Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: zEDswITWfUTsAWjTrrHPDR2vU2VgX9A2qnYLLf7i8W4=
Subject key identifier: 78:54:C8:78:6D:94:11:DF:C8:63:F8:3C:B9:36:D1:CA:0E:55:7D:4A
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 0196CEE2CBE7BE945D5B21E376DBA97A1E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0CCC
Signing time: Wed 14 May 2025 13:01:31 +0000
Manifest this update: Wed 14 May 2025 13:01:31 +0000
Manifest next update: Thu 15 May 2025 13:01:31 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: 39Pnzc+7ki9InR8yOvnNW1fi5w7lFQz1rFqins8fR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:cb:e7:be:94:5d:5b:21:e3:76:db:a9:7a:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: May 14 13:01:31 2025 GMT
Not After : May 15 13:01:31 2025 GMT
Subject: CN=7854c8786d9411dfc863f83cb936d1ca0e557d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:a8:95:3a:cb:94:dd:db:88:13:1a:66:c8:
f5:c7:5f:ee:90:58:38:f1:63:4f:46:41:76:21:4c:
83:b0:3e:53:b9:5d:a3:68:18:86:58:c9:90:0c:ba:
85:16:b1:0a:cf:09:7d:79:e3:2d:f8:9a:93:52:30:
e0:81:1b:01:30:14:6e:86:fd:96:12:c8:9f:88:ca:
1f:79:e5:aa:f4:2d:91:3a:46:95:37:22:3b:4c:e4:
54:26:05:0e:29:bd:f8:da:f8:98:2c:20:68:8e:e7:
34:f0:f1:0b:9d:0a:8d:03:36:5d:d5:0d:ab:d6:55:
de:77:34:89:1e:f3:e9:66:b5:76:cf:7c:0c:3e:08:
bc:74:6a:29:08:3a:ce:8f:78:4f:51:20:4b:39:2e:
b8:3d:3a:4d:7f:20:ef:27:c9:85:c7:35:85:44:20:
53:27:89:24:cf:37:f9:2b:5e:a4:ab:d6:47:9e:35:
d5:1b:b4:d5:55:2f:13:66:5e:48:65:64:68:f7:cf:
96:9d:6d:24:b6:b4:49:30:5e:34:e1:5f:f3:68:da:
75:4c:80:bd:66:ec:d9:e8:01:89:47:87:14:84:5d:
d2:fc:68:95:0f:d4:be:c5:5f:35:d6:e6:88:ed:3c:
16:5a:ba:7b:61:94:dc:36:b7:2a:f2:35:21:ba:26:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:C8:78:6D:94:11:DF:C8:63:F8:3C:B9:36:D1:CA:0E:55:7D:4A
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:fb:16:77:50:26:0e:51:0a:d1:2c:2c:fb:0e:ba:9b:5d:
ce:4b:75:a8:99:b5:3c:42:e0:87:b0:cd:85:f1:71:01:ee:70:
5d:7e:06:e4:90:71:8b:3d:d1:46:21:8b:33:c9:cb:e7:9d:1a:
57:8d:02:b5:90:bd:23:3f:97:0a:2e:4d:99:8c:e0:87:a2:c2:
3f:c8:cf:b0:24:a6:4a:0c:7b:cb:73:e8:cb:21:77:af:24:2f:
0b:ae:61:e6:e5:78:db:e7:e2:79:ff:de:18:fd:4d:15:ad:db:
14:06:a4:11:90:ba:0f:81:68:9e:b6:69:0d:ae:71:da:29:6b:
69:c5:eb:a6:fd:88:b1:c6:c5:c6:a3:a7:7d:74:fd:bd:77:9e:
56:83:83:9d:e0:b7:e7:25:ae:d6:fd:1e:0c:20:e1:ce:0e:56:
94:04:15:4d:78:af:07:00:03:7f:0f:98:fe:ea:0a:34:c2:c3:
33:5c:40:c8:46:ae:44:7b:d6:1c:84:1c:d4:54:57:fc:e2:c0:
43:79:f7:d9:7d:0f:c8:ab:5e:e8:46:1e:4b:b9:73:ee:cd:52:
7b:08:fa:e3:54:98:9b:11:3b:53:32:70:38:a1:e9:31:9a:8a:
6a:a1:43:ca:72:c8:2a:26:39:a6:2d:82:aa:60:74:9e:2c:81:
a7:0a:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:28:01 2025 by rpki-client