Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: cypLqrFkoxpKdQwhKBN0WmPpTctFXI5nMQleSogMA84=
Subject key identifier: 35:55:B1:8E:0B:DD:8E:67:FE:A3:C3:2E:35:15:F7:F6:EA:20:4B:F7
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0196A7D46ECF941958CCB2EB036AB31F9A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1539
Signing time: Tue 06 May 2025 23:00:39 +0000
Manifest this update: Tue 06 May 2025 23:00:39 +0000
Manifest next update: Wed 07 May 2025 23:00:39 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: sWvoSxwM3ZLUV+JlaxDPQccBYRgRBIBMMve10lZMgVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:6e:cf:94:19:58:cc:b2:eb:03:6a:b3:1f:9a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: May 6 23:00:39 2025 GMT
Not After : May 7 23:00:39 2025 GMT
Subject: CN=3555b18e0bdd8e67fea3c32e3515f7f6ea204bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:4b:f7:03:6a:e2:06:25:61:1b:ed:17:b7:
8b:d1:3d:78:bd:2b:d8:a4:a4:1e:0d:24:c0:88:4b:
59:12:13:d4:b6:b5:0c:3a:9c:77:ae:53:f0:af:84:
84:89:06:7f:2a:56:c7:da:d4:9d:2c:bd:18:85:9f:
a4:9d:c8:14:04:cf:d5:31:10:9f:7c:8f:4e:0c:98:
4f:0d:b1:f6:e3:9a:bb:28:26:2a:fb:37:f6:be:d5:
14:f0:40:48:35:47:da:9f:f6:b3:37:71:53:4e:58:
85:3c:13:bf:cc:6b:80:29:10:90:97:75:8d:fc:e2:
b6:0d:b8:00:75:99:98:c9:34:da:44:7c:10:64:bb:
f0:d7:a0:ec:33:52:65:f6:fc:02:51:d5:d2:ee:39:
6a:1c:2b:00:a3:ba:a7:65:05:86:cc:8b:71:8b:15:
e8:24:5d:8b:25:69:ea:82:96:8f:c8:5e:a8:05:5c:
97:e4:bf:43:69:d1:a0:f6:f4:82:52:23:8f:30:2b:
48:13:f3:c5:29:98:ae:f1:14:04:38:2c:2f:6b:d1:
a7:b2:e9:92:d7:20:d6:42:96:49:7d:6d:9e:55:fb:
43:3c:76:49:1c:c5:5f:70:80:d7:77:25:ca:67:84:
73:8e:5a:22:63:78:f0:86:78:1a:7d:7d:4b:07:a1:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:B1:8E:0B:DD:8E:67:FE:A3:C3:2E:35:15:F7:F6:EA:20:4B:F7
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:5a:86:74:bd:c8:d6:59:51:46:f8:3e:26:69:17:89:8a:
16:3b:51:cf:e4:94:11:d5:59:14:e8:8e:ce:57:43:98:ca:61:
3c:1d:81:e3:60:50:e9:5b:41:36:25:09:6e:16:7d:fd:2c:fd:
31:b5:39:4e:86:25:a4:e9:e7:13:fe:6a:0a:42:b2:67:b0:67:
04:ce:4d:ea:2c:6e:c3:25:f0:62:97:0a:a8:4f:bf:26:c9:48:
79:5c:9c:78:e5:2f:c7:5f:d6:aa:4b:b3:b9:54:02:14:3d:7d:
84:91:76:5a:27:5b:85:26:0d:aa:53:f4:15:23:08:04:18:b3:
bf:cf:57:4a:1b:f3:ac:24:a5:a6:6f:17:e1:67:72:f1:ba:6c:
c8:91:49:3f:5e:9c:35:cc:f8:7d:64:b9:b3:b9:eb:bf:51:dd:
24:47:c7:49:e1:9d:b0:72:35:94:c4:ca:2b:d9:fd:da:5d:29:
9a:e7:0c:a4:be:9a:7b:e9:44:83:65:e1:b0:09:b9:6e:7f:c2:
d5:94:d3:9d:30:f5:b7:dd:40:75:dd:ed:87:96:f4:2b:5f:18:
1a:02:d5:9f:a5:35:b1:d2:66:c2:0b:90:a2:67:fa:2c:35:48:
e8:5b:b0:56:1c:3b:ca:40:ba:00:d1:07:0b:c7:1f:be:5d:2d:
45:89:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:29:15 2025 by rpki-client