Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: Rd9CYBWK6ke8omGaA1R7v3Gd3c17qfiijF5qFaG9mF4=
Subject key identifier: B5:FD:0C:B9:7E:8F:77:B1:7A:96:15:2E:23:EC:09:E1:62:AB:F4:EB
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 0196C8721ED63C9B043964C3CCEF5B70E27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 14CA
Signing time: Tue 13 May 2025 07:00:44 +0000
Manifest this update: Tue 13 May 2025 07:00:44 +0000
Manifest next update: Wed 14 May 2025 07:00:44 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: DAs6BfMMs44BRIwJ4hp4mBg0YurNyXzXDhpHzZjLnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:1e:d6:3c:9b:04:39:64:c3:cc:ef:5b:70:e2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: May 13 07:00:44 2025 GMT
Not After : May 14 07:00:44 2025 GMT
Subject: CN=b5fd0cb97e8f77b17a96152e23ec09e162abf4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:3c:9a:a2:a7:ed:6e:5c:77:94:eb:ac:da:
38:01:fd:05:d3:8b:de:7b:f6:d9:7b:8d:27:78:54:
d9:08:19:5c:7d:a8:27:a3:28:1e:77:ab:24:60:61:
48:a9:18:26:45:ab:ab:38:2a:e4:83:28:14:cf:d9:
6d:14:bf:9e:22:f9:ea:2a:11:33:1f:ed:f9:63:eb:
c0:1e:f6:4d:7d:a8:76:c3:e5:94:87:b3:6f:c4:28:
0c:40:a3:37:4d:0d:71:9b:d4:e2:28:39:1f:3c:b2:
ba:37:ba:be:0f:f1:34:2c:3b:13:b8:0f:78:b9:e1:
cc:ef:38:ac:1a:e0:51:2e:f6:9d:c4:d5:cc:70:a2:
cd:ce:a6:98:b2:aa:43:d0:11:0c:af:60:d3:64:14:
f3:a1:f0:bd:53:57:b6:8c:f2:4a:ee:3e:5e:45:de:
85:ad:0a:8e:a0:47:bd:af:d0:2c:35:60:b4:72:00:
ed:81:f7:11:67:19:56:d0:c3:dc:37:b8:9b:6d:40:
db:76:e2:41:81:75:ec:f7:3e:1d:da:cb:a2:20:ad:
0f:38:de:12:76:fc:ea:20:13:9f:10:af:fa:78:b4:
7f:1d:4c:74:00:6c:3b:6e:7c:d6:6f:cd:6a:29:fb:
4e:49:78:6c:8b:48:03:10:bb:e4:9f:a6:d8:ce:e7:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:0C:B9:7E:8F:77:B1:7A:96:15:2E:23:EC:09:E1:62:AB:F4:EB
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:77:40:c9:e7:f1:7e:bc:2f:12:1c:10:ff:ff:8f:a1:f1:
9e:10:b7:bc:57:67:d1:bd:50:42:1d:71:81:ed:3e:95:e4:5a:
24:f3:71:8c:f1:8d:00:e9:cf:b4:0b:f2:61:19:93:03:53:5d:
65:ac:6e:ce:c7:17:ff:80:4b:bb:5c:82:94:67:f4:ad:f8:78:
fb:23:36:c6:32:98:81:9b:58:8d:be:9a:91:a3:47:9c:dd:a8:
a9:55:5b:94:78:74:e8:e2:ce:d5:e8:9c:57:d7:5e:be:d5:3e:
7e:d3:40:99:85:f7:65:e4:c6:2c:59:3f:50:0d:28:72:2e:99:
9e:49:3e:b0:67:70:1a:bf:2c:29:dd:73:b5:c2:30:c2:fd:76:
d4:05:b7:05:61:f4:10:71:6d:9e:f0:62:93:a6:ee:dd:80:b4:
6a:af:9f:20:2c:ea:3e:cc:be:16:8e:e3:6a:d8:59:76:ca:cc:
ae:ec:f5:0d:13:23:1f:d8:60:93:17:6e:48:26:a7:24:ef:94:
e5:84:43:8c:56:21:fd:f4:22:71:fb:11:4f:a4:b6:b5:83:cd:
e7:c1:cc:5f:69:a2:78:fd:d9:2f:20:33:81:4e:90:6c:90:50:
3a:92:96:93:ba:88:70:bd:2e:fc:1f:8f:37:0e:9e:f6:16:82:
52:62:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:06:49 2025 by rpki-client