Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: RKYNO+WagrHIeiZtEaoiWzs0gdcvoB7L9r+30XqkEAI=
Subject key identifier: A4:79:47:E1:63:5B:38:0B:80:B4:93:BD:81:FE:B8:33:F8:F7:51:D1
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 01969D19C0423B20BD9272A78F2C8CA72452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 08C9
Signing time: Sun 04 May 2025 21:00:32 +0000
Manifest this update: Sun 04 May 2025 21:00:32 +0000
Manifest next update: Mon 05 May 2025 21:00:32 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: rc63abUnno3xVE2V2kUGEVCQlOPZdukb91LtB+DpcM0=)
3: jm9oOA6VyQ-uftU9zUVkX6bf8H0.roa (hash: 41vhjAZfiURA6ESJQrQphMAz+SkxwvEv3bKiUrokHnM=)
4: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:c0:42:3b:20:bd:92:72:a7:8f:2c:8c:a7:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: May 4 21:00:32 2025 GMT
Not After : May 5 21:00:32 2025 GMT
Subject: CN=a47947e1635b380b80b493bd81feb833f8f751d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:90:0d:bd:5c:03:b4:ec:82:af:78:38:12:
0d:90:00:1e:d6:4e:41:e7:b1:49:f9:f5:52:5e:fa:
bf:cc:8a:bd:34:cf:75:83:5e:13:84:d0:55:cb:29:
74:02:d4:76:81:ec:32:79:2b:51:40:e2:b5:3f:ae:
dc:46:20:c4:52:2c:0a:22:d5:57:0e:bc:5d:b6:cd:
71:17:68:34:3b:e7:a0:f9:42:e3:e6:c4:b7:ef:9f:
5e:ac:29:78:1e:d6:bf:43:d8:a0:c9:30:a8:45:65:
93:a6:9f:ed:50:24:40:db:d6:a7:74:fd:9a:3e:42:
ae:57:2c:b8:a4:2b:cd:cb:d7:c1:a2:a1:49:1e:f4:
7d:3c:7e:a9:8a:e3:a6:c7:1c:64:84:26:f0:8c:bc:
c3:e1:4d:23:85:a8:7f:3b:6f:fb:44:b2:2f:75:10:
c1:37:a7:99:d1:6f:53:69:28:52:2a:59:d5:e0:47:
c6:f0:d6:b8:ab:20:5b:df:ec:5f:70:75:0b:82:c6:
60:22:30:c2:0c:c6:29:40:91:b0:4c:e9:59:a7:cd:
0e:13:57:71:0b:95:08:b6:53:1a:05:1f:9b:cc:4e:
f6:22:b1:1d:6c:90:b2:4a:9d:92:dd:ec:0b:b6:0c:
82:8f:53:03:75:5e:e5:6c:51:2a:bb:54:80:3d:be:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:47:E1:63:5B:38:0B:80:B4:93:BD:81:FE:B8:33:F8:F7:51:D1
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0b:27:05:2b:96:03:dd:1b:29:52:10:93:44:18:6f:f9:50:
9c:b4:02:54:ea:4d:8b:ae:7b:fc:c9:eb:e9:9b:87:f1:c9:29:
17:fa:13:94:d5:ac:9d:e8:8e:73:a1:44:a4:c5:b6:0c:fb:80:
a7:c7:28:39:4d:0f:23:c7:69:f6:4c:b4:0d:fc:d9:72:56:db:
6f:f9:5e:44:80:ee:61:90:d9:b2:c3:bd:0a:c2:0a:29:9e:a2:
38:5a:85:3d:1d:2f:4f:88:66:d7:21:18:4c:2f:6a:c9:ee:84:
3d:53:c1:cf:76:48:cd:d7:0a:0c:59:95:f6:e4:32:4c:4f:ad:
a3:d5:02:c3:b2:38:60:35:57:51:a2:53:e5:4c:c6:fd:58:9a:
8b:8c:c6:38:f0:d4:e9:31:a0:97:60:6f:7c:0e:f9:84:94:76:
f5:6b:01:3c:32:fa:63:16:55:9e:6e:87:94:bc:b6:e0:ca:4d:
02:ac:e1:d7:a3:ed:d7:bd:9f:58:f2:65:ce:a1:f4:87:ce:9d:
0b:13:d5:8b:b3:2a:2a:9b:83:6f:e1:b8:6c:d7:94:cd:52:ca:
5c:62:22:ba:22:37:bb:6c:44:e3:64:a0:3d:eb:f4:99:45:d3:
24:14:88:7f:c4:56:13:75:a7:ce:7f:7d:11:ed:de:f5:94:78:
8a:5d:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:22:53 2025 by rpki-client