Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: LJBRZWZLG2ZGoP16d+rfQUnh3s8XNllwFVMD5Q6b/fI=
Subject key identifier: 6D:A6:3D:A7:8A:5A:3E:A5:A5:00:24:68:EB:73:7B:10:08:DC:B3:88
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 0196B2213EECB442105C65E36D32C00F1F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 11E7
Signing time: Thu 08 May 2025 23:00:45 +0000
Manifest this update: Thu 08 May 2025 23:00:45 +0000
Manifest next update: Fri 09 May 2025 23:00:45 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: kMYS1+xvZ6BrVBfufuEzMi+sACoKRXAGms+mtCHLh9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:3e:ec:b4:42:10:5c:65:e3:6d:32:c0:0f:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: May 8 23:00:45 2025 GMT
Not After : May 9 23:00:45 2025 GMT
Subject: CN=6da63da78a5a3ea5a5002468eb737b1008dcb388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:82:2d:1d:5d:87:e3:d5:0d:a3:38:16:c5:
eb:9d:cd:f1:9f:ea:68:2d:90:eb:6f:67:fd:81:f6:
31:4f:ee:ce:29:3b:1c:1c:96:76:89:e3:2c:8d:85:
96:88:8a:74:a5:57:09:75:e6:a3:c7:e6:57:ce:18:
ae:e9:29:6a:82:4b:5f:13:88:cf:73:29:d7:77:a2:
a6:00:22:fe:0a:14:50:9d:88:db:e7:a2:c5:87:7b:
10:64:d1:fc:00:88:75:13:5e:d2:b4:56:bb:8d:1c:
64:bd:08:68:57:f2:e4:75:b7:a4:70:42:c8:05:2c:
73:e1:55:e0:d8:43:06:62:c4:be:ae:2c:69:d7:8e:
39:e7:ce:25:3f:6f:e7:b0:19:c7:70:4d:5b:94:c2:
4e:39:21:da:45:57:6b:51:34:63:75:2b:dd:1f:f8:
6d:34:cb:8e:0f:6e:a2:6f:18:ce:84:c6:2a:e3:d7:
c5:d8:1c:16:d1:68:30:18:40:ab:cd:5c:92:37:67:
c4:12:1a:54:b8:32:71:63:5b:f2:2a:4d:5f:3c:c5:
69:b3:08:a4:f8:95:a8:3c:48:60:54:dc:69:03:05:
fd:0f:ba:6a:0e:f4:9c:5c:f0:7a:4f:0e:55:fe:95:
5d:a0:94:60:7a:61:41:d0:11:a8:6b:70:0c:27:23:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:3D:A7:8A:5A:3E:A5:A5:00:24:68:EB:73:7B:10:08:DC:B3:88
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:2b:0f:a5:11:c8:6d:2d:99:52:c7:18:07:0c:3c:bc:9d:
a1:84:cc:ab:92:95:04:59:6f:df:93:90:07:06:6a:a2:03:0f:
83:a1:f9:40:cb:be:5b:52:62:46:34:0e:8d:2f:6b:61:ba:04:
c9:24:0e:8e:44:f3:2b:f9:dc:08:19:0d:a7:4b:17:6c:fa:e6:
c2:b1:65:20:05:62:70:c2:c3:47:7b:5d:f4:27:b5:c7:36:d3:
25:33:db:1d:da:ff:e1:45:fe:8a:d2:f4:a7:a5:bc:ee:91:d1:
60:e8:b1:b2:c2:bd:de:0b:54:ca:02:d7:1d:fb:ce:b7:ac:fb:
eb:b0:d2:f9:a1:5d:89:e3:e9:cc:8e:da:45:f2:dc:ed:2e:5e:
f3:1f:1b:9e:ee:5e:df:5d:48:b0:50:9f:d2:14:ea:51:df:f8:
3c:2f:c0:7a:4a:40:cf:a4:9b:b9:bf:83:c9:a3:44:84:df:ff:
03:5b:34:38:68:a3:ed:ec:44:22:0b:3c:82:0d:ad:fb:8e:50:
77:15:d8:ee:d3:7f:ab:b2:1b:d5:8f:8f:4f:74:0b:2e:b3:5b:
3a:58:fb:db:b1:43:6e:27:63:d8:e3:d2:d5:2e:86:4d:db:3d:
27:54:05:1e:0c:ac:e0:06:34:48:8e:2f:5d:c8:46:eb:e1:b8:
6d:79:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:14:53 2025 by rpki-client