Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: JOmr6rnDgJq1LvzykB8YpU6HgmjkFjdRjant3xPWhgI=
Subject key identifier: 00:98:78:C3:50:D0:06:72:AB:95:47:25:F8:A0:8E:16:83:33:FE:B1
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 0196BD493527DC2971686C3BD8A7CE60186C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 03:00:13 +0000
Manifest this update: Sun 11 May 2025 03:00:13 +0000
Manifest next update: Mon 12 May 2025 03:00:13 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: aprJifj13MmoYBWEgcbyDiWI2xyr6sPo5ZpBUqfIf48=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:35:27:dc:29:71:68:6c:3b:d8:a7:ce:60:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: May 11 03:00:13 2025 GMT
Not After : May 12 03:00:13 2025 GMT
Subject: CN=009878c350d00672ab954725f8a08e168333feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:b6:ac:aa:09:aa:26:00:2b:12:bc:d1:28:
9a:ac:c9:89:80:9a:a9:40:58:df:14:98:3d:d7:be:
00:ab:a0:d2:42:67:6b:9d:77:78:08:b3:2a:1c:8e:
27:d6:61:e3:9a:5d:41:ca:9b:aa:aa:b3:41:ec:6e:
fb:ab:20:13:f1:04:e3:f2:95:75:8b:a9:63:33:f9:
eb:ac:cb:c4:3f:89:ea:b4:45:61:90:a3:a4:dc:61:
17:ac:10:d8:4c:4f:62:8a:36:0f:64:d5:ed:6c:13:
f7:5b:6d:18:d0:d6:a9:8d:ed:af:1c:25:31:21:5d:
dc:48:14:a2:cc:1d:b3:b5:a7:76:05:23:f7:53:0e:
f6:29:99:fd:a5:d8:19:ec:28:77:8c:bf:71:b7:b2:
e4:dd:3d:e4:3e:53:c9:f8:81:68:72:c4:83:21:a5:
10:e0:23:ab:61:66:e9:aa:8f:9a:98:87:5a:2d:58:
70:da:0e:af:3a:0a:e1:6e:82:74:ba:50:82:90:4d:
44:e3:ec:c5:10:88:1e:75:a5:ab:7c:cb:11:05:30:
35:fa:98:cf:2f:71:13:f2:9e:46:de:6a:ce:3f:6d:
bc:94:ac:c2:dc:d8:8b:13:cb:68:fa:76:17:45:27:
09:0b:28:3b:67:bf:36:24:da:5f:83:ed:21:e4:1c:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:78:C3:50:D0:06:72:AB:95:47:25:F8:A0:8E:16:83:33:FE:B1
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:0c:62:d8:09:53:2a:f9:79:16:bf:b5:88:50:f9:1c:4f:
e9:5d:19:91:4d:c8:74:31:1a:a0:eb:f9:b0:d5:4d:1e:ae:d9:
dd:41:80:22:ec:61:96:06:a7:97:69:c6:07:4b:24:b1:1a:74:
7d:b7:48:9c:6d:8f:42:ec:3d:b2:16:1f:fa:ab:d9:1f:27:f1:
0a:aa:42:1f:b7:9f:b0:62:fe:db:91:53:94:db:54:55:ce:0b:
63:1f:8c:13:6f:fb:29:14:0f:21:ac:c9:6a:65:ff:69:9f:56:
39:bb:d8:15:37:9e:cc:5a:bf:c3:ce:61:78:4e:4f:11:86:5b:
0f:2e:b2:e6:1e:0c:75:a9:b0:ed:9f:8b:c2:2d:d0:62:18:62:
34:95:6b:ec:a0:d2:c9:76:f9:ae:5c:8c:79:d0:0b:1d:9d:4d:
08:79:b6:ea:6d:89:e1:e0:05:a9:58:88:b0:60:69:ff:f4:44:
e9:1b:bd:83:5a:ac:05:43:c5:bb:15:e2:e5:46:6e:8c:39:5c:
32:1f:12:44:dd:9c:b7:60:96:6d:71:1e:97:50:d3:04:19:30:
d9:c7:ae:0a:a8:7a:c6:f3:0c:4d:2b:ba:56:8f:46:78:cc:84:
c1:ad:63:f7:5a:40:0d:19:df:e8:4e:5e:0a:c3:a3:f3:a8:f4:
fc:a7:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:30:50 2025 by rpki-client