Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: 7lH7ZFNq3ioaeEdGLfa/anhq9GUnh41uT0dDTHgfVgk=
Subject key identifier: 04:A4:CF:E8:25:39:B5:A0:C5:02:2A:D8:D4:AB:8C:00:11:29:B7:52
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 0196C45E3F0D777B5316AFF9A33B7E725FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 12:00:32 +0000
Manifest this update: Mon 12 May 2025 12:00:32 +0000
Manifest next update: Tue 13 May 2025 12:00:32 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: /VA4XPqdDNpBujir7Oe5DOJYoRmJxG4HnYRXo8chbzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:3f:0d:77:7b:53:16:af:f9:a3:3b:7e:72:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: May 12 12:00:32 2025 GMT
Not After : May 13 12:00:32 2025 GMT
Subject: CN=04a4cfe82539b5a0c5022ad8d4ab8c001129b752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:2a:6a:86:d2:17:1e:bc:bd:8e:98:91:18:
a5:79:2d:aa:75:a7:40:7c:33:2d:a7:2c:fb:47:d9:
d6:7d:92:27:05:d4:52:ca:ca:0e:f6:70:6a:ce:54:
ed:d7:e4:61:e2:57:30:c2:a5:8a:78:d0:d7:52:a1:
d9:b8:b6:96:f0:04:d7:b9:b0:73:09:b9:58:7a:12:
b0:bc:6b:91:c3:f1:bc:49:a6:61:8e:4c:5a:ae:5d:
c3:42:7b:47:15:47:b3:0a:52:30:cd:b9:4f:cb:1c:
70:96:07:32:60:c9:a1:de:b4:fc:43:48:5b:80:73:
7f:11:4d:8d:cf:65:19:e9:ac:ea:81:42:fe:a8:69:
43:91:0d:a4:51:5b:44:4b:f8:39:39:94:91:38:5a:
d5:ce:82:a4:95:ac:2c:c4:6d:ee:38:13:11:b3:46:
34:a9:1a:90:e1:e5:36:03:34:aa:e4:54:bf:34:aa:
27:a8:b2:48:1b:c0:3e:f2:f6:27:65:a1:15:4e:20:
c6:ae:38:73:2b:df:65:2c:97:d4:da:00:7d:67:85:
53:33:7a:8e:9f:1d:a9:8a:48:e6:02:8b:9f:a4:0c:
c6:d3:78:c5:fe:07:86:16:e7:69:a4:ca:b6:43:83:
fc:a8:8f:2b:b0:73:67:6d:c1:11:31:20:6a:23:4d:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:CF:E8:25:39:B5:A0:C5:02:2A:D8:D4:AB:8C:00:11:29:B7:52
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:80:52:f5:9e:66:06:bc:f3:1c:be:b2:6c:39:b3:c4:b6:04:
b4:b5:58:00:b9:95:1d:12:96:27:91:59:de:15:58:e1:60:21:
fc:d2:91:ff:62:0a:b6:53:d3:4a:d7:19:26:e6:a1:35:98:28:
dd:da:6d:49:c8:1d:63:2c:71:16:fa:55:de:3a:d5:18:2e:1b:
d9:b5:24:39:ce:a1:ea:3a:c0:93:84:a7:c2:9f:b3:cb:4c:ee:
8e:81:dd:e4:8d:6a:4e:27:e8:bd:4d:47:64:60:28:7f:b2:3c:
64:7a:d6:dc:90:db:31:25:74:7f:cd:e0:25:97:87:9a:fa:91:
17:ca:a9:1b:c6:97:c4:07:0a:d3:e5:ca:e3:50:d6:4d:3d:bf:
69:e7:c0:64:c2:bf:cb:47:89:ef:cd:e6:f1:6e:72:71:cb:84:
01:85:46:66:88:54:fb:b0:8c:d9:54:b0:f8:16:30:8f:31:58:
fe:4b:8e:15:57:b5:ef:b2:c6:39:22:c7:af:d2:fa:56:34:71:
ef:52:92:53:bd:d6:33:ce:f7:51:69:2f:30:aa:96:4c:40:a7:
e3:6e:16:44:71:53:81:70:65:fa:78:67:96:b1:05:a9:58:ad:
86:af:4a:06:b7:30:9d:59:da:78:5b:d1:5b:ae:70:09:14:6c:
06:78:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:04:31 2025 by rpki-client