:2b:ed:e4:34:6a:a6:5a:3a:aa:
4c:89:d1:03:4e:b3:56:76:fc:0e:f6:fc:a8:7c:31:5c:5d:df:
5b:d8:15:ac:c9:c1:c3:3c:cf:55:35:21:c6:34:c1:3e:e9:b8:
7f:3e:d9:4a:1b:46:19:c1:8d:9b:f0:30:58:37:57:40:78:d9:
de:57:91:bb:3a:b9:0f:85:10:65:03:4e:5f:58:a6:98:68:2c:
b6:ac:8b:5a:f6:cf:fc:e8:b7:31:90:1a:63:c9:c1:b5:4d:cb:
5c:b1:1d:06:35:00:e6:66:c6:bf:e7:57:91:af:2b:50:5e:53:
be:06:cb:37:a1:68:f6:77:ef:ef:af:bd:6c:e5:c8:ea:9d:65:
fd:c7:10:be:43:60:8a:e4:d8:76:61:99:5f:76:fb:86:53:ef:
35:e8:b4:65:71:7b:49:0a:fa:11:ec:5a:1a:a0:77:1a:56:6f:
2f:ac:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:51:38 2025 by rpki-client