Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: RNPT/2eTRq9ME5AIs8hNRkK7EoAgSBYsYg4Wgo5y+Sc=
Subject key identifier: 6D:E1:89:D0:B3:22:45:84:33:A1:64:CC:A7:8F:19:1A:CF:86:69:EC
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 0196DD7956D4D6E0D1D72F2611A4852D653A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 1506
Signing time: Sat 17 May 2025 09:00:38 +0000
Manifest this update: Sat 17 May 2025 09:00:38 +0000
Manifest next update: Sun 18 May 2025 09:00:38 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: LtPBQmKwy9lvKsV3CoPoVwLqyOBi0bRpb+WeFNemZmk=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:79:56:d4:d6:e0:d1:d7:2f:26:11:a4:85:2d:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: May 17 09:00:38 2025 GMT
Not After : May 18 09:00:38 2025 GMT
Subject: CN=6de189d0b322458433a164cca78f191acf8669ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:3f:12:a8:77:65:af:e5:62:84:d6:f4:a5:
9d:51:0e:3f:f3:fb:db:fd:f7:d3:23:43:27:f8:0b:
88:a1:03:51:96:0a:fb:b3:5b:d2:0c:a1:80:e1:82:
a2:5f:8f:64:96:b0:9d:45:a6:65:82:08:44:db:7d:
34:ea:2b:4c:82:df:c5:ef:75:1b:45:f2:ba:d0:9d:
49:d3:8b:bf:7c:f7:6d:77:a1:d1:5d:21:3e:c9:bc:
c3:be:d4:de:14:77:36:98:dd:0d:dd:10:1f:69:c0:
0e:99:3a:00:8f:65:71:3a:fb:b7:55:42:40:c1:9a:
7b:df:da:d3:ca:36:06:b3:d5:30:6f:4c:68:2f:51:
46:88:45:69:0c:42:d5:38:ac:59:57:3e:80:b2:f5:
f0:ca:56:41:18:08:64:23:ee:fd:ed:ce:dc:ec:56:
f5:e9:c1:2c:9d:b2:d4:d4:ef:ae:26:21:2f:3c:8d:
e3:67:39:9d:bb:53:dd:f7:d0:9d:ba:ec:7e:ee:0f:
43:81:a4:6b:1c:66:cd:de:9c:98:7f:7e:77:93:91:
0c:f9:d9:be:75:c7:99:cf:5b:b5:e0:44:a9:f4:b1:
5e:58:5a:07:8e:64:85:60:1d:50:68:24:0e:ec:c0:
ea:3f:4a:59:d2:f1:15:dd:2b:7f:cf:20:f9:45:9e:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:89:D0:B3:22:45:84:33:A1:64:CC:A7:8F:19:1A:CF:86:69:EC
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:d8:a5:4a:33:0a:d6:ba:d8:de:3d:16:78:53:1b:19:5d:
43:9e:60:83:bd:97:18:b2:0d:d9:e5:de:48:17:15:f8:98:ac:
74:da:c5:d7:a1:b4:61:fd:62:e7:e1:98:c8:7e:23:c1:cc:17:
7c:ef:6c:34:4b:c1:f3:8f:63:9f:6e:6a:4a:fd:28:eb:20:29:
db:a0:aa:58:3f:45:5e:a4:7c:0f:29:e3:bb:19:07:0f:6c:52:
7e:b8:52:7e:4b:f8:6d:23:2a:a1:4f:47:5d:79:ed:16:08:6a:
3c:e3:86:18:44:c9:62:06:3d:3f:14:5c:fe:00:f4:00:a1:29:
0b:0e:fa:bc:31:1d:7d:3f:37:19:51:1c:c4:5b:de:4d:ed:4d:
32:c5:48:4a:c4:3d:2b:b8:4d:74:69:d8:66:70:9b:6b:71:3b:
2d:40:2d:25:5d:c1:f1:28:ac:88:39:ca:02:68:6e:e1:79:4c:
23:73:0f:35:2d:ed:20:82:bf:3a:20:5b:b5:27:37:23:8a:8d:
88:66:46:89:b7:5c:d0:87:e0:32:42:f2:7c:b9:0a:8e:5a:72:
1e:e6:ea:91:31:cf:df:eb:5d:94:7a:cd:bd:23:e6:1d:7d:ff:
b1:95:d3:13:d7:8d:a6:ca:ee:36:f3:eb:4f:15:f6:24:fb:43:
ae:11:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:44:26 2025 by rpki-client