Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: 3gBYU/fnfgaDXLnXbpHvtTbeXzJEgRLFyyQvk5kB1vI=
Subject key identifier: 04:E5:09:FD:5A:64:02:14:B8:E0:4D:24:64:02:7E:C3:A4:B3:E8:EB
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 0196A2E56DE92C69FFA701F22CEFBD2D1A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 00:01:06 +0000
Manifest this update: Tue 06 May 2025 00:01:06 +0000
Manifest next update: Wed 07 May 2025 00:01:06 +0000
Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: L0+sOF0dhGQ6gVYpR+nzRVFBX66i31SOpR5Rq7lPOhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:6d:e9:2c:69:ff:a7:01:f2:2c:ef:bd:2d:1a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: May 6 00:01:06 2025 GMT
Not After : May 7 00:01:06 2025 GMT
Subject: CN=04e509fd5a640214b8e04d2464027ec3a4b3e8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:8d:19:14:2d:85:82:96:65:f1:94:e2:ab:
fb:37:28:dc:ed:47:5e:e2:26:d1:67:61:6c:38:19:
91:bb:c9:7d:9d:eb:4a:98:0c:35:f5:33:0d:d7:cf:
28:e0:32:86:eb:a1:93:2f:c1:27:3f:57:66:f4:fd:
3d:67:f6:ff:77:35:29:20:1f:6b:15:14:24:4e:5b:
0a:33:69:d4:80:72:2c:65:57:f5:67:42:e2:7c:5e:
59:21:2d:f4:ee:b7:14:67:c2:ce:92:d6:96:d9:99:
04:08:93:61:7e:44:85:f0:e3:dd:8f:b5:a2:0d:a7:
a9:c5:0c:06:b3:7f:58:8c:fc:b6:aa:47:11:f4:2d:
bc:1f:a2:80:51:dd:a9:1d:dd:80:71:fc:67:b1:e7:
d2:a0:b9:9d:a3:eb:b1:e5:53:7f:6f:e6:ca:45:7e:
02:4c:48:b6:d6:c7:d4:59:23:be:da:9b:59:26:ec:
64:65:1f:48:f6:3a:b9:55:45:91:62:f7:ee:17:09:
60:14:cd:43:15:5c:68:8b:f4:51:fe:4a:4d:99:57:
d9:36:5e:60:bd:84:78:aa:b5:31:80:43:f1:3e:af:
d7:0d:f5:3a:60:09:c4:07:19:b3:d9:d3:a7:d0:b8:
01:bd:b1:b7:96:e2:15:f7:86:e7:67:bd:98:29:43:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:09:FD:5A:64:02:14:B8:E0:4D:24:64:02:7E:C3:A4:B3:E8:EB
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:c6:8b:35:a5:e7:80:41:3c:66:44:a8:a7:cf:b5:06:0f:
60:16:8a:9a:a7:76:d1:f1:9b:5a:34:ee:19:75:4c:de:24:56:
b0:17:20:78:91:e4:58:c4:2c:0e:54:72:29:93:49:3f:8c:45:
c0:10:ee:9e:8a:95:d2:c3:e4:8b:4c:19:48:a5:03:c9:81:a1:
61:a1:09:11:74:e6:6f:dc:a1:e2:d6:f4:96:6d:45:93:67:6f:
c6:97:ac:44:ab:3d:c2:69:17:15:19:a2:57:81:0f:af:d4:69:
84:34:d4:71:63:ae:95:2f:81:ee:fb:19:bb:fa:6d:fb:8c:6b:
d0:32:9d:50:1e:1f:61:ed:2d:6b:ca:de:78:f9:d7:f4:6a:08:
03:8e:27:ee:4f:24:8b:e7:7f:85:66:66:96:e9:ed:9c:8d:93:
54:8e:f8:03:af:ea:87:e2:a0:90:72:17:bc:ba:62:39:85:ab:
c0:7b:71:95:e6:57:cc:46:69:31:e8:a4:6c:b8:9e:b6:bf:d7:
9a:b2:6a:eb:d3:4a:07:3a:17:9a:10:fd:8a:1b:7b:d3:bf:78:
11:ec:f7:99:a6:b3:8d:7a:9a:c5:6a:d8:26:84:f1:e2:7f:d0:
e0:3c:8a:98:cf:42:60:17:06:09:58:9f:8f:2a:3c:bd:1d:56:
ae:07:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:11:16 2025 by rpki-client