Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: hyfUkJsoXpv8uUvDDegabtlX5rJZLeSCWkfe2bwI2FY=
Subject key identifier: A3:0D:BF:A3:47:40:77:73:3B:E4:A0:E4:C8:29:47:B6:E8:7D:CE:60
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 0196BE25721E01B2246758F12718ED8BBFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 07:00:46 +0000
Manifest this update: Sun 11 May 2025 07:00:46 +0000
Manifest next update: Mon 12 May 2025 07:00:46 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: TNN4h4e6Z7aI1wz2i12hSQtOo0WJrSAwSj5DmwcbjhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:72:1e:01:b2:24:67:58:f1:27:18:ed:8b:bf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: May 11 07:00:46 2025 GMT
Not After : May 12 07:00:46 2025 GMT
Subject: CN=a30dbfa3474077733be4a0e4c82947b6e87dce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:9e:65:b7:6d:b0:b5:06:fc:92:50:b7:3b:
88:7e:5e:88:c6:9f:d7:0d:d8:a9:75:b6:8c:4b:48:
26:05:81:de:b1:19:82:31:99:3c:de:1a:9a:55:f3:
41:6b:43:db:65:87:d8:30:ab:27:10:dd:d8:52:95:
ae:36:5d:b9:d4:b7:80:1a:40:13:91:65:ee:65:26:
1c:8b:df:c3:83:10:31:ca:57:ca:5b:f2:48:c8:a1:
aa:fc:df:1e:25:89:6e:35:27:19:56:c4:fa:7f:1a:
83:e7:cf:d8:15:3d:c5:77:a3:c5:09:96:8f:59:fb:
0a:e7:08:28:55:40:59:17:58:af:c8:20:7e:ef:7c:
a1:36:ed:1a:72:ea:38:74:3b:36:2b:39:50:61:13:
27:f7:16:1c:9b:25:aa:a4:66:97:11:6e:d6:7e:2c:
8e:31:d0:e8:45:00:20:af:3d:15:db:6f:e2:21:55:
1b:42:28:97:de:0c:e3:fe:3d:ec:36:b5:f1:d0:8b:
b4:6d:f0:11:34:a2:36:3e:6e:a6:44:21:63:be:d2:
ca:b5:7f:6a:68:2c:87:68:f1:10:a4:36:65:3c:f1:
fb:d6:c6:53:df:34:3a:61:72:fd:1f:14:f2:28:2f:
08:02:78:bc:4a:86:8e:2c:2e:9d:fa:f0:58:49:86:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:BF:A3:47:40:77:73:3B:E4:A0:E4:C8:29:47:B6:E8:7D:CE:60
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c7:f4:d4:32:59:8d:9b:b0:eb:1d:14:bc:35:93:6e:5d:12:
29:a1:47:72:ad:05:e4:1d:ce:b2:4a:30:1b:b8:54:bc:0e:83:
10:75:d4:07:83:87:7f:d6:36:f5:51:47:d6:06:55:05:69:0c:
72:58:2b:bc:09:32:7c:3e:fb:d1:44:82:d9:16:14:4d:41:5f:
98:19:e1:80:bf:70:11:ee:8b:c0:07:7d:59:0e:13:e3:dd:f9:
6b:d4:f7:67:03:cf:a9:cf:3b:c2:a4:31:43:67:46:d0:cb:3b:
2f:4a:b4:82:ea:91:20:fe:e7:fe:e2:8f:bd:35:e5:ba:e0:44:
2c:f6:bd:dc:34:0d:1a:e4:ab:ca:4a:94:56:54:96:e3:5c:b2:
01:6f:a9:33:da:1e:1b:b3:f9:95:4c:09:a5:b2:bb:cf:64:ca:
6a:37:7c:c7:f2:e4:bc:93:99:f2:2a:39:11:98:56:d1:de:da:
8c:e7:a6:56:10:78:72:47:b6:49:55:34:e1:24:78:3a:f2:5f:
6c:be:60:4c:29:c7:8b:b8:4c:6f:75:3d:f0:4f:c1:c0:c6:0e:
3d:6d:c4:b1:9b:47:1e:a8:52:cf:25:28:33:ad:24:e8:8c:84:
bd:9c:b8:2a:e4:f6:00:24:85:10:fd:1b:0a:4f:86:cb:d8:34:
ff:f9:4c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:27:44 2025 by rpki-client