Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: TP2IQUvNwmynbaX6fBNaHQzmxGvafClbpi8oETkehIE=
Subject key identifier: 63:52:2C:32:07:DC:C1:0A:8C:76:52:4F:CB:2A:8E:C4:9C:DE:09:29
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 0196BB921B4DF10997372C5428F12ACDBFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0947
Signing time: Sat 10 May 2025 19:00:36 +0000
Manifest this update: Sat 10 May 2025 19:00:36 +0000
Manifest next update: Sun 11 May 2025 19:00:36 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: AN9rPmrgZmF702GxdlWAhbzdqywB2k56dSL0yP024PQ=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:1b:4d:f1:09:97:37:2c:54:28:f1:2a:cd:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: May 10 19:00:36 2025 GMT
Not After : May 11 19:00:36 2025 GMT
Subject: CN=63522c3207dcc10a8c76524fcb2a8ec49cde0929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:16:a8:40:c1:46:44:d3:8d:f2:50:de:4d:
93:56:8a:b8:55:8f:29:82:a7:52:55:d0:2a:f0:59:
c3:74:9a:e1:90:e6:6b:51:b1:8c:12:58:ea:57:6d:
c3:6d:7d:49:12:83:43:cf:4a:a8:1a:16:2c:56:4c:
4c:da:19:22:85:32:b4:2a:c5:41:ce:12:fd:53:a0:
3c:42:59:ae:83:38:de:52:a5:ef:21:b5:6a:5b:40:
5a:a7:57:fd:d9:37:4e:42:22:05:5e:69:f7:53:15:
43:da:0f:f4:a4:b1:2b:57:f9:1b:f4:4e:a9:19:cb:
74:a5:b1:5b:72:98:0c:5d:85:1b:21:31:45:37:62:
75:33:14:42:00:e2:bc:c1:c6:e9:64:1e:a5:a7:d4:
9e:cd:18:f9:c5:37:98:d2:61:14:b6:b0:ff:c0:5b:
b7:99:2d:0a:3a:cf:44:08:3c:98:7f:ed:1c:1c:f7:
35:42:d6:1a:c6:eb:30:de:b4:0a:74:2a:bf:6b:fe:
7a:b1:b7:c3:e9:85:5a:7d:8d:48:b4:71:46:19:ef:
85:cd:fb:0e:31:14:6f:c1:ab:34:c9:44:9e:8b:19:
4d:e0:18:22:57:1a:aa:1d:44:86:56:64:f0:30:e8:
bf:19:13:16:bf:d3:c2:a4:f8:8d:3d:e8:47:ce:6b:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:2C:32:07:DC:C1:0A:8C:76:52:4F:CB:2A:8E:C4:9C:DE:09:29
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:b1:99:dc:60:a3:f5:e8:c5:0a:94:42:f4:45:fa:de:4a:
5d:79:c9:d9:20:d0:4e:e4:50:d5:cb:db:2b:62:cc:90:b8:c7:
e4:8a:b5:f6:97:9e:72:3e:8b:56:84:80:f5:81:ae:05:d1:fa:
15:75:8a:d8:d8:d7:0f:0e:4a:40:57:64:89:d0:80:49:41:a7:
3a:f8:74:47:03:08:33:3a:55:a9:00:8d:bf:e3:0e:03:19:d6:
9c:eb:56:fb:81:46:5c:91:82:19:d5:78:48:6e:bd:40:a8:7b:
c4:7f:2d:ac:be:81:ee:1b:1d:16:83:37:6e:63:c7:64:64:57:
c1:5e:70:2d:d9:26:f7:da:12:83:7e:d5:9f:b0:46:a9:da:5c:
68:b4:33:43:0c:27:ba:11:dd:64:b7:ee:a4:43:ed:dc:62:0e:
b4:3b:ca:16:b5:82:39:4e:9c:06:ba:4d:88:38:b4:b8:6c:cb:
36:88:e7:c2:89:da:77:1f:83:9b:d7:39:d1:8f:5d:a7:9b:6f:
f2:d9:69:44:3a:12:ab:5c:f9:42:e5:1b:4c:bb:af:64:4b:c6:
da:b6:55:bd:15:3e:12:88:f1:23:54:46:3c:42:2c:f6:18:82:
8b:81:2f:ae:8c:df:3c:f2:5c:f6:11:73:55:25:dc:90:48:8a:
49:7a:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:05:42 2025 by rpki-client