Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
File: cCw58YaCB38HK2IRb9TxaQh0r5Y.mft (raw, json)
Hash identifier: RrZJbr8PbI4+eFwS5/4Beh18kA5tACZePJsgkA4xUU4=
Subject key identifier: 13:CB:02:F4:18:78:07:03:D3:2E:3B:92:5B:08:53:DE:04:DB:99:5E
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Certificate issuer: /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial: 0196BAB637EDDC177701719E841AC7B5EBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
Manifest number: 0874
Signing time: Sat 10 May 2025 15:00:26 +0000
Manifest this update: Sat 10 May 2025 15:00:26 +0000
Manifest next update: Sun 11 May 2025 15:00:26 +0000
Files and hashes: 1: DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa (hash: 7LR5rGZdheek5FSN9VgvzhBSKbDgdVslo+r8yKVN2G0=)
2: cCw58YaCB38HK2IRb9TxaQh0r5Y.crl (hash: IUFEhrZJ/0GAQ+AXYDG8V7yr5BBITBpFWxZUhXgqG/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:37:ed:dc:17:77:01:71:9e:84:1a:c7:b5:eb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
Validity
Not Before: May 10 15:00:26 2025 GMT
Not After : May 11 15:00:26 2025 GMT
Subject: CN=13cb02f418780703d32e3b925b0853de04db995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:82:ae:6d:ff:91:2a:eb:42:b2:29:c2:ea:
b6:21:58:bc:36:c7:e4:c9:94:83:eb:16:6c:f7:0d:
8d:67:f9:f9:d8:18:f5:3d:64:91:a1:21:12:98:ed:
62:4a:8d:39:c5:23:57:94:a2:d7:8b:07:1a:9e:54:
a9:44:b3:48:56:47:cf:15:e3:2a:b5:83:84:18:64:
9b:ad:af:71:59:75:46:0b:a6:fc:9a:5b:44:5e:e5:
57:45:ab:dc:d9:ef:7b:8a:ed:af:5a:fd:94:4f:c6:
ae:7b:3a:e1:73:d7:3c:c5:ab:1b:ff:8a:9a:c6:59:
fc:5b:d3:46:be:66:92:ef:52:bb:6c:bb:33:7c:85:
4b:8a:04:35:6f:c0:8a:c3:f3:af:7e:f6:1d:1a:85:
d8:a1:7a:e7:68:2a:23:f2:b4:72:f3:9d:09:f2:77:
5c:28:a8:26:11:b2:78:f1:55:48:c6:d2:10:78:6d:
aa:80:55:ba:62:80:dc:ec:4d:0a:4c:29:b4:17:86:
41:41:16:fd:02:8e:27:e0:c6:b1:d1:14:fd:a2:70:
4c:95:08:fb:6b:bd:98:62:36:24:a0:bb:0f:c4:3a:
ee:89:72:8c:cb:3f:c9:17:df:49:c7:ef:36:63:3e:
10:d0:b6:8b:a7:8e:71:2c:f4:1d:fe:31:99:a3:9f:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:02:F4:18:78:07:03:D3:2E:3B:92:5B:08:53:DE:04:DB:99:5E
X509v3 Authority Key Identifier:
keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:f2:36:01:c4:d6:47:88:20:c7:1a:44:76:60:dc:6d:4b:
00:d0:da:4f:f6:4e:09:eb:37:f4:91:45:1b:2e:a1:64:0f:af:
64:33:b1:f7:bc:a7:38:a7:0d:db:0b:c8:d5:83:df:09:9c:2f:
b1:6d:fe:5d:ce:6d:09:0a:bd:81:88:a4:64:f7:3c:59:0c:c4:
7d:be:88:a6:91:03:11:0b:68:00:97:96:99:c4:ad:20:49:7c:
55:f1:40:fd:ad:57:85:51:73:49:f9:ea:26:81:ba:9b:63:de:
94:15:80:a4:85:b2:63:47:ba:0d:3c:f0:73:7a:61:d2:0b:b1:
b6:ad:32:a3:4a:53:7d:f1:8e:86:a2:87:a9:b7:f8:a9:75:62:
e4:97:2b:58:96:77:7f:47:7a:c3:db:32:5e:30:a1:3e:75:8e:
06:d3:2d:84:1b:a8:4d:c0:cd:d9:a8:5a:3c:82:1b:0c:3b:f5:
4d:78:72:64:b6:61:7b:b3:fc:66:d5:6d:8e:99:ee:ef:9a:e3:
f3:56:62:50:ca:65:81:64:8d:d2:e2:a0:85:a9:0a:9c:0f:ee:
87:35:64:29:dc:7c:91:c3:9d:ba:0b:d8:b0:fd:5a:a1:e5:7a:
3e:ab:8e:4c:ca:f1:6e:ff:c2:77:95:aa:b7:7f:72:f7:79:98:
46:2d:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:41:22 2025 by rpki-client