Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: EGRNIhstJdrZprz5eL+gJTQglMLUN+XqK97p20SyvSw=
Subject key identifier: C8:8F:1B:ED:51:19:89:41:C8:4A:96:48:A0:38:C1:85:2C:B6:89:EB
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0196C04A79DBE59EF67817669FF5A72AAC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 17:00:28 +0000
Manifest this update: Sun 11 May 2025 17:00:28 +0000
Manifest next update: Mon 12 May 2025 17:00:28 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: w/AnjA9/WfBVzS6akje4AuPzfCn55rczYxCjL1grvBY=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:79:db:e5:9e:f6:78:17:66:9f:f5:a7:2a:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: May 11 17:00:28 2025 GMT
Not After : May 12 17:00:28 2025 GMT
Subject: CN=c88f1bed51198941c84a9648a038c1852cb689eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:3f:00:d9:d5:2f:71:58:6f:65:94:dd:13:
a5:e3:c3:58:b0:20:05:34:93:d9:d1:6b:13:aa:2b:
94:c2:a6:ef:1d:7a:43:2c:1a:62:42:af:6e:df:61:
96:ba:54:cc:57:48:06:c4:f8:ca:6d:d9:2f:0b:34:
6b:d1:a6:69:30:a4:b7:05:9e:be:7a:fe:77:bb:ed:
27:ad:75:41:60:ec:de:c7:5f:dc:2a:2f:07:f6:bd:
91:54:48:10:67:2a:30:62:93:d4:3a:df:81:71:e6:
34:02:f6:2a:0c:3e:76:52:07:19:75:10:8e:19:1a:
dc:4f:e1:2d:0e:63:df:ba:92:e7:c1:da:43:a3:72:
dc:a8:10:cf:11:45:a1:8a:f9:0e:15:c1:b4:d0:0c:
a9:bd:a5:ce:83:71:74:5e:c8:f1:8a:1e:1c:ac:9d:
a1:e9:4e:bd:37:a5:41:de:b2:a1:c8:82:98:14:83:
ec:24:96:17:ae:9b:ad:54:d2:19:ed:94:64:18:f7:
72:b6:b7:9f:68:6f:81:5a:75:26:a6:6a:c7:3e:7e:
73:a9:0e:ca:82:69:3b:3e:56:b4:78:92:e2:b9:19:
4b:35:13:24:16:5d:2b:18:59:29:62:74:bc:81:da:
a6:6b:ff:ba:37:3e:56:01:21:00:ab:f3:35:2e:1c:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:1B:ED:51:19:89:41:C8:4A:96:48:A0:38:C1:85:2C:B6:89:EB
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:59:ad:52:6c:6a:4c:71:ab:15:1b:db:58:41:65:a7:6a:18:
43:66:0c:14:2c:f9:c0:a2:55:8d:3c:67:58:df:22:0d:55:45:
bd:ea:b4:45:76:e3:ac:cf:33:d7:56:d8:73:7f:99:4c:b9:bf:
c0:0c:9a:cd:70:37:c3:92:bf:9f:8c:10:f0:06:62:26:e0:38:
2d:16:af:a1:ff:9b:4b:8e:5a:c9:cf:85:5e:19:78:a2:bb:50:
06:a4:f8:ea:e7:45:8c:c8:ec:ba:cf:b1:62:a2:99:df:00:5d:
79:18:6f:68:92:21:59:ef:90:c7:8c:86:fd:ec:25:c5:a4:95:
14:8c:5f:36:eb:db:e4:a1:a8:70:ac:6e:82:77:07:bb:37:28:
2c:2b:3f:b2:b9:d7:ea:be:1a:65:40:2a:5f:61:65:c8:3d:86:
23:04:49:d2:a7:28:3f:2f:77:a1:85:74:d0:91:0f:ea:1f:95:
9d:af:fd:1d:c3:e2:13:47:1c:59:c8:a7:2e:b1:96:ef:80:a7:
a8:b1:a3:b9:de:2b:30:11:a8:1a:2f:43:e8:98:b5:f4:2a:53:
08:5e:99:5a:66:51:8b:bc:ed:6b:fb:28:29:9c:b0:5a:97:7e:
a5:1e:eb:f9:f4:5a:f9:a5:b9:dc:50:d4:39:ff:97:1c:99:c9:
31:9a:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:19:45 2025 by rpki-client