Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: dc/5w1NTaIB8Ldh2S+THk5GgazKK47II55z+TiD4LO8=
Subject key identifier: 30:93:5C:0B:5E:54:6A:96:BA:33:51:70:28:47:E3:95:79:49:F4:8C
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0196AD319C63C19D6328373C32B8D38B7687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 04C5
Signing time: Thu 08 May 2025 00:00:31 +0000
Manifest this update: Thu 08 May 2025 00:00:31 +0000
Manifest next update: Fri 09 May 2025 00:00:31 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: Tu4293wJjEJddfhXHWVhqdpxOQbtJ87YfGNLlJeVlSo=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: qCfNSjbitI7Et5lSX1rtmaive_0.roa (hash: 1fS+iseUgmiw070ru2CUkkEKwBoPzkT1Bp7jleLafaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:9c:63:c1:9d:63:28:37:3c:32:b8:d3:8b:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: May 8 00:00:31 2025 GMT
Not After : May 9 00:00:31 2025 GMT
Subject: CN=30935c0b5e546a96ba3351702847e3957949f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:df:cf:f2:a4:d9:d3:94:62:e2:72:f3:f7:
4b:29:e0:4b:57:53:17:dd:51:6c:de:bd:d1:28:c6:
a6:51:e7:36:2d:db:da:50:de:3e:dd:c1:5e:0d:d3:
07:cf:7a:ff:4b:ef:b9:fe:a8:25:4e:68:de:a3:e9:
1f:54:61:17:15:c5:9d:ac:e9:06:b4:41:bd:24:13:
bb:fb:99:08:c8:7b:10:bc:96:cb:c8:2f:58:d9:52:
71:86:92:66:5e:d9:3a:a3:3a:48:96:e7:04:ee:6b:
55:f6:3b:f0:e6:f7:87:74:b6:73:64:6e:c0:98:a7:
3e:8e:a1:cd:95:2a:95:96:39:cc:90:25:85:b4:a7:
e7:6b:cd:13:c3:5f:00:ee:1c:14:a1:a5:46:fc:c5:
2e:b0:65:5e:a9:46:99:f9:82:bf:8c:44:39:8f:a3:
03:e5:56:86:55:83:9c:c4:7f:20:98:9d:70:19:50:
80:c6:c1:3c:e2:cc:8a:d4:fd:9b:5a:ca:df:9f:61:
da:76:0e:61:f4:08:c2:1c:94:20:7d:c8:df:27:6d:
c8:1f:bf:c1:ed:1e:fe:c5:51:3c:91:b5:58:ff:65:
74:3d:24:24:1b:12:72:87:a6:ca:6c:d8:75:a3:88:
bb:cf:94:17:02:c4:06:d3:f5:65:8c:ff:cb:88:5e:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:5C:0B:5E:54:6A:96:BA:33:51:70:28:47:E3:95:79:49:F4:8C
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:4a:a3:82:57:51:e0:c4:d6:f0:cc:d3:ac:bf:4d:10:7f:
ef:28:99:2f:bd:01:5b:ac:b2:5f:41:6c:c4:85:31:6c:6f:36:
69:2c:7f:8b:5e:50:9e:30:55:8d:8a:a6:cb:bc:08:dc:94:74:
76:74:b4:e7:d1:2d:16:2b:c4:3a:da:87:73:7d:fc:4e:fc:b0:
7a:d8:29:95:d7:54:14:02:1e:57:24:a3:31:35:c7:fd:ab:8e:
88:7d:60:27:a5:cc:99:94:33:73:db:56:2e:c7:eb:17:e7:e4:
c0:7d:67:04:64:b7:c6:54:b2:b4:53:91:93:01:9b:53:51:45:
ea:ec:bf:6f:64:8a:be:94:19:31:f4:ad:73:58:57:4d:50:85:
f5:f7:36:05:23:b6:a4:54:88:99:5c:1a:2c:64:f2:67:a4:41:
2a:42:2c:82:a1:00:33:72:8b:96:6a:c0:5b:ed:99:5d:63:06:
ac:04:7e:ec:84:f8:31:fe:e4:07:43:79:ca:ce:e5:79:f2:30:
9c:07:de:b1:ad:de:63:37:34:8f:0f:3c:f0:62:8f:0f:07:0f:
68:6d:c4:40:45:91:33:63:34:7e:ae:c7:33:c7:7b:ee:d2:fe:
3a:6f:eb:72:c0:a2:76:1d:8b:e4:44:2a:1c:2d:c8:33:ae:67:
03:ea:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:39:31 2025 by rpki-client