Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: zcG3l8ppxCq5FyYCDgZdHcc7clUCv93q0xtUUEcxy18=
Subject key identifier: 70:CB:20:1D:42:7B:78:D6:AB:5D:16:5F:C6:BB:0F:05:2E:DB:33:8B
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 0196C4CBF1F0E3A10882B365A02550C0C54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 14:00:22 +0000
Manifest this update: Mon 12 May 2025 14:00:22 +0000
Manifest next update: Tue 13 May 2025 14:00:22 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: Cd/8o/7QG0A/DNfn1ZlFNNl66L6EoR/KW0NYp+10kX4=)
2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:f1:f0:e3:a1:08:82:b3:65:a0:25:50:c0:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: May 12 14:00:22 2025 GMT
Not After : May 13 14:00:22 2025 GMT
Subject: CN=70cb201d427b78d6ab5d165fc6bb0f052edb338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:4f:d5:4e:b0:eb:8a:ee:9d:31:ae:50:ec:
f4:a2:a8:74:c9:89:77:5e:29:c4:c9:ce:dd:0a:20:
90:a1:32:3e:9e:dd:38:13:78:22:c9:6b:2d:fb:ae:
bf:1e:a0:6c:35:a4:98:66:97:22:b2:d0:39:39:9b:
51:db:59:2f:e6:d9:b7:9d:9f:cc:29:eb:46:6b:bc:
95:02:f8:3c:80:52:51:b9:5b:09:f2:52:e0:7b:6a:
f5:33:2c:29:96:43:07:4c:0e:ec:a5:71:ea:ca:e4:
69:f2:5b:df:91:a0:24:4d:bf:d5:3a:fc:da:51:66:
be:52:ab:c2:60:c7:b2:53:46:92:18:e6:56:74:4a:
a4:96:28:27:6a:58:8c:f3:39:15:e7:ea:bf:47:e9:
36:f6:d1:b6:30:c8:2c:98:44:4e:ae:7f:df:e0:ac:
f7:77:bb:6a:d5:b7:57:18:1f:b0:c5:76:9b:02:e9:
c3:68:87:6b:7e:0c:f4:9e:fe:78:e5:20:b1:81:71:
a4:e7:8d:03:f7:ca:fe:e5:0c:a1:b6:9a:7e:17:cf:
f3:7e:58:68:69:60:c4:87:41:48:60:39:01:d8:94:
b7:5c:26:37:3a:d9:82:fe:06:9d:16:20:17:39:9e:
6f:2c:43:9c:9d:b9:24:5e:5b:c1:b8:56:16:19:c3:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:20:1D:42:7B:78:D6:AB:5D:16:5F:C6:BB:0F:05:2E:DB:33:8B
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:14:c2:cd:25:d8:66:59:d8:45:9a:4b:e6:e0:9e:23:80:47:
cb:23:26:a7:b7:46:93:da:13:c7:17:72:88:38:e5:c2:d4:b8:
54:63:33:04:f7:8a:48:a5:87:03:af:e6:4e:f7:ef:dc:73:af:
62:bb:94:44:6c:00:3d:8e:d0:29:93:c8:fd:40:8d:8a:69:55:
e0:9f:d9:8c:2d:22:33:ea:ce:15:80:e8:d7:11:44:3d:9d:5b:
bc:b6:fd:ea:f9:85:23:4b:56:dd:df:fa:a0:98:b5:0e:41:dc:
d9:ef:dc:6e:4e:95:a3:80:4d:d7:7c:f9:7d:1c:e9:98:94:de:
ef:ff:2d:1c:32:9f:6c:71:f8:4d:f9:e5:80:32:3d:e4:8f:c1:
45:f1:9e:d9:71:7d:66:9a:15:86:42:94:b3:d6:bb:ac:77:52:
bc:b2:8b:c8:a6:f4:8c:b8:04:f5:f0:d7:ad:89:90:b4:b9:9c:
38:aa:ae:ec:9c:ff:47:33:21:0a:c7:55:02:43:a0:47:09:7f:
1e:b8:4b:c2:53:4e:6c:89:8c:8e:8d:ac:f9:de:5d:7f:77:43:
de:ce:34:01:74:7f:49:2d:f7:3d:8e:01:93:00:53:e5:ae:ba:
4a:41:49:da:26:f7:65:9c:2d:62:a0:48:51:4c:54:77:dd:96:
13:a1:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:23:49 2025 by rpki-client