Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: P00VfsCScDIcwF1tGVkjUyxLFJS9+9bNyzvN9xM3GcE=
Subject key identifier: 65:23:68:3F:62:4B:DC:15:35:51:8A:96:20:B4:6E:BA:4A:87:C4:88
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0196A4D38E23FB4B89041277F502DEE7AF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 14BA
Signing time: Tue 06 May 2025 09:00:50 +0000
Manifest this update: Tue 06 May 2025 09:00:50 +0000
Manifest next update: Wed 07 May 2025 09:00:50 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: czeWjlGAFFEmZ1yP1xz2myFRP/UCbDUN6rSp2WnGHM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:8e:23:fb:4b:89:04:12:77:f5:02:de:e7:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: May 6 09:00:50 2025 GMT
Not After : May 7 09:00:50 2025 GMT
Subject: CN=6523683f624bdc1535518a9620b46eba4a87c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:b8:87:1a:79:f2:fc:69:58:dd:cb:bb:77:
66:78:a9:dc:14:56:04:bf:fc:a5:7d:a6:8b:30:dd:
3a:8a:ae:eb:74:86:1c:aa:a4:ee:cf:7c:58:54:a4:
b7:fa:6a:1c:01:28:bb:85:7e:11:b6:81:d3:68:0e:
0f:b6:b3:14:5a:44:a1:ae:a3:5b:12:45:b0:39:7a:
3a:73:b6:86:f5:e5:06:76:d3:f3:74:48:19:1c:ac:
91:17:1f:10:2d:01:e6:f5:4b:70:bc:20:64:ce:d4:
b5:ee:5a:0c:ca:9a:80:66:f1:38:91:6e:10:1f:31:
d8:54:41:e5:35:c8:7c:23:40:da:56:b8:32:45:8e:
06:63:b3:9a:8b:b2:35:d5:01:da:09:70:a2:44:e3:
03:9d:cb:cb:61:4b:bb:c9:60:6d:f9:13:6e:a4:38:
02:2d:6a:9a:ec:21:c7:26:fd:27:91:62:55:99:76:
08:7c:86:da:5d:27:94:7b:0e:90:b6:7d:ec:a0:be:
4e:44:09:58:d5:ad:e0:d3:1a:4a:52:23:18:0a:01:
ba:49:ca:f7:b1:93:b5:9b:bb:c1:ba:12:23:5d:2d:
fb:7d:e4:94:a2:e3:af:24:3b:26:eb:0e:33:01:5d:
df:44:b3:d0:2e:f3:b7:14:78:70:9b:aa:98:43:9c:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:23:68:3F:62:4B:DC:15:35:51:8A:96:20:B4:6E:BA:4A:87:C4:88
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:47:9b:fd:12:d4:22:cd:91:e0:71:2d:c7:86:31:46:a0:
bb:f2:90:be:81:2b:aa:be:74:4c:46:9d:f3:66:b9:85:9f:dc:
01:ec:8a:a6:39:92:e3:c1:9b:45:26:56:12:d8:c0:fa:17:dc:
0d:3a:1a:18:e4:da:63:b7:2d:25:0d:1c:e9:e5:6f:0e:ee:09:
12:71:b1:a3:0e:11:a4:15:62:b2:4c:f1:14:e7:c7:29:b0:d9:
d3:a8:b6:15:a9:1d:99:d9:51:a7:81:13:23:47:19:ad:59:99:
e4:ac:a6:00:2d:b1:24:7f:d8:f4:3e:7d:95:9a:75:13:c5:05:
e3:c0:79:e2:04:df:87:6c:c8:4c:db:96:a4:61:01:e1:a1:94:
48:4b:26:b7:09:3b:51:84:c2:0f:bc:45:7f:5b:cb:78:2f:45:
79:9b:02:18:b9:a5:c6:9e:b8:24:74:a3:7f:63:ee:1e:e7:89:
e8:a5:68:37:35:8e:df:22:24:c7:e8:49:85:c3:eb:a2:d9:48:
b0:1a:39:1b:72:b9:31:69:5c:5c:f6:a7:69:88:9f:54:aa:ed:
8c:88:30:f1:a8:5e:a4:69:53:5b:83:f6:65:de:e1:ca:4c:ac:
7d:30:44:10:84:cc:2d:50:09:b5:b4:6c:e1:91:ed:77:9e:0b:
25:a0:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:56:50 2025 by rpki-client