Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: 3xUXLPJmzD/9zbB613s2MfJjJlfLEIWdf4QQFJAEItw=
Subject key identifier: DC:A4:D3:FD:82:79:C6:47:E2:B3:46:4F:1A:C2:6B:C7:02:25:54:D3
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0196A9C2E4701BE39FECDE405EA203EBE2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1531
Signing time: Wed 07 May 2025 08:00:44 +0000
Manifest this update: Wed 07 May 2025 08:00:44 +0000
Manifest next update: Thu 08 May 2025 08:00:44 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: QG0pEVYU3IE94ummBUNVYUyWuWBRY3L24ff7Nv0iEeA=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:e4:70:1b:e3:9f:ec:de:40:5e:a2:03:eb:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: May 7 08:00:44 2025 GMT
Not After : May 8 08:00:44 2025 GMT
Subject: CN=dca4d3fd8279c647e2b3464f1ac26bc7022554d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:90:41:dc:03:48:f2:b9:c1:46:16:20:24:
cf:52:60:cf:b0:97:76:48:ad:94:f2:af:e5:55:c5:
1b:f2:0a:d7:55:b4:4f:d7:b2:e6:4a:09:2a:d1:26:
0c:c4:bb:ef:05:22:63:1a:5f:24:de:ee:a5:e4:5d:
5e:35:e7:ab:28:ec:22:da:a1:4b:2e:f4:f0:b9:0c:
69:43:7f:cf:68:2b:06:b2:ad:03:cf:6c:26:d2:1e:
4f:44:7f:06:11:54:30:a6:56:65:cb:e0:da:8e:c8:
a9:29:c3:0c:d3:31:1c:9f:fb:9b:0b:a5:d1:11:5f:
85:e8:c6:a1:26:16:79:51:6e:33:54:ce:c1:cc:d8:
9f:ba:01:f9:e2:ac:67:f9:44:d2:68:df:2c:83:46:
a1:61:7b:aa:66:b5:ca:4a:99:ec:33:8e:92:29:bf:
64:0a:6d:4d:f7:b4:29:8c:83:8d:a8:f9:b5:87:72:
1a:e5:16:45:de:39:03:2d:5c:e4:8a:2d:40:ce:2c:
97:62:0f:2c:ed:47:61:c5:93:07:c2:c1:1b:a6:e8:
11:a9:8f:53:13:27:75:13:2a:f3:51:7f:62:8c:4b:
6d:ed:c2:fe:70:bb:ce:17:9d:7e:2c:2d:18:6d:90:
3f:56:f7:3f:7b:34:d3:7b:d4:2c:83:98:a8:22:49:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A4:D3:FD:82:79:C6:47:E2:B3:46:4F:1A:C2:6B:C7:02:25:54:D3
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4b:f9:ee:eb:bf:e6:eb:ba:c1:8f:7d:85:80:a3:e7:fa:88:
b2:93:e9:f8:98:85:78:05:ab:c1:ee:be:62:5f:bd:37:06:82:
03:d7:ba:73:c8:de:a7:8c:8d:fb:b4:50:8f:b6:63:03:ac:8f:
a9:2c:a8:66:d0:ec:76:8a:09:90:70:c1:76:59:69:52:28:b4:
65:46:fc:bb:6d:68:dc:4d:93:e6:df:96:2b:2a:49:e7:84:e2:
91:25:8c:8a:90:56:9d:22:6c:0e:eb:44:cd:7a:ca:3c:8d:f8:
6a:10:45:b1:6f:4a:20:c3:0e:ad:9e:9e:9e:6c:04:ac:d5:d8:
d2:96:3f:55:7e:57:ef:50:8f:bb:b2:57:a4:50:bd:7e:88:90:
9c:db:31:f4:e2:22:59:45:0e:2e:d5:0a:d4:99:70:f2:50:c2:
2c:5e:e3:b5:8f:28:e0:cd:90:a2:a5:f3:66:01:6a:d1:2c:85:
10:9b:f3:d1:ac:50:95:ba:86:18:03:dd:57:31:33:46:45:83:
ef:0a:39:3f:6f:fc:ae:ed:bc:fd:4b:a4:ff:63:32:21:83:a0:
f6:d1:55:42:7b:27:ed:ce:99:0d:cf:32:83:ad:64:f8:c6:06:
d8:58:d2:bd:75:a6:dc:aa:29:6f:32:1c:41:ef:db:62:94:bd:
b2:61:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:50:57 2025 by rpki-client