Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: mIiftm+9A/UTqhLfrmUMwW3YEGmcA6q/wIGm44oPAoU=
Subject key identifier: 1D:7E:90:9A:86:87:44:AD:92:D5:44:18:28:8E:05:CF:4B:7C:11:3E
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 0196A0BFC034745CE056F7350B78525103CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 14:00:43 +0000
Manifest this update: Mon 05 May 2025 14:00:43 +0000
Manifest next update: Tue 06 May 2025 14:00:43 +0000
Files and hashes: 1: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 4OHZhxenEbjCbS3VgOxRYcp6Qcb08UCTZMUzk7oTFJE=)
2: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=)
3: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=)
4: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=)
5: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=)
6: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:c0:34:74:5c:e0:56:f7:35:0b:78:52:51:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: May 5 14:00:43 2025 GMT
Not After : May 6 14:00:43 2025 GMT
Subject: CN=1d7e909a868744ad92d54418288e05cf4b7c113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:be:98:84:8a:10:80:75:d7:c3:92:69:01:
c1:19:a0:fc:f4:7f:1a:bc:e7:90:d5:6b:2b:44:69:
5d:8b:11:25:6e:dc:51:36:26:e8:e8:b8:66:4e:e2:
2d:fa:d1:1f:1c:6f:1f:ba:f2:62:82:7f:5a:5b:7f:
58:d4:d9:50:4f:94:81:df:e3:10:4d:14:af:32:de:
89:8c:59:c1:0e:82:fe:30:a3:13:ce:bf:a5:cd:4f:
1e:1d:a0:d0:e5:e1:ca:3b:82:fd:24:a2:cf:2d:83:
c5:79:49:6f:c6:8b:05:4c:fc:0f:d6:df:d8:c4:a9:
32:d9:ef:4e:74:e7:85:ee:b9:14:2a:9a:c8:12:94:
11:18:99:01:a7:4f:19:f6:ad:41:b6:96:61:c1:9f:
20:4e:72:d4:7d:88:1b:ff:63:80:7f:3a:f4:8b:41:
33:90:19:5d:83:b2:b3:e3:bf:d5:12:d1:fa:c5:90:
b7:41:7c:1d:81:7c:17:46:d1:ae:e9:79:e4:07:81:
e7:e9:de:da:10:74:8d:27:d5:2e:ee:cc:5f:4a:6f:
40:68:93:8b:1e:9d:37:64:ef:9d:14:dc:05:e0:12:
e1:65:39:4b:95:02:ea:24:01:56:17:dd:e8:02:65:
f1:35:0b:ba:95:e1:22:59:4b:5a:ff:55:6f:cc:47:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:90:9A:86:87:44:AD:92:D5:44:18:28:8E:05:CF:4B:7C:11:3E
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:ab:bb:9d:80:cb:75:a6:4d:7c:38:c2:0d:fb:0e:b9:21:
a0:3e:cd:8a:2f:9d:45:31:59:ae:13:9e:99:43:25:2d:78:ea:
12:0b:e3:37:39:5e:d4:92:03:f6:1e:10:10:a6:10:60:98:bf:
c7:14:31:3e:b8:3c:64:fb:82:d5:06:87:a4:a2:05:62:d0:2a:
18:86:ef:fb:05:1d:1b:5a:aa:7c:91:c7:42:ad:24:67:c0:8a:
1c:7d:38:c9:4a:13:91:7c:06:f7:ca:01:4e:8f:3f:5a:86:5a:
3a:62:5a:a8:db:02:b5:5d:cf:99:78:1d:d4:fb:f2:53:31:f9:
1e:fa:b4:60:fa:09:0f:d8:6d:64:0f:57:a9:fb:82:99:88:34:
21:13:4f:84:84:39:df:f5:23:21:85:d8:68:78:61:c6:9b:f3:
04:d0:33:24:d1:3d:23:c8:63:74:03:c0:fb:e2:75:36:98:25:
82:97:f2:70:a9:fd:50:f0:7e:b7:c8:f2:6d:cd:6c:4c:96:e1:
3d:1e:ce:a2:a6:fe:11:74:01:c1:d4:a3:f4:c0:b9:db:83:c2:
93:cb:fb:68:b5:71:1e:07:bf:e5:50:d5:26:b5:f3:79:4e:54:
2f:17:90:51:31:ff:19:81:80:f9:51:a3:0a:5c:49:d8:80:4a:
44:f8:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:57:41 2025 by rpki-client