Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: dhaUX2dLllL98qezKJBDszVwEZ+FkiNIONOgmBgmLBI=
Subject key identifier: 09:79:22:24:CA:19:95:B9:FC:57:FC:F2:A3:2B:7A:92:D7:5F:0E:81
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 01969FAD01CD66A6A4E3EF03EBB8BFF9625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 1188
Signing time: Mon 05 May 2025 09:00:37 +0000
Manifest this update: Mon 05 May 2025 09:00:37 +0000
Manifest next update: Tue 06 May 2025 09:00:37 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: V6iapR5I2BIQdjcc97heF2LDtGGgYnHoi3w9y7YSdvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:01:cd:66:a6:a4:e3:ef:03:eb:b8:bf:f9:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: May 5 09:00:37 2025 GMT
Not After : May 6 09:00:37 2025 GMT
Subject: CN=09792224ca1995b9fc57fcf2a32b7a92d75f0e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:d2:37:00:71:1d:88:d5:4c:d4:bb:8f:3b:
0b:1e:4f:a2:6e:e7:ef:34:5e:6b:b6:c3:fc:65:a1:
a4:86:52:4d:47:a2:fa:ae:0a:5c:c6:fc:4e:2f:f9:
a5:aa:b6:a7:43:35:88:bd:86:e7:8a:04:80:3e:e5:
fd:fe:22:fb:16:e0:97:5b:25:36:e2:a0:81:fa:1d:
00:7b:fa:aa:09:a5:f4:28:64:ed:bf:be:8c:54:3e:
c8:75:54:61:be:14:f5:9d:4c:3f:1b:90:49:90:47:
86:63:d0:2e:68:2f:a0:ef:6d:ff:42:07:7e:c1:46:
37:70:0f:f9:14:50:0d:0d:1b:cd:e8:89:b5:1a:5a:
e5:aa:e0:69:b2:fb:39:56:50:de:0c:da:19:4e:ff:
eb:5f:68:43:bf:08:14:c4:72:6d:45:1f:31:27:94:
ec:85:ff:6b:25:55:ab:af:0a:48:b7:98:14:73:1f:
57:fd:c5:6c:8e:a8:e6:02:b5:ab:21:91:e0:f4:51:
0c:70:03:15:61:d9:ed:a2:00:56:8f:11:31:f1:e8:
05:e1:cd:81:2a:23:56:5d:8d:54:da:ff:d2:42:96:
03:16:56:55:74:a8:f7:05:1b:82:59:d1:40:5c:d4:
f4:67:fd:81:06:fe:a3:d4:c6:16:be:16:20:18:68:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:22:24:CA:19:95:B9:FC:57:FC:F2:A3:2B:7A:92:D7:5F:0E:81
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bf:86:ca:a7:2f:f7:d2:29:f8:72:60:6b:78:01:79:d4:30:
71:15:d7:a2:29:24:b5:f6:ac:e5:c6:33:3d:35:bb:ad:cc:e5:
bd:96:df:65:cb:f0:5d:43:00:a4:d4:28:9b:65:da:8f:d3:c8:
92:37:14:13:f3:7b:51:24:d5:2c:37:ff:24:9f:52:da:ff:60:
ac:db:fa:28:e8:a3:6a:2c:30:6c:94:a8:76:2c:e2:de:3c:76:
81:cd:14:a5:7e:1c:fb:89:78:cd:57:68:96:f9:70:94:ab:61:
46:aa:e7:8c:28:4b:13:4d:03:91:88:f3:2f:20:83:47:4a:6d:
36:3e:76:82:f1:ef:ae:4c:f3:a9:34:2e:5a:d2:ca:8e:19:ee:
e8:33:85:3e:19:ec:8f:d0:a2:26:c3:19:b1:64:79:e4:a6:2a:
f4:89:7e:ce:68:99:d0:82:1a:59:bc:dc:f7:7b:61:0a:4c:0f:
ed:f3:74:82:95:f4:e9:42:84:6c:54:0c:ae:ad:46:85:aa:15:
54:05:72:9e:3a:0e:43:60:fd:d0:ee:5c:f1:dc:20:16:8c:96:
f5:e9:8d:65:35:72:34:71:2f:09:1e:c5:47:47:ad:a8:a7:73:
6e:25:e4:28:ee:e7:25:ed:7e:cd:1b:64:40:52:c2:bf:1e:8e:
7d:a0:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:55:51 2025 by rpki-client