Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: VFz0tTNTRonN94E8YIlegYXczcL4wxrQAB5iuLrhP18=
Subject key identifier: C4:27:A4:92:61:3A:A2:06:25:30:6B:91:6A:5D:81:E8:C3:EF:AF:8A
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 0196CCF3708274BEE193580C811B9CB46298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0C6D
Signing time: Wed 14 May 2025 04:00:28 +0000
Manifest this update: Wed 14 May 2025 04:00:28 +0000
Manifest next update: Thu 15 May 2025 04:00:28 +0000
Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: 7lKSVA6KnwlhBLZTRN3z8ytrI93jxDxMdByaj3pIrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:70:82:74:be:e1:93:58:0c:81:1b:9c:b4:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: May 14 04:00:28 2025 GMT
Not After : May 15 04:00:28 2025 GMT
Subject: CN=c427a492613aa20625306b916a5d81e8c3efaf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:c2:48:a9:a2:30:ca:0a:eb:db:f0:bc:fd:
0d:27:2f:5c:75:16:e7:38:8e:ad:f2:d1:2e:8a:ed:
03:08:ba:83:0b:0b:4c:d2:73:5d:d3:43:7d:d7:e9:
71:cd:f2:89:08:4c:a8:01:2a:3c:ef:74:07:34:16:
c1:84:fc:d2:3d:85:fa:b9:2a:b1:6a:d6:7c:36:68:
56:78:d1:f4:51:93:54:8b:d3:38:53:fa:e8:d5:e6:
0c:ea:ad:56:29:e6:ae:cf:69:48:da:21:40:61:9c:
8a:c4:50:d0:4a:1c:22:ba:25:9a:88:1a:a7:9d:56:
bc:9d:30:de:04:c1:d0:7a:89:89:9d:67:c5:30:5c:
98:87:c8:1e:f5:b7:f0:af:71:3f:55:26:14:6f:99:
2e:f8:ab:32:d3:ea:98:1d:4e:c1:1c:c0:c4:03:93:
b4:66:45:01:e3:eb:31:e8:fb:b4:e3:76:35:65:9b:
fd:43:2a:f7:b1:9a:98:b5:eb:c1:45:0d:c0:52:39:
f3:ad:3b:26:b7:08:95:f9:59:f3:4f:d2:23:4f:b9:
1f:b3:94:19:32:4e:55:cc:63:0c:3b:de:95:18:81:
4c:64:b6:ab:1a:8e:5b:9b:db:08:ba:d6:79:05:a7:
c8:93:3a:d8:25:21:fc:c6:16:1f:0b:24:f6:77:1e:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:A4:92:61:3A:A2:06:25:30:6B:91:6A:5D:81:E8:C3:EF:AF:8A
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:10:28:d4:cc:e8:69:7d:56:aa:ce:ab:66:e3:51:32:fa:
cd:b7:5a:b7:68:a3:92:5e:8f:4a:06:c7:b6:89:ab:1e:dd:21:
47:01:1e:fd:10:15:70:2b:8e:90:7e:3c:08:1b:b2:37:38:ed:
f5:bf:09:7c:41:cc:72:6e:00:be:36:59:af:6d:33:fe:cc:ac:
45:fb:bd:ad:91:04:80:ce:02:91:52:df:5a:ef:d4:7f:48:ad:
bf:88:19:e8:ed:1e:24:6f:91:3b:04:df:ec:d4:eb:5f:92:8d:
c7:b9:87:61:7d:44:71:4d:9a:ac:19:15:00:81:0b:72:f0:62:
df:36:17:fc:1f:0a:d5:94:9c:1d:3a:4d:b2:d2:f9:f4:12:b3:
54:6f:72:de:0d:d1:4c:79:08:bb:81:38:71:ab:01:24:e5:31:
06:ea:75:87:cb:36:22:11:90:77:12:5f:92:31:96:60:b4:a1:
f5:12:ff:7b:49:ac:ee:6d:91:59:bb:ee:76:20:9a:2a:e5:1e:
89:c2:4b:d7:2b:92:8a:4c:ec:f0:33:08:20:67:54:eb:15:aa:
37:55:ac:6f:15:7e:97:c1:83:8e:4b:ee:9c:54:b7:ae:b0:d6:
fb:3b:ca:9f:9c:b8:bf:8a:af:e7:60:5a:c1:f2:1d:57:d6:e1:
29:fb:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:14:23 2025 by rpki-client