Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: MARrJ2LvpFzN+yNxmZ1byxkFRe3hmEhYVwJ78Gr1wo0=
Subject key identifier: A3:17:50:4A:75:3A:E4:3E:B8:FD:D1:41:38:BF:66:EF:3E:EB:98:01
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 0196C0EF40590B680CE1772B9C5392E94619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 20:00:26 +0000
Manifest this update: Sun 11 May 2025 20:00:26 +0000
Manifest next update: Mon 12 May 2025 20:00:26 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: W8eJdKDpaM9ynl76e7HwDVlYbE3sKAuiWBHWejl0ldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:40:59:0b:68:0c:e1:77:2b:9c:53:92:e9:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: May 11 20:00:26 2025 GMT
Not After : May 12 20:00:26 2025 GMT
Subject: CN=a317504a753ae43eb8fdd14138bf66ef3eeb9801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:1a:b0:f1:a0:5d:2f:cf:07:24:99:ed:d8:
29:1a:6f:cd:b5:a4:0e:f7:d9:5c:1d:f2:cd:06:a5:
8c:05:65:66:15:00:13:9b:84:7b:74:02:e3:cd:fb:
13:f4:44:c6:af:b4:e4:70:ef:4a:8d:e3:98:ec:4e:
65:02:f2:33:f6:86:29:44:30:fd:93:20:56:c5:ee:
99:df:01:d6:4a:6e:7e:88:1c:53:d8:5e:ea:a1:18:
2a:49:21:f3:b2:18:48:39:e8:80:1f:23:6c:e6:bc:
a4:88:c5:9e:26:4c:9e:0f:4a:72:1f:d7:c1:91:3b:
74:bd:db:96:e0:78:a0:4c:fe:20:7c:19:48:7c:8a:
04:84:ca:6a:74:af:68:e4:3c:d4:a2:db:45:09:24:
fa:69:9b:55:5f:8e:b8:e0:c4:a6:56:41:c9:80:2a:
5c:ba:f6:65:32:12:19:82:f0:e9:05:13:65:2f:1c:
81:39:c5:b4:27:40:1b:c6:0c:5c:9f:f2:ca:e4:e5:
e9:57:1f:4d:19:1f:b5:6f:ed:5e:19:ab:bb:b6:58:
93:bf:0a:f5:0d:9b:55:f2:ad:b5:69:fb:4b:03:ba:
b0:f9:fc:03:7d:59:3a:ed:01:d6:82:0d:5c:d7:47:
8b:93:b4:3a:9f:52:e7:1d:ce:92:ad:89:cf:7d:d1:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:50:4A:75:3A:E4:3E:B8:FD:D1:41:38:BF:66:EF:3E:EB:98:01
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:59:c0:95:e7:5d:db:d6:9d:a1:cf:76:51:15:23:35:c6:7f:
83:31:f0:5a:80:3f:70:24:12:0f:91:00:3e:d9:e1:92:fa:f8:
e5:c7:bb:dd:e2:40:fc:cc:16:33:19:eb:90:c6:de:d9:cb:29:
0d:19:f4:20:66:d6:3d:51:b2:b1:8a:9a:44:10:f5:68:fb:6d:
66:58:b8:8a:5d:5e:0d:9d:b2:56:5b:75:ce:17:9c:4b:19:a1:
cd:72:2c:f9:4b:db:a6:66:cc:a4:44:00:a1:49:dd:3c:0b:c5:
cf:29:ca:9c:0a:b2:8f:eb:34:ec:22:e8:a0:c7:45:93:d5:62:
ac:f5:5e:55:d7:7d:7b:71:0c:b5:ea:92:61:46:d8:b5:bf:fb:
80:a8:68:83:03:2e:be:f7:bc:ca:b4:56:ef:43:66:86:7f:20:
85:9f:08:3a:d1:52:f4:b6:85:a9:c9:63:c3:1c:c1:73:60:a2:
33:05:51:76:78:99:08:e9:34:ca:4e:ce:4d:d6:f8:50:13:0f:
c7:96:f1:e9:c1:3b:59:da:9d:f2:22:76:bb:a2:34:0f:14:77:
21:cc:63:14:cc:05:2a:f2:9a:0a:27:59:04:ed:d5:0f:f7:10:
1b:b2:32:aa:ec:f3:3a:35:f7:e6:ae:aa:6e:5b:a5:64:c2:f5:
be:86:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:23:55 2025 by rpki-client