Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: bVBXMAnK/srFmcJrHq9wZ+YsbnApcWpn0laGguLnpzY=
Subject key identifier: 1B:C1:20:9F:6A:99:1F:3E:7D:56:54:1F:FA:66:27:56:82:FD:49:84
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 0196BDB737FD2F50A236CFF86AC78C9A5B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 10E0
Signing time: Sun 11 May 2025 05:00:23 +0000
Manifest this update: Sun 11 May 2025 05:00:23 +0000
Manifest next update: Mon 12 May 2025 05:00:23 +0000
Files and hashes: 1: MkZrEXKyhFwVvNuGV9aT6iA9e-E.roa (hash: P+ppmdHA85AavE4SuC0r26COz1iZwYG4tMktUYoh6TQ=)
2: bvvZErx8yb4YddobsQuNGqwzPUw.roa (hash: qLe1f2hJ1WmPgxP8UHTFIQszxs7kYJ5N6PdJJshRMio=)
3: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: 2QW+KnZEA5opfVF8+ZpyLIk3fyd9GTX9IdfbkxYqc9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:37:fd:2f:50:a2:36:cf:f8:6a:c7:8c:9a:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: May 11 05:00:23 2025 GMT
Not After : May 12 05:00:23 2025 GMT
Subject: CN=1bc1209f6a991f3e7d56541ffa66275682fd4984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:23:0f:a1:12:71:41:c3:46:0d:db:74:02:
93:9f:e2:e4:40:ca:8d:a7:25:24:cb:00:22:85:d9:
ba:e9:04:67:b9:ea:99:dd:8a:98:d5:51:1a:9d:cf:
cc:24:d1:6a:81:ac:44:cc:1b:1c:59:e1:89:5f:e2:
c0:e8:21:09:59:ee:09:d0:ed:b6:44:06:62:c2:cb:
c4:f4:c8:58:2e:96:e7:6c:b6:ca:2e:16:ae:24:3a:
96:98:9c:5c:03:e9:7a:1a:9e:58:64:06:f9:30:55:
fc:15:35:ab:6b:37:c6:8d:7a:3e:57:3d:0d:ce:06:
09:76:af:54:b6:d9:90:18:7a:01:4b:2b:15:8b:56:
af:96:57:91:28:15:17:3f:2a:a1:99:79:cf:71:8b:
c6:50:a9:4b:f4:31:f2:50:1e:19:46:b7:30:dc:27:
7b:38:ba:92:f7:be:33:9d:f6:51:f7:ad:b4:da:55:
20:e9:9a:df:ab:8b:e3:24:b0:6f:7f:8c:d4:88:ab:
a7:2e:75:31:58:24:a5:c3:03:7e:81:5b:80:0c:bd:
5a:13:4d:72:db:01:31:ba:b7:70:32:66:08:80:0d:
22:22:8a:23:c3:a6:35:e8:36:5f:d3:e2:d3:3b:51:
f9:52:1f:e4:a6:ee:12:5e:9d:ec:4d:98:cc:b9:fb:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:20:9F:6A:99:1F:3E:7D:56:54:1F:FA:66:27:56:82:FD:49:84
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:64:68:3b:a6:c6:03:7d:1f:e0:87:07:d9:a4:cd:56:13:
e3:90:a4:8f:54:01:65:a2:fc:1a:9c:60:05:68:ca:9f:64:3b:
04:33:6e:ab:f8:2e:52:82:31:68:8e:78:ff:16:21:e0:a1:36:
bc:bf:0a:52:a5:cf:43:8a:1c:bd:8e:64:f5:bf:a9:da:06:32:
ac:b6:82:a6:ea:44:b7:68:0f:9d:bc:67:a5:7e:9a:db:72:28:
7b:63:db:9f:fc:9a:af:fc:4b:d7:d8:fd:b8:7a:09:0f:80:83:
e9:0e:b7:42:7f:a1:ce:01:ba:27:41:db:02:a1:f6:9d:3b:5d:
e6:ed:02:14:7d:ed:cf:32:e0:c8:03:fe:ce:56:b8:59:86:7b:
94:80:11:25:8a:da:53:94:21:8f:44:d1:55:af:a6:ae:c3:f8:
b0:bc:db:1d:a7:7e:1a:0d:79:4a:e1:b4:e2:03:62:94:67:01:
59:9f:d6:36:55:68:09:c5:fc:0e:6a:4a:67:4a:b4:b1:9d:f3:
7f:5f:90:3c:58:e4:fd:45:34:b2:91:b5:48:ea:75:60:18:2e:
d9:55:60:d8:37:e9:89:97:78:17:bd:9f:cd:cb:67:5d:e9:9a:
6c:22:d1:d0:15:1f:a3:76:2e:e7:b8:2d:05:e4:50:53:b5:63:
a8:da:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:25 2025 by rpki-client