Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: Uy/M8Q3BXAwqCNvEl2CDVmyTxNJYWmQL3t2u8LccYO0=
Subject key identifier: A1:D5:04:6A:FA:ED:42:59:CE:05:AD:2B:62:81:BC:F4:8A:9C:F4:20
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01969E6351E90F615FD3C16070951D19BBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:31 +0000
Manifest this update: Mon 05 May 2025 03:00:31 +0000
Manifest next update: Tue 06 May 2025 03:00:31 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: zSKnpDEkPYNNqIcOFc6Icxn2Opj2cnJRsy4DQDQB56o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:51:e9:0f:61:5f:d3:c1:60:70:95:1d:19:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: May 5 03:00:31 2025 GMT
Not After : May 6 03:00:31 2025 GMT
Subject: CN=a1d5046afaed4259ce05ad2b6281bcf48a9cf420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:ae:a4:ad:48:91:d2:6a:cf:ea:35:63:7a:
8d:19:7d:76:b4:23:d9:c0:57:ac:b0:a3:e9:c7:8d:
63:54:d4:a7:2d:f5:ea:52:e7:46:d6:f3:00:b0:41:
de:4f:98:6e:e0:99:d8:1c:49:62:41:6b:c3:61:d8:
08:0e:9e:cd:e8:7f:0a:cc:b8:0a:50:f6:95:b9:1b:
de:2d:cd:c3:a7:45:e6:62:30:ca:57:4d:68:b8:20:
c3:3d:f4:61:10:2e:f8:5f:c3:49:b5:c8:b9:0b:89:
c2:7a:8e:b9:fd:a4:41:a2:76:56:c5:3b:f3:e9:15:
14:f4:46:f4:4d:52:74:bf:89:71:05:a2:0b:fc:16:
00:49:67:07:17:f6:cf:5e:14:74:31:b6:36:9a:f4:
d0:ed:4b:96:5b:f9:83:bf:a2:ec:60:ab:c7:4e:d8:
93:cb:d6:b4:bc:73:57:e3:08:94:52:fb:39:41:e5:
c5:15:78:77:d7:09:3d:f8:af:ed:17:ad:db:b7:f8:
9a:00:26:18:a3:3c:a4:e6:a3:97:51:df:ec:65:d4:
de:79:ce:08:78:68:07:7a:4f:26:be:94:15:cd:a0:
d5:00:fb:87:20:da:78:ef:f9:99:a4:ec:36:f0:8e:
c7:ce:79:f7:35:aa:e9:7a:e1:1c:80:19:53:61:5f:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:04:6A:FA:ED:42:59:CE:05:AD:2B:62:81:BC:F4:8A:9C:F4:20
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c8:01:6f:86:a9:28:e5:e5:db:0a:ad:3f:06:06:b1:59:43:
aa:0d:5d:e7:cb:8e:3f:24:08:22:d0:c0:8a:65:2a:df:e9:08:
fe:6a:49:48:d4:9a:28:76:1b:75:3e:00:2f:d1:7f:ba:f4:b9:
3f:21:30:3c:f0:df:0b:78:ae:ee:32:14:27:dc:61:f3:13:4f:
e4:aa:02:12:65:51:ae:99:c5:4f:79:25:55:6b:2c:1d:fd:38:
4c:22:6e:52:39:38:38:d7:63:ea:db:52:53:80:53:b8:17:ef:
bb:72:58:76:ea:8a:dc:00:12:ee:4f:73:f3:e9:4e:68:e2:48:
7c:b2:ac:b8:54:83:49:93:37:35:30:a0:bf:a0:70:20:78:7f:
88:a5:59:2b:bc:69:d0:11:91:f3:60:09:8e:27:e0:38:b3:6e:
73:43:cc:0c:d0:4a:43:2e:21:11:ff:e3:75:59:e6:0d:0d:68:
80:f2:bd:f8:18:3f:d0:35:75:2b:dd:1d:c2:21:2f:1d:ae:80:
be:6a:ad:82:d7:4a:35:e5:73:dd:95:8e:c0:17:ec:e7:bb:5c:
79:c7:6d:2e:0c:78:85:17:e3:f1:f2:a4:9b:b2:06:61:fa:18:
ff:e9:8a:aa:96:64:2c:17:5d:fe:24:fb:ff:b5:2c:ab:93:ad:
b6:f3:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:55:40 2025 by rpki-client