Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: 8TR1eG5bEs/jXcCHjha5Ft2tQWfMEI4k0hekB0ce5H0=
Subject key identifier: DE:3E:5C:81:09:00:BE:6C:81:32:46:27:BB:4B:0C:58:15:E6:29:9F
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01969E6361BF1F7C2F11FC6CF708B15D8D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:35 +0000
Manifest this update: Mon 05 May 2025 03:00:35 +0000
Manifest next update: Tue 06 May 2025 03:00:35 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: QEHgrsRtcl0HwpJ7kGNfPJkE+TFPq/ZijV+DoTiVOA0=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:61:bf:1f:7c:2f:11:fc:6c:f7:08:b1:5d:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: May 5 03:00:35 2025 GMT
Not After : May 6 03:00:35 2025 GMT
Subject: CN=de3e5c810900be6c81324627bb4b0c5815e6299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:6b:63:79:dd:bd:c0:ed:a4:3f:4f:a4:22:
36:9c:6b:a2:28:52:eb:55:6c:f8:f4:6f:3c:7c:78:
30:64:6e:ea:0f:33:ca:31:a1:0b:40:a3:b5:88:32:
3a:50:d7:cd:49:1c:99:52:a6:45:ea:a8:f7:fa:49:
75:bc:1e:5f:50:e7:06:af:cb:f7:bb:31:86:b3:a4:
22:b9:f1:f9:53:e1:8e:e0:7e:4d:6c:98:0e:e8:fa:
4d:26:fe:f7:66:d1:84:10:42:36:98:a6:e5:c0:8c:
64:cb:3b:10:d7:66:98:92:6f:1d:38:93:8e:fd:a3:
c6:1d:a8:df:a7:5f:27:91:03:c4:60:1a:8b:fc:38:
5a:79:e8:f3:0c:38:b3:92:10:16:c3:c4:26:f9:34:
34:da:17:94:1b:f1:f1:6e:25:ed:90:a4:c7:ff:ba:
be:a8:e7:04:e9:15:65:a9:44:17:5b:4f:ea:57:84:
3b:f4:67:bb:32:0e:87:d7:cd:cb:2c:82:8e:fb:c5:
c4:d6:40:6f:8e:4b:52:f6:dd:1b:f0:ce:f0:cd:70:
aa:d3:1d:d7:00:11:87:63:0a:91:52:aa:8b:65:65:
36:0c:b4:4e:ba:60:5e:bd:f4:df:ac:ef:e2:2f:c6:
1e:1f:fe:00:b7:3c:f9:21:1f:32:25:8a:31:bf:08:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3E:5C:81:09:00:BE:6C:81:32:46:27:BB:4B:0C:58:15:E6:29:9F
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4b:f0:33:00:e2:9e:40:61:10:e6:05:69:81:ae:ba:57:1f:
5a:c6:88:38:6a:df:f5:07:12:1f:6a:2d:cc:51:f1:5d:3a:81:
80:24:9b:94:2e:27:cb:19:92:24:f4:4b:fc:07:94:d9:22:c3:
da:c8:52:a5:17:27:d4:66:31:85:cc:b1:12:c5:3b:e8:dd:f0:
93:dc:e4:4b:cf:2f:07:c0:71:ce:37:2d:8d:e3:7a:d7:5c:5f:
9c:7e:8b:0b:b5:28:3c:10:d0:53:a3:d9:5e:3f:25:2f:41:78:
23:db:43:c6:0b:c1:bd:ed:21:a2:4f:98:fe:40:25:a4:08:26:
6b:9c:e0:f5:72:89:44:29:11:c7:69:69:26:a6:6a:58:26:8e:
f6:64:68:ef:05:6d:0d:ce:0a:46:af:11:b5:39:ca:24:d6:a7:
e6:fd:b8:9a:99:54:f1:a3:ea:1f:5a:5e:e3:f7:7b:00:a9:6b:
9d:82:06:25:da:6a:94:cc:27:65:e9:51:47:0e:cf:d3:11:43:
29:de:d2:6a:cd:f4:f1:88:eb:ac:29:77:97:71:3e:1b:55:9a:
ed:bb:61:0c:d2:a1:2e:ec:a6:37:93:ae:96:77:75:dd:a2:71:
44:58:2d:fa:3e:d3:2b:30:a7:f3:76:ea:29:99:02:e0:cb:b4:
bb:2a:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:40 2025 by rpki-client