Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: 8CT9S83lmcfo/8301LSfU7uUFrM/zRjhvEpoLJOzwQg=
Subject key identifier: A5:53:C7:F0:96:43:9A:A1:82:2B:A0:ED:FE:0F:56:E0:65:0C:61:BB
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0196BB91F560088A11E8F53DF2F1A31DD861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 115C
Signing time: Sat 10 May 2025 19:00:27 +0000
Manifest this update: Sat 10 May 2025 19:00:27 +0000
Manifest next update: Sun 11 May 2025 19:00:27 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: Jr5JPuYg1CHyCYATApiVnVnrXH5xi1eKLN7LtWNXeDU=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:f5:60:08:8a:11:e8:f5:3d:f2:f1:a3:1d:d8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: May 10 19:00:27 2025 GMT
Not After : May 11 19:00:27 2025 GMT
Subject: CN=a553c7f096439aa1822ba0edfe0f56e0650c61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:8a:d6:23:f0:48:c0:9c:66:3f:ae:0d:38:
8b:2c:ad:94:93:13:65:14:d7:80:b0:06:78:e9:fe:
40:db:52:19:b9:6d:63:fc:ad:29:ac:8c:73:02:9f:
18:4e:a3:ca:c9:4e:8e:86:ba:4f:6b:43:1b:a8:5e:
36:c7:cb:b8:9c:af:42:51:4d:99:89:0a:ef:55:22:
6c:75:be:b6:fc:30:3b:c9:0e:7b:a8:5c:74:e8:1d:
6b:69:88:ed:10:13:1a:50:e9:f3:a0:fe:22:ca:b1:
12:38:8c:fe:8c:a8:bd:91:a7:92:a8:9b:28:64:7d:
ea:00:11:d7:ae:54:48:ef:75:fd:db:04:fe:c3:e3:
18:8c:41:e0:48:b0:e7:c2:67:a0:ea:d6:9d:9e:90:
cd:6c:bb:c7:71:3b:e9:e8:38:33:87:4d:62:6b:6f:
bd:32:88:46:c6:80:12:a5:b1:0c:cd:5f:9f:3d:d6:
3b:5d:1b:5d:dd:43:20:c0:c7:cf:e0:97:7b:00:6e:
7e:2f:17:5f:b5:42:cf:59:fb:00:cf:7c:0e:e4:a6:
24:51:47:cd:59:ed:d8:66:04:3f:5b:13:3a:0f:91:
c7:37:e3:8e:7f:03:1d:2c:46:77:80:41:c0:e6:6c:
7e:06:2c:de:f5:91:14:1d:c8:2d:6b:2d:f9:98:b4:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:C7:F0:96:43:9A:A1:82:2B:A0:ED:FE:0F:56:E0:65:0C:61:BB
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:54:31:59:6a:1b:68:c7:19:be:ed:4b:71:7f:91:51:bc:04:
12:30:53:c3:ce:34:03:72:fe:88:d9:8b:23:37:18:fc:5a:6f:
f7:85:82:aa:97:f6:1e:a9:e8:01:bd:1e:06:43:22:30:95:2c:
96:50:d5:33:a9:32:8c:f1:25:86:3d:5c:94:49:c3:d7:ae:66:
8b:fb:64:f8:2f:ef:aa:5e:74:d0:e5:a7:84:a4:75:4b:ee:49:
f5:c8:0a:a5:5e:5f:f1:d9:52:a8:4d:6a:15:60:15:46:06:e7:
02:89:5b:0d:e7:9b:32:c8:28:b0:d4:a8:eb:f2:16:6d:64:0b:
6f:8b:7d:1f:72:c1:e7:aa:28:56:67:66:77:75:17:88:3c:35:
d2:ba:54:10:ea:54:31:44:bf:1f:ee:a3:78:75:ca:ec:19:70:
77:ae:ff:1c:8c:23:ef:8c:b3:24:4a:3d:de:b1:b9:d4:b3:96:
d9:c7:7b:5f:37:2d:75:57:cd:1d:af:a1:d1:68:f9:97:00:54:
ac:e7:ec:60:b8:36:84:be:77:4b:ce:ee:ea:be:d7:d6:18:6d:
b4:32:23:39:6a:3b:cd:b0:46:be:29:2e:11:bf:a1:20:10:85:
a8:2a:a4:96:56:2b:ff:fb:41:1e:ff:27:b0:d7:fa:ca:e7:39:
30:c1:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:15:23 2025 by rpki-client