Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: bCpLX/aToEiqqAi4zPFc5A6EMHTcCN5JI0EzXvxLOKg=
Subject key identifier: 11:15:A1:87:B6:BF:9D:EE:1A:77:0B:56:E5:FB:D5:06:4B:72:6A:E9
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0196BDB715CE8926DF5ED63B7E115023583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1578
Signing time: Sun 11 May 2025 05:00:14 +0000
Manifest this update: Sun 11 May 2025 05:00:14 +0000
Manifest next update: Mon 12 May 2025 05:00:14 +0000
Files and hashes: 1: 3vEPBG1oI2P7D_OfeL-L-zO3dlY.roa (hash: tN3ytiGRqjapeYsvwHwSYsXkP2Hw2Lot2BTQS7jncsI=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: aDncOFN+Nhba9Vi4fNkdOFNEQFiPb+6DBQnnAIhCnqg=)
3: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
4: pdxIZLkn44c6LSjDy38wqVYD4hk.roa (hash: A+cdWFoJP8yj76UKSIBetM0GWfZ4/vk5vohLKBXTmGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:15:ce:89:26:df:5e:d6:3b:7e:11:50:23:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: May 11 05:00:14 2025 GMT
Not After : May 12 05:00:14 2025 GMT
Subject: CN=1115a187b6bf9dee1a770b56e5fbd5064b726ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:c0:f6:07:9a:73:55:8d:a3:c9:aa:64:56:
0f:34:72:31:00:b4:6a:f3:81:e4:87:88:ea:2c:72:
c9:d5:ac:0d:a3:bf:67:d1:4c:79:83:87:42:44:c6:
59:ad:00:33:6b:6b:bd:80:81:31:64:bb:1c:42:d0:
5c:30:99:b4:60:e1:98:e1:1d:56:45:1e:45:87:28:
3f:2a:8e:cf:ba:07:c4:55:de:31:1e:30:27:11:b6:
f2:2d:07:c6:b8:5e:fa:e6:d4:53:05:c5:3a:e2:f1:
70:0d:47:47:2a:93:c0:ce:3d:b6:2f:04:01:b4:0d:
0f:7c:7f:b1:3a:3f:b6:11:c5:4d:e7:33:75:ca:a4:
88:33:8c:91:3f:f8:31:23:02:f0:82:74:38:64:e0:
42:85:06:8f:4d:9f:b3:1f:99:86:d1:02:01:bb:08:
f0:db:87:00:cf:4e:87:77:ba:97:45:cf:ad:70:6a:
5d:79:c6:47:ac:a2:cb:6f:d8:ef:7d:2b:88:8c:a5:
b2:92:10:cd:4f:08:0d:81:b1:c5:b1:46:29:5f:16:
49:10:f1:29:a3:11:f1:77:3a:ad:e7:8d:7e:a7:9f:
0f:20:ae:30:ab:17:1b:67:36:64:7e:a6:9e:31:3c:
87:9c:02:45:9e:33:61:1d:99:ee:60:10:55:a8:36:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:A1:87:B6:BF:9D:EE:1A:77:0B:56:E5:FB:D5:06:4B:72:6A:E9
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:58:ac:e7:19:09:ee:61:6a:e5:14:a6:04:3a:52:ae:75:7d:
f1:8c:87:f9:9d:5a:aa:cb:22:2d:0a:9c:a2:4e:54:53:84:76:
a4:94:ed:92:d3:6f:6d:72:ad:3f:66:c3:79:9b:fb:02:e7:2c:
cc:33:ef:1e:75:d9:9f:72:b2:9b:6f:3e:bd:69:3c:d2:64:1d:
76:83:11:11:59:da:12:61:b1:16:d9:e2:82:e7:97:41:fd:38:
c7:c8:3d:f4:62:8c:7d:3b:ea:04:1c:db:e5:20:93:81:f7:37:
c2:e4:d7:29:3c:3f:d5:d0:7b:95:2b:b8:e8:96:d0:c5:ab:1a:
6f:2d:2f:5c:b0:13:4a:3c:2c:cf:c4:9f:9c:b4:71:a5:7b:3c:
87:a0:2a:9f:ca:cc:11:ef:71:58:b3:79:8c:97:a8:8c:a8:d1:
31:66:51:7f:43:de:e6:f7:e2:3f:b9:a8:44:75:d4:92:f8:22:
2d:4e:e7:d7:6f:5b:13:8c:ea:7c:d6:c6:32:17:55:c3:f9:f2:
a0:61:cc:c2:25:08:6f:3a:b7:a2:a2:21:3a:e4:62:5d:5a:08:
68:6c:30:83:91:0e:01:cd:ce:59:a7:2d:21:cc:b0:5e:a8:8f:
c1:86:b7:44:63:3f:8b:62:3c:dd:9f:0c:c5:8a:df:c3:f5:0b:
97:fb:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:32:05 2025 by rpki-client