Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: 9o6+oNpQ3bG6SHOlgQUMSH9b0fDk24bmA1qG1TPPqns=
Subject key identifier: 31:B4:99:46:DA:58:0F:80:27:96:DB:88:AD:F6:E5:BF:2A:79:94:B8
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0196AEE96014CA4BA5BC50AEB5EDCEE26685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 08:00:52 +0000
Manifest this update: Thu 08 May 2025 08:00:52 +0000
Manifest next update: Fri 09 May 2025 08:00:52 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: n0uOIKjPc+mk6AW3xW0wJKBs5ITy2oXVZmKb6mXqEck=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:60:14:ca:4b:a5:bc:50:ae:b5:ed:ce:e2:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: May 8 08:00:52 2025 GMT
Not After : May 9 08:00:52 2025 GMT
Subject: CN=31b49946da580f802796db88adf6e5bf2a7994b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:ec:6e:d8:45:e5:9b:1d:99:33:7f:0a:03:
bc:d2:22:94:87:36:91:1b:ab:91:db:bd:31:16:25:
db:79:46:7b:1f:d1:6d:08:9b:62:8c:f0:5b:b0:69:
15:c2:a3:d0:09:f0:cf:fa:2f:f5:2d:5e:85:23:eb:
b1:38:5a:1a:a0:62:c9:3d:8e:5a:98:58:58:d9:d5:
bf:4d:cd:f5:7a:90:ce:b9:68:b1:46:84:16:8e:09:
80:39:a9:c6:08:f3:bf:5f:1e:9e:95:e2:1d:c3:e1:
9b:97:2f:43:0a:c7:85:9d:f9:df:0a:87:52:9d:4b:
2b:aa:92:0f:b4:cc:7e:91:2a:21:eb:e1:4a:fe:1c:
21:8f:69:1d:16:76:d4:10:70:59:d6:0b:07:f5:df:
62:c7:5d:45:d2:a1:84:4b:b9:81:e3:63:63:07:e9:
63:86:28:99:85:a2:ed:9e:2e:c2:cb:e3:7c:77:6e:
08:1c:d3:92:f3:4d:2b:8f:6f:84:41:07:4f:af:82:
4b:8f:ad:9d:39:f2:ed:6e:6e:40:58:63:9d:54:c6:
60:f5:08:dd:ee:ed:ed:0e:88:ee:bc:1f:b0:4a:47:
4b:c9:a3:16:da:a3:28:3c:8e:ee:6c:70:59:a1:b1:
99:c0:13:51:f4:6a:37:9a:4e:d6:33:4f:6f:d5:bc:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:99:46:DA:58:0F:80:27:96:DB:88:AD:F6:E5:BF:2A:79:94:B8
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:a1:5a:16:e0:df:04:19:0b:b1:e7:3f:a9:ae:85:c9:93:
3c:26:c9:40:73:19:bf:f1:9d:8a:ae:23:62:59:f8:a6:f5:83:
44:d2:cf:e1:7a:8d:5b:f2:34:5b:85:f7:55:ff:27:9d:c1:d8:
7c:d7:29:97:d1:f3:ef:a3:02:a6:f2:26:d9:84:2d:50:70:8a:
3b:23:bf:f2:8f:13:51:84:e2:f0:4d:c4:b9:a2:3f:ab:14:94:
98:48:55:c1:53:9a:77:ce:fa:63:ad:9a:d3:c1:3d:32:77:0b:
c7:d8:7d:73:24:35:54:83:2b:f4:6c:9d:9c:0b:4d:c1:2d:8a:
38:5a:14:a1:49:70:5c:0d:11:fa:e2:2e:fe:8c:b5:e1:27:1e:
e4:8b:2a:e2:f8:45:7d:da:83:68:6c:9f:42:46:f3:db:91:55:
e9:fa:ac:68:ba:d3:7a:4a:52:cd:70:c5:fc:27:8f:4d:46:66:
07:cd:c0:22:73:fa:12:e5:f4:b1:c6:29:af:1c:78:11:cc:ca:
fa:f6:fd:e2:b0:55:37:7d:54:67:af:0d:ee:a5:e5:6c:16:f2:
11:60:f1:72:16:13:5d:fe:27:05:81:a9:54:3d:0c:be:15:a5:
b4:70:77:90:f2:4c:97:51:ee:f6:8e:09:f8:0c:2e:1b:e5:cb:
33:50:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:57:54 2025 by rpki-client