Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: SkBceiXE/EeNwWoptPLn0pQsK3g9iULlMMMASwzR3CM=
Subject key identifier: 21:0E:2D:5A:3F:D4:50:2F:6A:A4:0F:C6:AA:AA:25:32:3A:DD:32:F2
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0196B333E10B0D586691F63B994E73588C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 12D9
Signing time: Fri 09 May 2025 04:00:43 +0000
Manifest this update: Fri 09 May 2025 04:00:43 +0000
Manifest next update: Sat 10 May 2025 04:00:43 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: qNTfZOsPAM3TkoRqCdDTi5XEfhs0VtdMf6ZBPwszXVw=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:e1:0b:0d:58:66:91:f6:3b:99:4e:73:58:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: May 9 04:00:43 2025 GMT
Not After : May 10 04:00:43 2025 GMT
Subject: CN=210e2d5a3fd4502f6aa40fc6aaaa25323add32f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:c5:99:22:f0:7f:2c:2b:55:c1:85:45:59:
2e:e6:4d:e6:ec:7a:71:49:8b:ee:46:44:2f:00:0a:
4b:14:b5:98:d1:ae:a3:61:13:d0:10:c4:bf:64:bf:
09:59:34:2d:1a:d3:08:a4:8f:e2:40:6a:96:b7:12:
b0:fd:d1:55:a0:14:11:98:64:37:8b:dd:18:42:f9:
1c:5c:c7:30:96:3c:7a:10:3d:48:c5:40:55:35:bb:
d2:13:ec:c9:89:c3:0a:99:28:5d:c2:da:23:63:39:
86:e6:ee:ba:df:15:c4:ed:b3:99:62:3d:87:d5:c6:
51:d8:3c:29:3b:de:b3:4b:38:9d:eb:b6:21:80:0f:
cc:8e:3a:72:2e:87:3c:a8:9c:f0:7f:cf:6f:2e:b9:
dc:65:b5:34:c9:53:1f:bf:4c:89:b0:48:12:99:95:
f2:78:a6:cb:0a:af:93:5e:c0:dd:2d:87:47:c8:3f:
67:4f:5f:71:32:28:89:66:30:33:39:4e:45:3e:44:
66:af:43:b8:45:67:da:a7:72:87:61:54:8f:4f:ce:
e3:89:2a:e5:55:9e:ed:08:76:f3:6b:41:91:63:9c:
60:0b:4a:1e:23:ac:cb:d1:be:a2:66:65:a0:35:98:
d9:05:2c:14:55:ba:de:74:e9:e8:e2:99:51:ca:40:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:2D:5A:3F:D4:50:2F:6A:A4:0F:C6:AA:AA:25:32:3A:DD:32:F2
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:1f:86:50:7b:fe:75:9f:87:7f:3d:77:9a:0e:b4:99:27:
4c:a0:20:4a:c1:d4:65:00:4c:56:ae:09:fc:0c:cb:6c:80:f7:
68:f5:04:2d:4d:5c:7a:0c:ab:10:87:c6:11:bc:16:82:7d:e3:
6a:c7:fe:cb:a9:a4:8c:2f:c7:15:45:62:ad:ac:96:60:61:90:
23:79:d3:fb:cb:be:42:ef:41:08:a4:e4:7b:97:e8:59:3d:9f:
e2:0c:1a:f9:0b:c6:6c:11:0b:cc:fe:a9:f4:97:da:17:78:59:
77:2c:96:a3:7f:a3:bf:21:21:bc:1c:13:41:83:51:76:09:b2:
85:32:b9:6e:52:a0:8f:56:c6:ab:7f:12:5e:ec:b9:fc:d5:05:
26:8f:4d:bd:a5:c7:04:90:63:3e:79:20:b0:11:29:55:18:23:
a7:27:96:32:9b:ec:0c:b5:77:c4:a5:f9:8e:14:7d:ef:02:28:
24:ca:88:4b:a7:7c:8b:0e:96:24:df:5e:dc:cf:2e:e9:e9:da:
51:e3:99:b7:ba:3b:94:49:24:4d:6c:60:07:af:0e:d9:85:90:
a3:84:09:a7:fc:0f:3a:31:e8:c9:70:d2:87:38:47:95:69:e3:
9f:7a:9e:1c:d8:3e:92:1a:54:67:20:81:a7:de:d9:b3:54:d0:
7e:66:49:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM+ELDVhmkfY7mU5zWIyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw
ZTc1ZTcwHhcNMjUwNTA5MDQwMDQzWhcNMjUwNTEwMDQwMDQzWjAzMTEwLwYDVQQD
EygyMTBlMmQ1YTNmZDQ1MDJmNmFhNDBmYzZhYWFhMjUzMjNhZGQzMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ3FmSLwfywrVcGFRVku5k3m7Hpx
SYvuRkQvAApLFLWY0a6jYRPQEMS/ZL8JWTQtGtMIpI/iQGqWtxKw/dFVoBQRmGQ3
i90YQvkcXMcwljx6ED1IxUBVNbvSE+zJicMKmShdwtojYzmG5u663xXE7bOZYj2H
1cZR2DwpO96zSzid67YhgA/MjjpyLoc8qJzwf89vLrncZbU0yVMfv0yJsEgSmZXy
eKbLCq+TXsDdLYdHyD9nT19xMiiJZjAzOU5FPkRmr0O4RWfap3KHYVSPT87jiSrl
VZ7tCHbza0GRY5xgC0oeI6zL0b6iZmWgNZjZBSwUVbredOno4plRykCSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEOLVo/1FAvaqQPxqqqJTI63TLyMB8GA1UdIwQY
MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt
YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1
LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHUfhlB7
/nWfh389d5oOtJknTKAgSsHUZQBMVq4J/AzLbID3aPUELU1cegyrEIfGEbwWgn3j
asf+y6mkjC/HFUVirayWYGGQI3nT+8u+Qu9BCKTke5foWT2f4gwa+QvGbBELzP6p
9JfaF3hZdyyWo3+jvyEhvBwTQYNRdgmyhTK5blKgj1bGq38SXuy5/NUFJo9NvaXH
BJBjPnkgsBEpVRgjpyeWMpvsDLV3xKX5jhR97wIoJMqIS6d8iw6WJN9e3M8u6ena
UeOZt7o7lEkkTWxgB68O2YWQo4QJp/wPOjHoyXDShzhHlWnjn3qeHNg+khpUZyCB
p97Zs1TQfmZJ+w==
-----END CERTIFICATE-----
Generated at Fri May 9 08:38:24 2025 by rpki-client