Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: B938Ict56ag06whhcclGwMEhovnTEw2OzmyG7QVRBXI=
Subject key identifier: F1:D4:DE:4B:97:14:18:33:83:C4:47:14:C2:FB:5E:EB:B7:F1:8F:19
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 0196A4D35C70E9B633A1101632E9BC7FBD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 09:00:37 +0000
Manifest this update: Tue 06 May 2025 09:00:37 +0000
Manifest next update: Wed 07 May 2025 09:00:37 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 6UipQv98LjJeNcPcNaiwNUgfl6WeNqocAS+kQzBqmRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:5c:70:e9:b6:33:a1:10:16:32:e9:bc:7f:bd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: May 6 09:00:37 2025 GMT
Not After : May 7 09:00:37 2025 GMT
Subject: CN=f1d4de4b9714183383c44714c2fb5eebb7f18f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:b5:76:06:49:6c:c1:17:f6:7a:90:a6:3f:
76:a6:34:c6:cf:23:46:d5:2d:43:5f:30:0d:28:da:
6c:8a:0a:c9:91:43:dd:28:07:fb:f5:d8:13:4e:30:
75:9b:d1:d5:01:a2:4d:05:9f:2b:b7:17:d1:7d:64:
4c:a5:58:a1:d2:82:4a:b5:7b:05:f0:0e:16:af:6a:
3b:39:84:3c:5e:2f:53:d9:40:54:6e:d4:6f:ec:94:
4a:62:07:a6:48:7b:8f:8e:49:9f:47:48:df:1f:01:
fd:b2:90:d3:74:0b:6e:6e:06:a5:a8:4e:01:16:7e:
98:55:c7:99:93:2a:bf:9e:e0:4f:64:67:ec:62:3e:
87:86:a0:8d:26:28:b7:77:92:2c:d7:32:13:a0:ab:
c4:8d:e6:8a:f3:75:8a:20:ee:3d:5a:56:5c:c7:dd:
31:6a:ac:f5:9b:5e:9b:2f:7f:bc:21:a6:1b:82:95:
d0:0d:a5:11:b8:82:48:53:24:4e:fd:04:6d:36:b4:
95:f1:5d:57:b5:36:e0:73:68:d5:fb:86:fd:11:d8:
57:33:c4:4f:31:24:e8:0f:15:91:10:6e:ca:f0:ba:
c1:a0:2e:c1:b8:21:99:06:fd:5a:05:98:eb:de:73:
80:07:be:b3:a0:80:df:03:ad:69:33:12:06:7c:2e:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:DE:4B:97:14:18:33:83:C4:47:14:C2:FB:5E:EB:B7:F1:8F:19
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:ea:39:1b:70:8a:39:4a:3e:ce:d7:ee:8b:63:fd:61:aa:
f4:23:e3:6c:1e:1a:12:5b:8c:75:d4:d1:65:02:e3:02:b2:bf:
7b:2e:a9:1d:27:5e:d4:58:32:99:38:bb:56:99:7f:24:cd:a4:
92:0c:fe:7a:e8:e0:0f:06:cc:50:c2:ee:63:8c:d0:80:51:ab:
dd:06:e1:9d:df:6b:ae:07:e4:7d:de:7e:1b:8f:ab:35:88:88:
fa:5e:88:78:ca:8e:6d:70:15:ad:20:a2:34:79:4f:3a:cc:d0:
00:1f:32:88:b0:f2:ad:96:dd:26:c2:13:ac:6a:81:bb:b4:53:
52:a4:af:89:dc:e9:38:31:4d:97:2d:5b:1c:a6:46:c1:ef:ff:
77:0e:8a:f0:47:82:38:d8:f7:08:1a:20:0f:e4:63:85:89:0f:
d7:d9:89:e6:f7:d1:01:70:a4:4f:9d:7b:f8:15:17:aa:bd:f1:
ef:e7:e0:02:bf:80:da:a1:48:51:24:7c:53:70:6b:ee:82:84:
f9:0d:1b:a7:36:f5:fd:6a:74:c9:b5:a3:b1:20:89:ea:28:a9:
34:ed:b7:c7:21:c3:84:97:e0:e5:ab:63:5f:ea:d9:67:67:5f:
a0:5a:e2:5a:af:3b:32:c1:40:2b:01:ea:bd:25:94:e4:b1:0e:
a1:3a:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:04:22 2025 by rpki-client