Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: PQkw/dEzbV7aDOUzltj98hu5t2qqXEQHdIQckHHbdO8=
Subject key identifier: B0:0A:F8:B0:8E:33:2F:CD:2A:39:AA:21:F0:83:4E:37:ED:2F:B5:79
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 0196BFDCA3433D3A9535A51070593C02248B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0CD0
Signing time: Sun 11 May 2025 15:00:30 +0000
Manifest this update: Sun 11 May 2025 15:00:30 +0000
Manifest next update: Mon 12 May 2025 15:00:30 +0000
Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=)
2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: tRkjBoZ2EmbQWOlu2gGP7uxLmPdJVElpJZyXRd9N2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:a3:43:3d:3a:95:35:a5:10:70:59:3c:02:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: May 11 15:00:30 2025 GMT
Not After : May 12 15:00:30 2025 GMT
Subject: CN=b00af8b08e332fcd2a39aa21f0834e37ed2fb579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:1d:df:9e:e8:52:7e:21:84:b4:6d:5f:73:
19:7a:3c:99:f5:83:90:ae:48:12:12:b1:ac:0d:53:
be:c1:bb:ef:21:0e:d1:b8:85:7c:89:fd:fe:f0:bb:
59:13:78:29:d8:45:9f:a6:11:90:05:24:41:0a:f5:
66:27:e0:8b:56:0c:37:b4:74:5b:29:d7:a4:01:12:
e7:a7:cc:3e:22:2a:75:e1:ff:31:70:93:e3:d9:7c:
e6:b6:85:2a:b7:7c:49:90:85:f1:3c:85:c6:79:c0:
9e:a9:4e:53:21:0f:f8:10:39:cc:4a:11:35:e6:59:
a7:d4:de:45:7a:31:53:81:15:ae:e1:c2:f3:69:f3:
9b:19:2f:50:ec:a4:51:57:a8:6c:75:cb:6f:3d:bc:
b8:ee:b5:36:63:0a:e8:8a:78:a7:8e:7b:35:f3:c1:
6c:d4:28:54:db:84:dc:e7:cc:ea:6f:f5:06:c2:44:
e6:93:90:c4:3f:57:50:bc:ec:ef:41:80:fe:0f:03:
25:c3:42:f2:47:d8:f6:45:50:a1:e0:f6:9d:6a:ca:
46:f9:c6:f6:28:81:b3:e7:1a:32:07:17:0a:33:90:
b4:07:96:b8:c0:95:45:9b:8c:53:0f:18:be:d6:2e:
2a:f9:27:80:5b:3f:49:93:9c:4b:dc:06:66:f2:98:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:F8:B0:8E:33:2F:CD:2A:39:AA:21:F0:83:4E:37:ED:2F:B5:79
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:65:18:a0:83:e4:84:54:2e:05:a9:47:dd:6c:55:54:7f:50:
67:b1:b9:ee:c3:61:7c:30:c4:e6:e3:00:c4:60:67:c4:80:43:
f1:3a:27:86:6c:36:f5:ef:e6:8b:4e:bf:2a:5b:fa:02:dc:f3:
c2:52:8c:d9:2e:7b:e5:84:4f:35:bc:44:35:da:f1:14:32:49:
9d:ff:d4:0c:0b:09:cb:8d:9b:a0:6b:81:e7:87:07:32:c5:b3:
be:16:0b:f2:1b:93:b7:4b:3a:e6:53:41:57:fa:8a:e8:ff:de:
dd:55:7e:cf:57:d1:2d:4f:5d:bc:84:cb:59:8e:59:55:0c:d3:
b7:c9:59:ff:32:c7:ae:40:13:cc:a8:ce:af:63:b6:78:9b:64:
0a:21:f3:00:8d:99:28:59:f0:66:64:8d:89:40:51:4b:4e:3f:
c7:6b:47:ac:76:3b:8c:d8:e4:f5:be:70:61:df:e7:f8:33:80:
b8:a9:ef:f7:73:83:f8:93:70:1a:95:22:7c:0e:0a:a1:cf:33:
f1:25:62:35:7c:1a:97:18:b6:18:cf:f2:f8:a2:d4:e3:49:00:
c9:f1:c8:f7:e1:ad:46:0a:7b:64:da:13:17:0e:34:45:38:7d:
4c:98:de:be:1f:7c:de:da:cf:36:eb:70:e1:03:f6:01:60:86:
60:9f:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:25:01 2025 by rpki-client