Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: o4yg4VUFYwBgf4QkWvYDqDeQYpzhlyCLttyktGmNJTM=
Subject key identifier: 4B:EF:60:D4:F3:20:BF:C4:22:B9:20:53:9C:54:C1:40:76:47:4D:44
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0196BE934C17C73469F20EDDA2E802EBBF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 153D
Signing time: Sun 11 May 2025 09:00:46 +0000
Manifest this update: Sun 11 May 2025 09:00:46 +0000
Manifest next update: Mon 12 May 2025 09:00:46 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: b9YMbtR0qTBzvvIP+M48M+72l+6k3CSa+hq6Fzv0OOk=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:4c:17:c7:34:69:f2:0e:dd:a2:e8:02:eb:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: May 11 09:00:46 2025 GMT
Not After : May 12 09:00:46 2025 GMT
Subject: CN=4bef60d4f320bfc422b920539c54c14076474d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:9f:9a:9d:a0:20:7f:3a:74:c0:8a:0e:47:
ba:bf:c8:75:76:c3:13:85:7e:03:6f:ac:bc:17:8c:
da:6f:2d:b3:5a:85:a3:56:8b:c0:1f:93:18:97:ba:
fc:48:cc:8c:27:fd:1d:a0:f5:e2:2d:25:dd:06:02:
e1:94:60:b7:39:82:1a:ed:ac:32:8b:56:02:40:3a:
df:ee:8d:b9:bd:d8:f8:71:0b:e2:1f:8a:90:3b:8b:
90:ec:c9:d0:57:6b:57:8f:a0:0f:18:cd:da:d4:d5:
1e:32:6d:ba:38:09:f6:4e:27:bc:ba:2e:4d:c9:a2:
d3:1e:b3:82:37:5f:73:6b:2e:04:25:f3:5b:5a:bb:
e1:8c:33:b8:9a:ff:d8:62:1e:6a:20:83:9c:ee:5c:
49:07:69:74:50:51:0b:a5:73:39:31:c6:f9:5c:27:
0e:a5:de:a3:95:ee:bc:7a:95:aa:39:5f:aa:6c:c9:
8b:85:25:3e:89:62:c3:8c:84:5d:82:1e:ec:48:34:
9f:56:52:00:b3:d7:c4:59:f8:7e:df:3d:ac:23:3a:
25:91:c2:f9:d6:57:8c:a4:9e:c7:b3:df:23:b2:99:
4d:af:b0:46:7a:23:53:f9:4d:46:cc:1b:45:e6:63:
60:75:64:e2:5f:59:06:0a:45:e5:18:63:1f:f6:b5:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:60:D4:F3:20:BF:C4:22:B9:20:53:9C:54:C1:40:76:47:4D:44
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:e1:54:47:ea:1b:63:af:85:31:73:11:72:23:d0:96:3e:
9b:c5:bb:a5:fe:95:d7:c5:4a:9e:74:ee:84:66:0f:e0:6c:23:
e5:71:bc:7d:fb:5d:f5:87:32:8f:e9:e3:51:59:b1:83:79:58:
9e:ac:b5:a2:8f:25:62:ad:97:60:f6:57:05:36:24:11:1c:f1:
31:1e:bb:f7:bf:24:d8:44:b0:d3:17:c3:af:e4:ca:c2:37:d5:
4a:8c:04:62:35:f9:29:0e:24:b3:fb:33:e8:bb:45:1d:03:19:
2b:75:95:ef:ad:26:99:3a:8e:45:06:1c:c7:0e:c7:68:b9:22:
aa:9a:25:5f:c8:61:48:8f:79:b3:8e:48:56:e1:27:91:c3:4c:
b8:f5:c6:1e:ec:c1:83:74:9f:4f:86:d4:ef:8f:ff:03:e7:98:
a0:3d:d8:29:14:6f:1e:26:22:4e:f7:a0:2f:9e:02:3f:b0:e6:
cd:fe:87:d5:bb:7d:1d:e8:32:e7:cf:e3:7f:7e:1a:15:f8:f9:
15:c3:d9:af:5c:91:4a:d6:8b:46:d1:e2:10:3c:8d:a3:13:67:
4c:c9:ff:eb:29:5a:cf:1c:02:d9:49:81:cf:b3:b5:3a:0b:80:
ad:21:ac:4f:d6:d3:e1:21:c4:20:b1:67:12:70:c2:18:2f:14:
d9:e8:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:07:36 2025 by rpki-client