Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: 5gGpg2epJHIyYSNYrEiG70gIoMvSxP7K15WRbS09Vlc=
Subject key identifier: 7E:47:43:86:A8:86:90:A9:29:20:E3:D1:D6:B9:49:64:31:76:49:CE
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 0196CF86BA9FE0F8BB0567126C66820B883A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 16:00:35 +0000
Manifest this update: Wed 14 May 2025 16:00:35 +0000
Manifest next update: Thu 15 May 2025 16:00:35 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: UM+hGRvMnaaPG5PLa+UFoczjalzAESg468FMtMl1gzY=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:ba:9f:e0:f8:bb:05:67:12:6c:66:82:0b:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: May 14 16:00:35 2025 GMT
Not After : May 15 16:00:35 2025 GMT
Subject: CN=7e474386a88690a92920e3d1d6b94964317649ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:f2:f3:ac:73:8f:a0:e9:42:05:d6:7b:d3:
9e:a6:17:db:14:c4:ba:89:22:ac:3b:cd:f4:8d:f0:
c4:f5:4c:c8:dd:e3:eb:a5:d2:55:af:39:68:6c:6d:
c8:e4:50:be:5d:5d:cd:cc:ef:a5:f6:d5:8b:fb:66:
d4:7e:bf:ed:60:ee:8c:7b:da:00:db:93:df:09:fd:
c6:3b:31:16:7f:a4:60:60:ea:b6:11:cf:b1:33:48:
b8:a6:17:12:83:55:87:a6:a4:2c:5a:75:33:d5:b0:
fc:48:25:29:91:96:b8:80:d0:2b:ba:30:1b:1e:a6:
91:af:65:e7:85:62:4a:ff:79:4a:88:13:ea:b3:b7:
4e:d8:9d:b4:85:b2:d5:82:76:21:90:ad:42:4d:76:
1d:62:26:e1:88:97:d8:51:f2:c4:35:21:ed:0a:21:
e4:d6:60:76:75:23:23:97:b8:1e:72:be:93:f6:cd:
4c:51:ed:d6:17:34:cd:66:b6:cf:0c:3c:4f:8c:68:
af:60:33:55:f6:25:1a:d3:6c:e1:71:5f:9d:37:12:
20:9b:1c:60:28:ad:58:50:0d:bd:42:81:12:11:36:
5d:bc:0e:a5:44:9b:3f:a2:2d:c9:88:30:2c:03:43:
3c:4c:64:bf:96:6c:c1:72:54:7f:83:1e:02:24:7d:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:43:86:A8:86:90:A9:29:20:E3:D1:D6:B9:49:64:31:76:49:CE
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:10:5b:3a:00:29:55:69:ac:e1:77:4f:9c:c6:4c:4b:9d:
0f:2f:ed:84:0a:21:4b:65:13:25:9a:ba:ce:09:71:8d:69:95:
6c:8c:62:c2:bc:df:22:ac:7e:ef:18:0e:86:92:3b:64:33:ac:
55:60:c0:0f:ff:58:21:4a:3a:1d:f8:b4:04:5c:7c:e3:58:1c:
87:01:44:b0:7a:87:17:19:34:b5:f2:71:de:0a:69:03:d9:05:
89:48:da:84:b2:e9:46:5c:60:f7:e1:06:57:85:0e:35:44:15:
a5:57:27:21:94:47:fc:ca:21:3f:61:64:6c:1c:f8:ea:85:52:
f4:8d:34:bb:3e:8b:07:70:57:91:e3:7a:d6:80:e4:36:5b:a1:
55:09:33:20:83:09:6b:25:30:89:d7:ee:11:44:83:5c:7a:72:
4c:66:aa:f5:eb:89:e6:77:76:38:b7:5b:bc:d5:a6:87:e9:b3:
94:e7:21:52:2c:42:0b:c6:bc:82:f7:b3:19:f3:c3:86:d9:e2:
5b:d7:5b:e7:ac:83:69:bf:9d:4c:0f:fa:79:59:d7:e4:b3:e0:
a6:06:14:b9:bd:0e:28:f7:e5:4c:1c:05:ae:b3:7b:d5:ad:a7:
2f:4b:4f:b7:77:91:c4:63:d7:03:f3:35:63:71:f6:0c:7c:cb:
10:6b:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:56:22 2025 by rpki-client