Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 38qWC95HhVy9djMTnMYrYCbLA3YqaoHjK6O2tJ2Dxvk=
Subject key identifier: 62:20:56:42:BF:DD:B1:9D:2B:FD:0B:67:52:DB:17:1A:50:4F:86:57
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 0196C3146124FA6F53CF1CCB4CE3E925C6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0B9E
Signing time: Mon 12 May 2025 06:00:14 +0000
Manifest this update: Mon 12 May 2025 06:00:14 +0000
Manifest next update: Tue 13 May 2025 06:00:14 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: pPClXMp/aTMrddBqlzCTh39jrOK2p7rVgJdQCXTiOPU=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:61:24:fa:6f:53:cf:1c:cb:4c:e3:e9:25:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: May 12 06:00:14 2025 GMT
Not After : May 13 06:00:14 2025 GMT
Subject: CN=62205642bfddb19d2bfd0b6752db171a504f8657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:96:40:43:06:77:63:3d:2f:68:1b:3c:f6:96:
6a:80:2c:d4:d3:54:dd:3c:73:2c:6c:ea:69:9a:e4:
b4:ec:54:85:b4:36:52:67:6e:fa:48:ee:c4:7d:86:
9c:aa:f1:a4:3a:9f:38:f4:17:79:7b:d9:92:d5:51:
af:02:70:45:be:33:b6:31:9f:11:f0:e3:f6:bd:2b:
05:61:09:22:53:bd:a7:a8:6e:59:7f:76:af:2a:7a:
01:00:ba:00:ff:9c:f1:02:90:ef:20:70:ad:19:d2:
1f:13:07:ea:b4:87:2b:6f:13:bc:16:7e:0b:7b:dc:
3e:ac:f5:ea:cb:af:22:dc:2d:e3:92:b6:12:5c:85:
b7:02:e4:5c:d8:8a:c2:bc:a0:45:16:7b:14:43:41:
76:c1:6b:50:19:3d:15:bd:56:6a:37:53:db:64:f4:
a6:d3:59:04:fc:da:25:85:5d:35:cd:36:c4:ec:7a:
09:92:c3:82:c6:97:53:5c:02:9d:6b:52:84:8b:2f:
74:e7:8f:c2:fa:fb:fc:6c:c3:5b:16:e8:7f:a9:84:
d1:c5:b2:30:37:85:40:6c:e7:cc:c2:03:3b:af:98:
de:0e:12:1a:af:ae:87:79:48:a0:54:00:c3:4b:de:
18:d7:44:57:d9:2a:2a:2e:b0:a9:22:b3:1d:7d:a1:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:56:42:BF:DD:B1:9D:2B:FD:0B:67:52:DB:17:1A:50:4F:86:57
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:88:81:23:77:02:ba:cd:d3:ec:80:ab:18:06:4a:c4:eb:a1:
cd:d8:63:87:f7:94:bb:5c:92:eb:ea:6f:6b:ad:66:73:b4:83:
42:bf:22:81:1a:01:4c:0d:6b:88:fd:cc:69:97:8d:7d:ef:4b:
0b:7b:cb:2f:21:89:a1:58:85:36:96:95:91:47:31:11:52:50:
f4:a3:fb:ae:16:39:31:2e:ae:c9:65:95:9f:4a:c9:4a:43:77:
cf:87:77:f2:56:9b:09:18:da:be:9c:d1:1c:b6:86:c5:0b:9b:
8f:6c:18:22:f4:0f:7a:26:49:42:b4:a2:8c:da:dc:c2:61:fe:
a4:5c:86:1f:29:de:42:20:fc:76:fc:de:2e:c9:65:c6:db:f7:
27:a4:3a:0b:bd:ce:f7:65:96:ce:b6:c6:5c:99:57:d5:0f:69:
10:01:8e:17:7e:70:85:0c:90:71:36:b4:7b:aa:ff:0b:b5:f8:
04:37:f9:f8:da:87:cf:2f:1f:ff:74:01:b0:aa:1f:57:c8:68:
5f:3d:4f:27:22:4f:5d:5e:27:48:2c:a8:5d:c0:e0:29:e4:4b:
33:12:4a:bf:f0:5f:2e:7b:0e:81:ef:a8:d5:ed:fe:e3:7c:ee:
0d:59:ef:54:ec:73:d3:03:d3:b8:75:20:ee:32:95:a9:80:fd:
8b:4b:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:28 2025 by rpki-client