Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: AqycOD2Gg9g429yi64BKlNDkOqLv79/I7x4sa8NvWIk=
Subject key identifier: 85:AD:9E:A6:FD:AA:E4:B4:F2:55:E8:F1:4B:98:2B:B2:72:B7:EA:CB
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0196A2E562907D99E39D2D35DA2A7C902ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 00:01:03 +0000
Manifest this update: Tue 06 May 2025 00:01:03 +0000
Manifest next update: Wed 07 May 2025 00:01:03 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: TA5htuT+lpyqD5y2LrEVv5iUe0vs2SLpf5sXCStHmJU=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:62:90:7d:99:e3:9d:2d:35:da:2a:7c:90:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: May 6 00:01:03 2025 GMT
Not After : May 7 00:01:03 2025 GMT
Subject: CN=85ad9ea6fdaae4b4f255e8f14b982bb272b7eacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:61:d9:88:fd:17:73:f1:0e:a2:1e:65:71:
8f:10:f0:fd:39:c0:af:74:c4:c6:25:12:9b:4a:e3:
20:5c:12:64:56:43:cf:84:60:62:90:94:0f:37:6e:
73:fd:96:ef:f4:4c:6d:97:2b:9d:e2:43:9a:4e:ff:
b2:84:40:6c:2f:2d:1f:3e:47:bb:80:fe:95:85:d5:
b6:7e:98:38:e5:60:3a:60:ec:4d:17:9f:9d:a3:0b:
75:a4:54:6e:25:db:09:d7:bc:30:3a:9d:69:88:01:
f7:1c:36:5d:e2:8a:e4:2f:c4:bc:77:b1:0e:21:d2:
36:bb:5f:29:00:9f:18:f0:17:4b:d0:d9:15:ec:46:
72:7c:70:ee:a1:ac:5b:45:06:1f:18:18:61:d4:cf:
29:a4:ac:67:11:1f:34:86:82:a8:a7:02:1e:45:43:
2c:1a:16:11:4a:32:42:59:c4:a4:cc:d6:2a:de:77:
10:44:97:57:c1:37:3b:0a:62:55:1e:85:c5:95:8c:
d5:bf:19:95:fc:ea:6d:b5:8a:fb:fd:66:c8:78:fd:
5f:de:a5:5d:25:0b:5f:ee:5d:39:24:99:15:57:48:
fa:11:62:66:5f:fc:52:3c:13:32:b3:40:ed:86:5b:
42:1d:a8:2f:bb:f1:d7:b2:23:0a:55:35:df:85:80:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:9E:A6:FD:AA:E4:B4:F2:55:E8:F1:4B:98:2B:B2:72:B7:EA:CB
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:57:3d:f2:95:1e:e5:c7:71:84:cb:00:4a:a1:c2:95:db:12:
30:5d:15:ca:15:f3:04:0b:7c:b4:9b:50:28:f9:9b:20:55:b1:
69:d3:e1:83:5e:f5:f1:65:bd:1c:74:83:34:5f:b3:e5:7e:23:
6c:4d:9f:3a:54:c3:2d:c3:49:0d:c8:36:56:d4:6e:6f:ad:16:
db:26:08:64:5c:d3:ac:a4:53:69:33:38:48:af:2d:a6:ef:0c:
1e:08:8f:e6:84:c6:d1:99:e9:08:4c:d6:ce:6a:44:99:51:b5:
1b:fa:2f:3f:46:cb:13:38:4d:37:a7:2f:22:4f:ab:59:2f:47:
7d:86:92:93:8b:73:80:eb:53:dc:27:1e:ed:a3:b2:71:c4:0d:
2d:53:ae:6d:59:17:62:c8:8c:60:a6:f6:7c:a8:85:a7:2d:6e:
d4:2a:91:b3:e9:3a:b5:03:72:eb:8f:bb:d7:73:05:05:ab:dd:
0d:64:c9:74:8f:d0:ef:b8:8b:bc:2b:6d:70:50:a2:32:b3:ca:
aa:eb:50:c7:d0:f8:1f:9d:9d:d9:e3:d1:76:70:89:55:d5:ab:
25:bb:f4:5d:ac:6d:67:24:35:ac:fb:ed:64:eb:b5:cf:2e:b5:
ae:c7:45:b6:21:3b:39:f7:c4:b7:5e:93:8d:7a:2c:b6:f5:46:
54:f3:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:35:46 2025 by rpki-client