Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: fWNTeVavtZctMBjzRYnV9UhKIJ7I7ilMim+zrhG4KDY=
Subject key identifier: F6:C5:86:F4:64:A1:5C:27:2A:2C:42:36:76:7A:99:01:F5:B7:C1:40
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 0196B89106BB2D56BA1B5DEDE5BAD83754E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 05:00:34 +0000
Manifest this update: Sat 10 May 2025 05:00:34 +0000
Manifest next update: Sun 11 May 2025 05:00:34 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: PbqnwiXnuTJXgEnN7ROePYqE3NOuSKVF/2DLZmjtJro=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:06:bb:2d:56:ba:1b:5d:ed:e5:ba:d8:37:54:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: May 10 05:00:34 2025 GMT
Not After : May 11 05:00:34 2025 GMT
Subject: CN=f6c586f464a15c272a2c4236767a9901f5b7c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c0:b5:ad:18:3a:ce:fa:cf:4d:ef:46:3b:31:
62:4c:0e:9a:6b:db:5a:d0:0f:e5:3a:cc:e2:ff:3c:
2b:8f:eb:ef:5a:1d:e2:e3:5d:12:a7:bc:73:2e:45:
1e:e0:67:a1:28:b8:87:1a:5e:9b:d7:a1:6f:a1:d9:
23:55:e8:4f:28:a3:05:9c:7f:81:00:e6:ac:6b:b3:
90:86:a2:46:1e:dc:83:74:c8:e2:c7:63:e3:cc:77:
4f:91:de:9d:7c:7b:61:ec:d5:08:fb:2d:f9:3e:36:
26:71:21:47:65:0e:f2:d3:88:40:33:55:47:f9:a5:
68:b2:b3:a6:45:1d:af:38:87:4f:cc:2a:43:8a:56:
f9:70:4e:6d:72:f5:1c:cd:a5:7e:38:b9:f5:79:ba:
be:e7:2a:86:7b:c8:32:98:b1:6b:3f:a2:ea:53:a9:
31:9f:7b:3a:8a:aa:98:7f:49:c7:e9:e4:24:7f:4f:
38:19:7c:c0:b6:21:a0:4e:b3:3c:1b:e2:d6:6d:70:
43:c0:f2:cf:46:71:79:06:29:3a:55:74:b0:b7:f6:
3f:31:9c:31:a3:ea:1c:3c:d5:e3:62:f1:37:1b:1b:
09:57:0a:2b:cb:17:83:6f:d8:9d:71:c6:b1:a2:45:
02:36:89:2c:5b:f0:28:ca:cb:91:a6:1b:d6:14:29:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C5:86:F4:64:A1:5C:27:2A:2C:42:36:76:7A:99:01:F5:B7:C1:40
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:c0:9b:f8:68:a6:a8:aa:9f:54:ee:55:7a:f4:27:30:d5:
4b:17:22:ff:ed:9e:98:54:55:e0:6e:97:a9:53:df:91:4a:17:
77:4a:a8:7c:7c:e0:e8:e0:3f:ba:d1:75:a5:13:66:ce:0d:6d:
11:5e:11:27:a1:ed:cb:ec:64:23:bb:fd:e9:dd:ae:1c:2e:3c:
91:a9:e0:a2:1a:b6:a2:2c:18:4d:b1:e7:cb:31:15:83:96:a8:
b3:94:25:e9:07:00:cf:4e:39:b7:f0:a2:64:21:55:30:bc:90:
f4:6a:ee:70:80:ad:dc:ca:ae:10:09:14:14:d8:21:ec:ea:3f:
41:41:67:e5:8b:86:d9:97:ab:77:24:9b:38:28:c4:05:05:ff:
fe:0c:49:81:e1:d4:cc:b9:4b:cf:44:f3:00:75:ef:14:fd:77:
85:b0:b4:16:7e:7a:33:ed:46:29:6e:a5:f0:1d:c0:c1:7c:63:
cb:48:fc:7a:a6:d3:d1:2d:f8:1a:83:81:aa:b0:9b:f4:de:6a:
09:0e:52:3a:91:11:06:35:6c:a6:58:f3:1e:ec:b8:69:69:e5:
57:d4:40:38:ae:0a:bc:3e:a1:1b:7a:99:c6:97:ee:ee:62:89:
79:8a:24:26:3f:5b:5e:cd:52:e0:4d:d7:48:10:69:8a:dd:a0:
f1:39:3e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kQa7LVa6G13t5brYN1TmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj
NTVjNzYwHhcNMjUwNTEwMDUwMDM0WhcNMjUwNTExMDUwMDM0WjAzMTEwLwYDVQQD
EyhmNmM1ODZmNDY0YTE1YzI3MmEyYzQyMzY3NjdhOTkwMWY1YjdjMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68C1rRg6zvrPTe9GOzFiTA6aa9ta
0A/lOszi/zwrj+vvWh3i410Sp7xzLkUe4GehKLiHGl6b16FvodkjVehPKKMFnH+B
AOasa7OQhqJGHtyDdMjix2PjzHdPkd6dfHth7NUI+y35PjYmcSFHZQ7y04hAM1VH
+aVosrOmRR2vOIdPzCpDilb5cE5tcvUczaV+OLn1ebq+5yqGe8gymLFrP6LqU6kx
n3s6iqqYf0nH6eQkf084GXzAtiGgTrM8G+LWbXBDwPLPRnF5Bik6VXSwt/Y/MZwx
o+ocPNXjYvE3GxsJVworyxeDb9idccaxokUCNoksW/AoysuRphvWFCk0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbFhvRkoVwnKixCNnZ6mQH1t8FAMB8GA1UdIwQY
MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt
NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw
LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMPAm/ho
pqiqn1TuVXr0JzDVSxci/+2emFRV4G6XqVPfkUoXd0qofHzg6OA/utF1pRNmzg1t
EV4RJ6Hty+xkI7v96d2uHC48kangohq2oiwYTbHnyzEVg5aos5Ql6QcAz045t/Ci
ZCFVMLyQ9GrucICt3MquEAkUFNgh7Oo/QUFn5YuG2ZerdySbOCjEBQX//gxJgeHU
zLlLz0TzAHXvFP13hbC0Fn56M+1GKW6l8B3AwXxjy0j8eqbT0S34GoOBqrCb9N5q
CQ5SOpERBjVspljzHuy4aWnlV9RAOK4KvD6hG3qZxpfu7mKJeYokJj9bXs1S4E3X
SBBpit2g8Tk+WA==
-----END CERTIFICATE-----
Generated at Sat May 10 10:41:01 2025 by rpki-client