Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
File: 80Cbg9EUyAkhERbKLI2zjc4WgPk.mft (raw, json)
Hash identifier: R8mujQNkp6iOanA6Ei1eHUPPKnXTHfPT/W9jpn/JCzo=
Subject key identifier: F6:CB:FE:F0:04:42:E2:8E:AC:0E:03:AE:02:32:C4:A1:52:F0:59:76
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Certificate issuer: /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial: 0196C64CD816D6A0A57AB57109455E42873A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
Manifest number: 0759
Signing time: Mon 12 May 2025 21:00:46 +0000
Manifest this update: Mon 12 May 2025 21:00:46 +0000
Manifest next update: Tue 13 May 2025 21:00:46 +0000
Files and hashes: 1: 80Cbg9EUyAkhERbKLI2zjc4WgPk.crl (hash: UguEfkrvAQfHJ32S41F4LE85N5VLI+lpFKqFIIwGrjM=)
2: SIpXBuF5J8M21Gywmn86E22uiyU.roa (hash: 0/HkiIDr1xidzVLyjio2x3kYkY2H4uzUst02FaBMwU4=)
3: cfMo45Jv9A1WGKpmxu905UcUbY4.roa (hash: U6aEuljm9L9MfkEprrOph8zxNUxsNX0jhdgLZVW2e8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:d8:16:d6:a0:a5:7a:b5:71:09:45:5e:42:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Validity
Not Before: May 12 21:00:46 2025 GMT
Not After : May 13 21:00:46 2025 GMT
Subject: CN=f6cbfef00442e28eac0e03ae0232c4a152f05976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:a1:e4:48:50:5a:1b:a8:2b:af:e5:37:67:
f3:da:22:5e:d8:30:70:25:30:50:d4:f2:e5:61:ce:
d5:d3:fd:49:dd:b4:08:dd:45:a1:39:15:17:fd:eb:
dc:31:79:4f:08:83:64:0d:75:be:44:39:77:ad:64:
76:10:1a:1c:ef:50:97:06:05:64:ab:da:a1:cf:18:
52:45:a7:8b:bf:82:e1:f4:3d:2d:d9:0e:7d:ef:d0:
ac:19:f2:b8:c5:8e:e2:c1:63:a2:80:90:39:1a:de:
b5:b4:94:ca:78:6d:13:f5:57:0c:4d:b7:d4:c9:49:
1e:59:e3:3f:c7:9c:9a:b0:28:32:a8:8a:a2:69:7b:
0f:cd:4c:9c:b9:95:7f:ed:75:a6:5c:c1:09:88:a3:
7c:6c:24:57:fe:ea:6b:7d:8f:52:c8:9d:32:1d:17:
49:30:4c:42:af:1b:df:cb:11:d4:58:57:e3:a7:91:
50:77:cf:8a:81:f3:93:49:52:cc:d5:19:47:3f:fc:
73:18:07:39:f0:ed:96:e8:c2:38:92:88:a7:a2:7c:
fe:2f:cd:3d:db:bc:16:bd:34:82:15:05:05:9c:df:
22:e6:69:73:e5:a6:ac:8f:f9:c5:dc:c9:55:7d:fa:
cd:07:ed:06:e0:0c:74:b5:3a:ce:7f:e9:82:68:38:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:FE:F0:04:42:E2:8E:AC:0E:03:AE:02:32:C4:A1:52:F0:59:76
X509v3 Authority Key Identifier:
keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:44:d1:d9:ca:c9:f2:f9:94:ff:22:8b:03:68:4c:5e:88:fb:
a2:f2:71:1b:34:9d:d9:69:af:d9:42:28:14:a5:11:41:6e:58:
c9:74:a8:8c:57:11:c9:12:23:6b:11:13:fb:70:d4:ee:75:f1:
c1:32:92:4e:c7:e2:c5:47:75:93:9a:9c:c4:20:6c:fc:a6:2d:
48:55:5e:40:f1:bc:c0:81:09:d3:f5:f5:38:31:d3:9b:27:33:
97:85:61:64:62:b6:60:4a:8a:4e:f0:70:03:eb:e4:bb:7a:0c:
c5:42:2a:be:9a:98:24:f4:8f:da:26:97:53:72:f1:a8:34:ef:
64:d8:e1:0b:17:45:96:3a:f6:41:4c:df:b0:95:fc:ce:53:4c:
93:2e:9e:de:46:a9:99:c5:b1:d9:a7:f9:d2:34:24:46:f5:43:
ca:8a:85:86:7a:7b:db:88:34:d8:8b:df:3b:bf:3d:d8:05:85:
4c:40:f1:21:05:90:80:4b:aa:4a:c4:e3:03:83:76:1f:a0:b4:
5c:e6:d1:4e:81:14:ad:27:97:c8:09:13:3b:df:ef:22:09:41:
89:5a:3d:90:1e:29:07:96:62:c1:08:71:71:e3:5a:60:5f:53:
c4:77:95:bf:67:b2:f0:04:dc:ef:8a:21:58:fc:fb:cc:d6:32:
76:75:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:35:01 2025 by rpki-client