Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: hrmkErPllnUGLbjg8yQZHYX2OEKaJM4oJc+TyNcpLUY=
Subject key identifier: F2:80:7F:A5:94:BE:F8:A2:FC:12:4E:7E:C7:16:71:05:36:C7:F3:A0
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 0196D8F7CD1DADA23B2A5D5A6DF7B830FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0A86
Signing time: Fri 16 May 2025 12:00:40 +0000
Manifest this update: Fri 16 May 2025 12:00:40 +0000
Manifest next update: Sat 17 May 2025 12:00:40 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: HEpXXFJeupKYkuPvxvz9Eoj5pnE5WVe5gtIbyHq2gOY=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f7:cd:1d:ad:a2:3b:2a:5d:5a:6d:f7:b8:30:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: May 16 12:00:40 2025 GMT
Not After : May 17 12:00:40 2025 GMT
Subject: CN=f2807fa594bef8a2fc124e7ec716710536c7f3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:70:92:4e:06:db:f5:a6:44:84:d1:af:11:
3f:ef:89:7c:20:87:0b:f9:e6:28:a2:39:24:7d:0f:
b8:5d:bb:48:79:d9:db:be:53:ab:39:03:db:ef:b2:
bf:73:13:41:5f:22:30:48:ec:1c:24:a9:fe:d2:09:
ec:98:a2:93:e3:c4:87:90:59:07:4e:0b:43:68:4a:
de:5f:c5:77:ff:2a:73:dd:cb:63:ec:08:36:86:23:
cb:aa:bd:26:38:1e:6f:bd:1a:b9:54:77:41:ad:c2:
67:53:10:44:22:09:17:7d:2a:db:2e:1e:49:8b:81:
f3:82:73:fb:5f:5d:ff:84:71:1d:fc:80:84:93:f3:
ae:a2:52:a4:fd:4b:32:dc:8c:c2:eb:1a:4c:5a:89:
30:17:0b:f1:b1:f0:4e:2f:4b:08:32:47:d4:34:2c:
d1:ce:75:7c:96:68:09:98:8f:60:90:bd:e1:9c:86:
c8:1c:6a:62:12:d4:52:e8:c7:1a:22:fe:9d:5c:97:
1f:93:f0:ae:2f:c4:7b:93:89:73:5e:e9:16:e9:32:
da:ec:0f:6a:ed:74:88:8a:4a:37:e9:39:9a:9f:c2:
46:20:7e:91:2c:4d:c0:88:01:7f:95:ca:5f:7c:b8:
89:81:0f:8c:30:d4:b3:2c:fc:83:fa:32:4b:32:6a:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:7F:A5:94:BE:F8:A2:FC:12:4E:7E:C7:16:71:05:36:C7:F3:A0
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:9a:f2:d0:6b:10:cc:27:fe:55:3d:da:79:67:49:d1:1e:
18:ea:a0:44:26:13:35:c7:90:cc:b2:98:75:24:4c:48:6b:77:
9d:73:dc:9f:cc:47:d1:dc:bf:69:ef:75:89:16:fd:51:48:f5:
0f:69:31:ea:36:b7:5d:41:c0:db:59:6f:85:0a:22:f5:3c:40:
b4:10:64:ea:ac:62:13:09:1c:da:b3:a0:7f:9b:56:ef:ed:f7:
0d:d5:8e:f8:93:79:cb:78:9c:f0:fd:fe:35:ea:76:b5:30:08:
44:19:75:88:41:2f:e0:5f:d9:75:c8:ab:c9:98:8a:00:50:a4:
d5:55:43:12:05:5a:27:6c:41:79:f9:c5:58:94:c4:d4:5a:3a:
f4:f7:b6:d5:6c:e6:a2:78:0f:41:1d:c7:24:b6:3f:b6:aa:3c:
3d:de:25:39:43:65:5b:7d:2d:5f:89:78:18:a1:f3:01:59:d8:
93:b2:5c:03:5c:c4:46:1b:5d:36:83:0e:e7:d7:66:5d:b8:b1:
ef:d9:44:02:4e:13:23:f5:9c:d2:93:6b:7a:b3:bc:50:f9:4a:
94:44:e8:3e:78:a2:1e:ca:13:47:6d:d4:fd:e4:62:1d:a3:25:
a2:e9:a9:4c:a5:bc:32:52:ad:9f:e4:72:8a:cd:33:ac:62:12:
52:f3:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:57:42 2025 by rpki-client