Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: IZtdOWhY9s7DFDcrqwtkTbgMZ1ZLbN0YQAFojLbq3RA=
Subject key identifier: 70:CC:1A:02:CE:02:39:AE:29:A0:D7:52:81:A9:4F:9C:E6:98:A9:56
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0196A5780DB6D6A255E475E59B88D038C1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 094F
Signing time: Tue 06 May 2025 12:00:30 +0000
Manifest this update: Tue 06 May 2025 12:00:30 +0000
Manifest next update: Wed 07 May 2025 12:00:30 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: dfalOcasIwRYRrbrT78w2MAoLLpQUIBmNz8zUlAD1Cg=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:0d:b6:d6:a2:55:e4:75:e5:9b:88:d0:38:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: May 6 12:00:30 2025 GMT
Not After : May 7 12:00:30 2025 GMT
Subject: CN=70cc1a02ce0239ae29a0d75281a94f9ce698a956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:64:4a:8f:84:7e:9e:65:f5:8d:98:e9:5b:
c9:09:4e:42:6f:b5:a4:4c:ee:1d:3d:cf:16:bb:59:
19:67:4d:b2:fd:da:68:08:c2:a0:4d:aa:49:37:ad:
e0:15:ef:19:36:2d:73:2f:8b:6f:fe:1f:ed:81:d6:
9a:4b:ca:e6:59:68:3f:b3:f9:34:14:cf:3a:99:f1:
33:7d:eb:02:e3:75:67:d9:5e:f0:5c:5d:82:7a:3c:
13:b9:9c:71:a1:84:00:7d:7e:aa:69:d0:49:b5:74:
6d:bb:d5:30:7f:82:9e:30:d3:f6:c5:d3:32:e6:10:
bc:05:21:33:5d:53:19:0c:29:97:e5:86:40:8e:f3:
81:e5:56:62:7a:af:9a:af:36:06:6a:c2:c5:07:6c:
0b:e7:46:bf:9a:f1:16:12:c9:f5:34:42:89:39:dd:
89:94:87:27:78:fa:87:73:71:ac:f1:bc:25:49:84:
9d:a0:7d:c3:11:c7:9b:4a:ac:fa:60:86:d5:d1:3e:
a4:e8:90:ac:8a:00:b9:2a:a5:67:eb:02:8f:61:92:
55:5e:f6:ca:36:f1:67:fc:ab:17:89:3c:ef:74:f5:
9e:aa:cd:c2:f1:dc:d2:ad:e3:62:c3:b7:d7:39:ae:
c4:fd:4e:e1:e5:87:5e:b2:a5:63:5d:3c:e8:68:bd:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:1A:02:CE:02:39:AE:29:A0:D7:52:81:A9:4F:9C:E6:98:A9:56
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:89:98:e4:55:ef:ba:35:e7:9b:93:b3:62:9a:16:4f:7b:
51:0d:00:07:45:a4:eb:f6:e0:c0:4b:a7:e2:73:b0:bb:6a:9d:
91:85:fd:18:9e:0f:74:7f:92:6f:f7:28:9b:c6:34:d8:8b:e2:
76:85:44:e6:a6:9e:f7:52:2c:79:d6:17:ff:d4:97:9a:25:1a:
10:23:c5:3d:9c:0e:a9:09:73:fb:51:45:5d:4a:60:64:6f:d3:
42:f7:49:6f:cf:ec:0e:c9:cf:fd:67:59:70:cc:36:a1:8c:c4:
1e:8f:d1:2e:c6:8f:ad:2a:36:e6:4e:62:0b:1b:9e:46:14:52:
42:5c:cb:f2:55:18:89:08:ca:83:5a:bd:08:f5:7a:6e:cc:29:
5d:79:ba:96:53:de:c7:29:82:25:ef:ba:66:99:20:0d:8c:b9:
5b:2a:8e:d4:14:17:83:e6:21:16:12:18:96:65:eb:6f:19:ba:
d5:7c:f5:3a:f0:80:ec:f3:a4:ad:fc:bf:70:6d:d4:b8:58:87:
6b:ad:f6:5f:65:28:2a:48:18:dd:38:54:c8:53:81:cb:a2:e1:
4d:cd:f0:b7:2b:79:15:b8:ce:49:59:60:8c:54:54:19:7e:ca:
01:37:b8:ec:00:c2:a8:9d:08:6e:09:91:7c:f8:d8:6d:9e:45:
29:d4:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:11:41 2025 by rpki-client