Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: VbFHePE4FNpsrK8cOvX+cWxi4b8oxOsCa0hwZ3Yz23s=
Subject key identifier: 9F:34:21:E7:68:F9:9F:88:DE:07:CB:F5:92:33:DF:FE:EC:BF:72:14
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 0196A164390D3F91132EAAF9225840D7FC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0B3A
Signing time: Mon 05 May 2025 17:00:22 +0000
Manifest this update: Mon 05 May 2025 17:00:22 +0000
Manifest next update: Tue 06 May 2025 17:00:22 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: 89scvIZSxvKPxP2c1a+OF7kXtXQP8/gcYOv9fInfJT8=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:39:0d:3f:91:13:2e:aa:f9:22:58:40:d7:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: May 5 17:00:22 2025 GMT
Not After : May 6 17:00:22 2025 GMT
Subject: CN=9f3421e768f99f88de07cbf59233dffeecbf7214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:3c:2c:29:30:84:5b:a4:8f:3c:31:0f:e6:
b1:8e:a9:48:a5:04:d5:0b:3d:b2:dc:ed:73:70:54:
8c:71:7b:0a:08:7e:b8:31:da:69:74:95:30:8f:d0:
8d:5f:a8:25:d1:30:d3:65:ad:c2:8e:82:80:3a:bb:
cb:f3:ca:62:4e:1b:9f:6b:36:4f:11:71:bd:b6:a4:
e5:3a:47:69:46:3e:e9:f4:b1:fa:3d:01:0a:3b:20:
b8:ce:1a:36:67:0e:24:d3:7a:ce:fc:01:26:01:63:
b4:90:1d:01:de:81:77:9d:94:4c:37:fa:0b:c3:cc:
14:e7:e9:f6:7a:3f:99:6a:03:15:1e:26:9a:6c:25:
12:18:5e:06:97:4e:b3:26:a9:90:06:90:51:9d:d5:
a9:b5:68:ea:1b:ab:4f:31:23:64:1e:66:68:70:12:
37:7c:92:0c:fc:91:92:d3:3d:14:bd:0e:0f:e2:09:
40:69:35:7e:1f:8a:2b:1d:83:e5:a1:29:d6:79:c3:
cb:79:32:df:62:8e:65:6f:19:39:93:12:76:90:05:
44:1b:5a:5a:28:ae:eb:56:7e:82:d4:3c:3b:86:76:
59:04:c2:17:5e:a1:16:78:6a:55:f0:88:a1:2a:8d:
db:53:7d:5d:2d:7e:a5:be:c3:b2:ed:0f:b1:8d:6f:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:21:E7:68:F9:9F:88:DE:07:CB:F5:92:33:DF:FE:EC:BF:72:14
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:69:5f:a9:b2:35:a2:a1:b1:5c:a5:60:30:21:12:42:aa:
82:8e:2d:1f:96:bc:34:5e:75:49:ce:1d:dc:d5:ef:55:93:4e:
fa:11:03:8e:46:13:ae:bc:87:b5:c4:3a:61:99:e2:48:b6:f2:
28:e5:9d:81:24:2d:ef:80:12:bb:fc:b3:7d:5c:4e:c2:52:31:
97:49:02:f2:13:7c:45:84:00:da:15:21:fc:62:15:3d:2b:97:
13:7d:1d:fb:44:90:0d:62:81:ef:3c:ef:8d:9c:76:33:1a:f4:
df:a7:c8:c8:fd:ba:64:95:24:f2:f6:4d:1b:95:c8:79:9b:2a:
a7:53:ea:80:f7:64:45:03:1e:5b:10:fa:7c:b2:66:05:37:69:
2a:76:66:2a:fc:6e:08:49:c1:3b:d0:eb:04:8a:72:40:54:10:
ee:e2:24:52:ab:57:ff:f7:d5:96:69:8e:d5:b8:ff:f1:d4:c8:
89:b5:69:9a:ad:bb:ff:a8:66:ca:0d:2b:ae:24:36:66:8d:ec:
f5:7c:2b:5e:ab:3a:f0:ff:08:d8:8a:c3:bb:21:3f:f0:82:f7:
3d:99:89:3d:57:cc:06:c2:d9:66:da:e8:0c:1d:07:5b:b4:58:
14:23:0f:8f:7d:c7:35:6c:9c:d2:d6:cb:88:7e:b6:d4:1b:17:
2f:4c:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:48:36 2025 by rpki-client