Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: YpKgBe24ksQLeTTymx9GKrMDOqti4dHEgRwBzGcj2WQ=
Subject key identifier: 68:9A:85:8C:A4:57:E8:92:BE:D2:6A:68:C5:CF:AC:6A:68:F8:06:8B
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 0196B2C631A6B25C3B040099322B3272B181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 02:00:55 +0000
Manifest this update: Fri 09 May 2025 02:00:55 +0000
Manifest next update: Sat 10 May 2025 02:00:55 +0000
Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: uHa+te8gyyThKxrfUQmIb2fKi54qoJLf7knNe4V0wPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:31:a6:b2:5c:3b:04:00:99:32:2b:32:72:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: May 9 02:00:55 2025 GMT
Not After : May 10 02:00:55 2025 GMT
Subject: CN=689a858ca457e892bed26a68c5cfac6a68f8068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:d9:aa:f4:5d:32:b1:51:a4:31:0d:f3:cc:
78:7f:b3:54:e3:58:9d:67:cd:09:45:51:2f:db:a2:
7c:cc:9c:40:b7:08:94:5c:6b:64:c3:3a:5b:c6:88:
34:ae:bc:1f:a1:ba:3a:30:c5:94:a6:66:5d:83:5a:
29:d7:b9:7f:45:96:ca:3f:22:6a:cb:be:36:2c:41:
2d:11:c5:a6:c4:eb:51:e5:d6:36:68:e3:70:bc:6b:
cd:85:9a:b9:42:9f:2a:c3:2b:25:84:90:3c:65:19:
d3:7f:d6:16:dc:04:e7:f6:52:88:4c:f5:ae:46:4c:
0e:09:e1:4e:c9:23:ec:34:6a:52:4a:e0:a7:20:fa:
f8:1f:2b:df:f8:d9:c0:6d:7e:55:47:14:2c:bf:81:
97:ab:eb:27:e2:8c:8e:e8:43:d2:b3:4f:33:93:65:
5b:87:0d:a7:e8:86:bd:76:d8:8c:d6:e2:9a:ad:f5:
88:96:29:e9:1b:11:0e:af:42:19:2f:c6:91:ba:ae:
ed:10:00:8d:4e:fd:7e:50:c0:dd:30:4a:6e:a0:43:
94:38:b2:3d:57:e4:a4:39:2d:e5:49:bc:30:17:38:
c8:02:c0:db:8d:00:9d:74:9c:95:19:6e:73:72:f7:
1e:f4:d5:7c:aa:3b:7e:2a:08:6b:b1:7c:bd:5f:7b:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:85:8C:A4:57:E8:92:BE:D2:6A:68:C5:CF:AC:6A:68:F8:06:8B
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:40:82:63:91:b3:fe:e2:ed:d4:41:d9:de:16:19:9c:db:
64:16:0f:e6:75:65:e3:b5:66:2e:5e:bc:c0:04:dd:e1:02:0c:
0b:29:f1:5e:5d:42:83:c0:be:2e:15:99:2f:44:84:5b:d2:9f:
7a:92:ee:d4:06:b6:6a:03:33:b7:5f:31:de:bd:7f:b1:26:36:
cd:37:18:81:55:47:8e:85:d7:ad:bb:a4:d8:78:5c:b9:9d:09:
6b:d4:96:55:88:44:b1:d6:d1:8f:3d:9b:a7:9f:69:a0:0e:52:
00:8a:ca:89:af:04:9d:b7:00:c4:31:c1:44:1f:54:82:1c:4b:
90:72:c1:a3:ea:04:1a:09:5c:09:fc:31:46:4d:41:80:20:47:
44:97:da:a3:96:51:76:1f:ef:84:b0:7c:a9:ed:e6:2f:e8:4f:
c2:ed:2c:f6:c3:fe:f5:37:09:d6:eb:06:90:58:6e:09:b3:4f:
e6:9b:52:cb:51:0e:23:6e:80:69:55:e5:40:2c:79:37:00:e1:
84:fd:48:de:07:6f:e9:af:16:82:2d:96:55:21:c0:bb:77:7b:
2c:ec:10:71:60:6e:6b:57:1a:94:f3:7d:72:f7:c9:59:c7:80:
2b:23:82:da:da:fa:4c:6c:5d:37:20:6d:23:b0:c0:1b:9e:64:
2d:ae:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:36:45 2025 by rpki-client