Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: BfBrsfbQbwy2c5ubOI9SDmDL/QTNpMdSgaTio02POpo=
Subject key identifier: 6D:B1:AE:C7:6C:35:C1:9C:11:B0:FB:1E:93:E8:76:F3:D1:43:66:77
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0196BEC9E9ECD6947CE594EDE4F69C5AB07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0E49
Signing time: Sun 11 May 2025 10:00:25 +0000
Manifest this update: Sun 11 May 2025 10:00:25 +0000
Manifest next update: Mon 12 May 2025 10:00:25 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: eW4Dleiz/nok0TMTqnrNN6w/lv41k6Ua9yMHYoLNokA=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e9:ec:d6:94:7c:e5:94:ed:e4:f6:9c:5a:b0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: May 11 10:00:25 2025 GMT
Not After : May 12 10:00:25 2025 GMT
Subject: CN=6db1aec76c35c19c11b0fb1e93e876f3d1436677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:71:68:4d:42:2f:98:aa:ed:1f:39:9e:82:
86:66:55:3a:7e:25:66:81:9a:1a:ea:8a:e1:06:d2:
a5:a2:c0:86:58:27:01:26:61:ed:44:40:ed:26:6c:
ca:f8:f8:e7:b5:16:fe:0f:7a:59:a0:d0:90:30:08:
e2:c5:15:fe:94:07:d0:c3:fc:aa:d4:f1:1f:83:e1:
cd:28:8a:1a:51:16:ef:f7:9e:45:1a:62:df:a1:ac:
ac:c2:71:88:82:c1:bb:35:59:29:2a:d2:12:b2:a9:
ff:a9:05:f8:b6:4f:8d:77:c5:17:60:31:cb:a0:a3:
b6:eb:22:54:a1:b5:ba:2f:1d:3b:e1:c6:6e:94:33:
f7:29:36:fc:d5:f7:46:54:98:0f:bd:eb:a7:b4:70:
03:87:cb:6c:bb:30:c2:ef:5c:ab:c6:97:2a:34:83:
2a:61:d0:63:de:9d:5c:4c:ba:5e:dd:3e:b8:bf:d1:
e7:a9:db:d4:ae:04:8d:05:51:17:4a:be:78:cd:79:
1c:b9:bf:45:92:36:80:69:27:f9:91:d5:5b:cc:de:
9c:01:e9:2d:22:fd:01:b7:0e:89:06:42:90:26:a9:
3e:16:a5:6b:6f:cb:ff:67:c4:4e:c4:3a:a9:64:8c:
f8:03:0d:0d:c0:31:d0:4b:8a:ed:e1:e0:61:99:dd:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:AE:C7:6C:35:C1:9C:11:B0:FB:1E:93:E8:76:F3:D1:43:66:77
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:12:57:46:d5:c6:41:ec:a6:d4:27:36:b2:be:39:22:8f:
0a:78:94:ff:4d:75:78:5f:bb:93:11:97:f3:51:64:0f:00:3e:
7f:26:25:71:cf:4d:86:b6:96:01:23:ea:3f:42:95:1a:7d:10:
bb:27:92:d4:44:03:d5:aa:b3:e5:c9:92:a0:00:91:1b:28:b7:
0b:e9:6a:03:98:fa:12:f4:ff:5a:e1:c1:57:61:29:c2:a2:36:
ba:c3:ee:92:3d:5d:17:10:f9:a0:9b:ba:d8:8c:c0:6d:1e:08:
d1:2b:05:14:65:83:93:57:78:58:a3:de:2e:a1:0d:a2:8b:bf:
bf:2d:b6:69:58:5e:e2:ac:d0:33:d7:77:a6:9b:d6:f1:59:ac:
cf:4c:8f:c4:7d:34:48:25:4e:09:57:a6:d2:d7:6c:8c:a6:cb:
85:1e:af:9f:ee:66:9c:9b:42:8b:23:ed:2c:09:51:d2:ab:65:
c8:c5:93:12:55:d1:23:54:7e:ab:f4:a4:d5:21:ec:07:20:89:
0f:64:fe:7d:fc:2b:14:f1:51:b5:98:ed:70:6b:8b:e7:cf:e9:
83:dd:a3:9b:5d:60:63:8c:f0:f4:13:06:60:15:ba:d3:4b:c3:
09:5d:b0:51:69:a1:89:45:8d:6f:c9:6b:53:00:04:19:1d:c8:
19:57:8c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+yens1pR85ZTt5PacWrB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy
NjgyZjEwHhcNMjUwNTExMTAwMDI1WhcNMjUwNTEyMTAwMDI1WjAzMTEwLwYDVQQD
Eyg2ZGIxYWVjNzZjMzVjMTljMTFiMGZiMWU5M2U4NzZmM2QxNDM2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34xxaE1CL5iq7R85noKGZlU6fiVm
gZoa6orhBtKlosCGWCcBJmHtREDtJmzK+PjntRb+D3pZoNCQMAjixRX+lAfQw/yq
1PEfg+HNKIoaURbv955FGmLfoayswnGIgsG7NVkpKtISsqn/qQX4tk+Nd8UXYDHL
oKO26yJUobW6Lx074cZulDP3KTb81fdGVJgPveuntHADh8tsuzDC71yrxpcqNIMq
YdBj3p1cTLpe3T64v9HnqdvUrgSNBVEXSr54zXkcub9FkjaAaSf5kdVbzN6cAekt
Iv0Btw6JBkKQJqk+FqVrb8v/Z8ROxDqpZIz4Aw0NwDHQS4rt4eBhmd2cewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2xrsdsNcGcEbD7HpPodvPRQ2Z3MB8GA1UdIwQY
MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt
NTcwOGY1ODBlMzZhLzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh
LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTISV0bV
xkHsptQnNrK+OSKPCniU/011eF+7kxGX81FkDwA+fyYlcc9NhraWASPqP0KVGn0Q
uyeS1EQD1aqz5cmSoACRGyi3C+lqA5j6EvT/WuHBV2EpwqI2usPukj1dFxD5oJu6
2IzAbR4I0SsFFGWDk1d4WKPeLqENoou/vy22aVhe4qzQM9d3ppvW8Vmsz0yPxH00
SCVOCVem0tdsjKbLhR6vn+5mnJtCiyPtLAlR0qtlyMWTElXRI1R+q/Sk1SHsByCJ
D2T+ffwrFPFRtZjtcGuL58/pg92jm11gY4zw9BMGYBW600vDCV2wUWmhiUWNb8lr
UwAEGR3IGVeM6w==
-----END CERTIFICATE-----
Generated at Sun May 11 19:04:12 2025 by rpki-client