Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: e/PgCKINZUm8BqvNpj+R6pOETAQE3ATL6xJ6zb0ogMs=
Subject key identifier: ED:22:A2:75:69:67:D3:9C:B1:7F:49:69:9A:D0:4A:CD:53:BB:95:78
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0196C502D63A60D9B0687465567B7D15C01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 1414
Signing time: Mon 12 May 2025 15:00:19 +0000
Manifest this update: Mon 12 May 2025 15:00:19 +0000
Manifest next update: Tue 13 May 2025 15:00:19 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: zDppugxMUyryv1JDUkovXhuFAaTJRtTOEEVVr//AAMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:d6:3a:60:d9:b0:68:74:65:56:7b:7d:15:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: May 12 15:00:19 2025 GMT
Not After : May 13 15:00:19 2025 GMT
Subject: CN=ed22a2756967d39cb17f49699ad04acd53bb9578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:45:61:29:31:44:76:33:19:6b:ba:7a:3e:
38:f2:14:74:b9:5d:ce:41:1c:87:87:f4:2e:a7:41:
a4:20:f7:b5:67:a5:1a:52:c9:59:e4:c1:35:e7:53:
be:77:c6:6c:cc:d7:9b:c5:78:65:03:90:c8:ac:3e:
68:86:f3:d0:9a:88:44:99:c0:d4:a5:01:78:8f:f4:
5c:f4:ef:d4:58:a6:4d:43:8e:e8:dc:ed:d9:dc:bc:
d9:b0:26:62:3a:2d:54:33:ce:56:c3:f5:3a:24:4a:
a9:00:93:f8:e0:bd:4b:86:4a:27:f9:8c:78:a8:a3:
12:8e:fc:dc:1d:df:a9:45:34:35:a2:97:5f:eb:c2:
13:14:77:91:99:54:3c:11:d1:59:fc:2a:b1:ef:1e:
5d:a8:7f:2e:88:9c:01:17:be:f8:41:2b:95:c7:50:
df:31:b7:fc:ef:ac:6d:02:ca:c2:58:dc:de:b6:c3:
e0:0f:a0:fd:45:1c:c2:47:75:1d:e8:7d:38:49:10:
85:fb:4f:48:8f:8c:6d:b1:97:cc:bf:3d:11:8a:c9:
35:11:c3:dd:92:d9:1b:c2:94:12:b8:09:ff:fa:e9:
3e:08:81:6b:08:72:0f:43:d7:b4:b9:4e:e2:58:bb:
54:c1:2e:5a:0f:34:89:32:cf:69:f8:0c:1d:52:0d:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:A2:75:69:67:D3:9C:B1:7F:49:69:9A:D0:4A:CD:53:BB:95:78
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:ee:14:ce:df:3d:fc:5c:89:f0:ba:d8:8b:dc:0a:8a:79:
ab:e2:a0:75:ef:db:c1:4a:11:da:3c:17:7f:35:1b:ef:dc:69:
57:af:c6:3c:e0:30:1e:a2:4a:93:b2:bb:df:b0:20:d4:48:43:
62:87:74:6b:f4:97:6d:ad:05:b9:f0:28:fb:e9:f4:55:80:c4:
a2:75:ed:f3:39:f3:a9:28:77:13:a7:54:d0:6b:0a:f1:f7:19:
a8:73:3d:f0:a0:fa:2a:4b:95:31:cb:4b:37:0c:1e:c1:af:f6:
5d:88:39:f3:95:66:5f:6c:c9:6f:be:b3:86:29:5b:16:99:c7:
2a:4d:00:a1:cb:66:4d:54:fc:68:5c:c5:2a:25:80:c1:10:ac:
a4:26:4f:02:e4:38:98:49:5e:b7:97:0e:77:33:84:00:56:78:
2a:a8:aa:c2:d1:1c:05:cb:1e:6d:25:54:b9:7e:16:d8:2e:31:
ec:3b:26:59:52:c6:d6:4c:a3:0a:62:04:03:da:1c:6f:29:cb:
1e:52:48:8a:ac:c5:5f:9c:c0:08:b5:5e:f0:1a:85:af:66:0d:
8b:86:d6:67:01:7e:02:05:6b:26:90:d7:5e:bb:11:9c:fb:03:
fc:fa:72:7f:56:c3:5b:d6:80:48:a4:57:53:7e:66:3c:ec:09:
07:74:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:45:45 2025 by rpki-client