Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: 1yphKl66tTlb1cfIrI283vfJp4eKfw8DBHrLOIznDeI=
Subject key identifier: D4:9D:9E:7D:81:B8:66:9E:45:3D:91:32:62:BB:7C:19:E4:6A:8C:EF
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 0196CBAA1B7F393A4699BA029B03C4B584B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 0670
Signing time: Tue 13 May 2025 22:00:45 +0000
Manifest this update: Tue 13 May 2025 22:00:45 +0000
Manifest next update: Wed 14 May 2025 22:00:45 +0000
Files and hashes: 1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: fv0nvLFf6YN4Gwa6mugmJk6ZlTKPItLNV0tMCr4lwZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:1b:7f:39:3a:46:99:ba:02:9b:03:c4:b5:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: May 13 22:00:45 2025 GMT
Not After : May 14 22:00:45 2025 GMT
Subject: CN=d49d9e7d81b8669e453d913262bb7c19e46a8cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:81:df:5b:a3:07:96:55:3f:1a:3c:2f:6b:
6a:01:5b:c3:67:fb:24:4a:b1:46:b2:42:f2:05:26:
fe:ee:32:74:d9:1c:2f:f8:30:24:42:19:b3:79:c7:
ef:5c:55:a2:70:45:18:22:d1:87:d1:d9:75:1e:71:
f2:75:1f:f3:1b:80:86:48:b9:0e:3b:59:7d:41:74:
f8:bf:32:2d:f6:6e:9b:08:86:65:e2:20:f5:e7:a4:
fd:18:e6:f8:9a:bb:71:0f:ad:60:5d:a0:a0:a7:93:
15:0d:2d:b1:cc:88:1b:0a:e1:89:29:e5:0f:f1:0b:
f6:e7:0b:38:82:4b:cf:c0:d5:9d:c7:75:dc:9c:4f:
39:91:eb:b6:04:f0:92:64:60:c6:cf:62:fc:f4:6a:
7f:ea:17:c7:16:17:8e:0a:1b:1c:9f:ec:15:4a:b6:
de:33:a7:3c:82:1e:5c:5f:f9:81:a6:45:03:ce:fe:
3b:f5:ea:a0:a1:71:c2:06:a1:82:96:fc:6c:82:6d:
c4:01:65:01:46:ff:e7:6e:45:81:b4:4e:ce:db:8f:
a3:15:f6:2a:a9:1d:32:6c:94:f1:3f:0b:80:af:28:
a1:c3:8b:b3:72:ca:c0:85:fd:7f:19:43:7e:6d:e9:
d0:79:6a:fd:8d:2b:10:ca:68:10:9d:10:c2:ac:66:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:9E:7D:81:B8:66:9E:45:3D:91:32:62:BB:7C:19:E4:6A:8C:EF
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:38:a6:bc:9e:32:8f:da:0e:e6:09:64:8e:88:f0:62:ba:2a:
dc:6b:a3:4d:3b:f7:ea:8a:d5:5c:fa:80:d0:72:f4:a8:f6:5e:
f5:4e:96:ef:76:6d:b5:9c:6d:97:94:11:55:d7:b0:60:cd:49:
58:cc:67:c6:92:26:29:a1:74:4b:f0:d3:6f:6f:0e:ea:e9:3b:
57:5f:78:c4:62:b1:b5:96:ca:6f:b5:13:d9:00:cb:68:31:f6:
4e:b5:38:f3:d6:06:3c:0d:78:ec:6a:9e:6c:8d:91:6b:6b:4d:
b0:7f:2d:2b:38:8d:54:19:2e:45:15:41:15:33:e8:8b:3c:4c:
39:a5:a5:a9:f8:c9:f4:74:aa:c9:3c:04:4b:ee:8b:77:33:73:
46:a0:fb:49:a6:0c:7a:37:9f:8c:2d:20:7e:9d:2b:ea:b1:30:
21:a1:7e:8f:73:eb:0b:bd:b1:f1:5a:ed:7d:7d:3d:57:8e:bd:
9d:cc:9a:ab:ca:ec:15:42:89:1d:7d:cb:c3:64:ad:12:1b:20:
7a:3b:64:d9:d0:0c:bc:9f:83:1d:fb:24:ad:16:a9:2b:02:3f:
6e:95:02:a4:25:4d:b8:8f:6c:2c:75:b8:cf:23:7e:c5:fd:a5:
b4:d1:fa:58:79:15:d8:9a:03:85:82:ed:87:0c:75:98:5d:a8:
2c:c7:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:06:44 2025 by rpki-client