Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: eenrDFD7yhFAq8fv8fUyZOgDgLGdY2U/3z94GgfdUpU=
Subject key identifier: D4:F8:7E:12:B0:BA:0B:3F:0A:38:A7:0A:49:13:DB:BE:D2:B1:36:72
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 0196C0B8A46A1C2278054BFD61F3D80F68AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 19:00:48 +0000
Manifest this update: Sun 11 May 2025 19:00:48 +0000
Manifest next update: Mon 12 May 2025 19:00:48 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: 9nXCeYLR9Svw/YwiGBhKBLDEx+z0FMpNyzN25rCHaCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a4:6a:1c:22:78:05:4b:fd:61:f3:d8:0f:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: May 11 19:00:48 2025 GMT
Not After : May 12 19:00:48 2025 GMT
Subject: CN=d4f87e12b0ba0b3f0a38a70a4913dbbed2b13672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:63:e5:46:1b:22:5e:8f:0b:0c:e1:01:b2:
c8:7d:90:7c:61:2f:ae:10:83:91:f2:d9:b5:cc:63:
79:fd:2f:f1:82:db:73:57:b8:4c:c2:2a:33:d2:12:
91:1d:59:75:37:e4:6f:38:dd:08:47:ef:9f:ca:e3:
af:62:ca:94:e8:8f:1f:aa:e6:26:5b:72:41:be:d3:
3b:a3:8d:c7:27:c6:d9:22:30:fa:e3:48:cc:53:20:
b3:00:f2:b7:04:5a:07:3f:a6:c5:fb:1c:00:b4:0a:
47:e5:ba:0d:cf:de:87:f2:c8:5a:0a:99:0a:66:f4:
f4:ad:4a:e8:42:1d:30:2b:16:dd:65:bf:05:5e:51:
96:48:78:d5:ee:09:ea:d3:bf:d2:b9:82:19:b8:91:
b4:38:4b:c9:eb:8b:06:89:7c:8b:d8:19:ad:27:9f:
55:26:f7:46:f4:62:4d:c6:60:af:c3:cb:0a:3d:b7:
db:9c:e3:d5:ba:e9:22:0b:c4:73:38:98:47:d6:fd:
08:fc:ea:e3:74:b5:10:65:0d:77:d1:2a:6b:40:a7:
a2:2c:67:d4:0f:34:54:f6:d7:63:ac:45:02:d3:1a:
3a:0e:05:ab:ac:6d:f0:37:ed:da:e6:c5:fa:16:e4:
4c:37:25:9a:ea:1c:36:e2:26:62:84:86:0c:e9:6e:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:7E:12:B0:BA:0B:3F:0A:38:A7:0A:49:13:DB:BE:D2:B1:36:72
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:bb:af:73:c2:bc:56:97:a7:97:f9:e7:7e:25:4f:9f:b6:
e1:14:70:ed:70:1c:a0:4b:2f:6b:4d:42:ab:4f:f6:0d:02:72:
b0:df:5d:cb:ab:67:98:fd:01:3c:3b:00:c3:54:ed:87:b4:d4:
bf:ba:fe:64:62:e8:b3:7b:a1:ef:fe:cb:89:b8:f2:ef:b6:d1:
d7:2d:e0:c7:96:7f:c5:40:79:b0:b5:86:03:0a:db:c0:d4:25:
f1:b5:94:99:ee:c1:b3:2f:f3:4e:7c:08:b9:98:da:10:03:2e:
bf:73:0a:62:e0:07:94:fa:8f:12:4b:7f:88:2f:b7:bd:5c:c4:
de:ae:90:17:f4:16:7b:34:23:e7:63:4c:ca:50:89:c1:53:b4:
65:cd:c1:3a:0f:e2:bd:07:98:7c:4e:44:00:4a:33:06:71:e9:
07:a3:2a:98:8c:eb:24:7e:61:c0:93:04:a2:f3:c0:bb:39:70:
2d:8f:94:93:d5:ea:f7:bf:96:cf:e0:29:33:51:19:83:d1:d3:
64:f1:80:35:10:d1:46:21:65:78:0f:03:f6:18:d9:b2:7b:5b:
d9:7d:0b:2c:d8:07:3d:21:c3:a5:3b:13:77:44:bb:5e:7f:51:
0f:c7:95:1e:26:aa:57:99:42:66:97:09:fc:16:e7:81:81:5a:
59:59:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:59:31 2025 by rpki-client