Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: Cjn+r6B0l8QxSclnOoozYg+rEj9oIM9UxmVkjfQ8uaQ=
Subject key identifier: 4E:A3:77:8F:82:C3:01:BF:F4:22:71:58:29:51:5E:5E:F9:2B:84:B9
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0196B7EC283959E02192517E7C389509A949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 04DC
Signing time: Sat 10 May 2025 02:00:29 +0000
Manifest this update: Sat 10 May 2025 02:00:29 +0000
Manifest next update: Sun 11 May 2025 02:00:29 +0000
Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: OjDmUuxh2Y/T0PolhLn0ZH5BB4nUHuOQhoivJq5sAe4=)
3: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (hash: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:28:39:59:e0:21:92:51:7e:7c:38:95:09:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: May 10 02:00:29 2025 GMT
Not After : May 11 02:00:29 2025 GMT
Subject: CN=4ea3778f82c301bff422715829515e5ef92b84b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:e0:38:60:53:b8:94:5d:e6:46:5e:69:c4:
3d:fa:c4:6a:42:ec:06:9f:ef:1d:3a:0a:e8:0d:9f:
1b:5e:29:1c:53:bb:f4:49:36:44:19:49:3f:5c:0c:
c8:cc:c5:69:6d:24:59:fd:e1:b5:dd:dd:01:51:ec:
e9:b9:3e:99:fc:cd:2a:b9:0e:7e:03:10:f9:64:f5:
dd:8d:82:88:01:e6:fa:8a:2f:81:99:45:dd:3f:9e:
3d:51:6b:e5:48:47:da:ab:da:e5:e5:e9:2e:83:07:
10:44:d6:73:a4:72:9e:07:ed:2c:5a:ad:50:a6:d1:
79:d4:eb:72:94:ee:e9:e9:a2:27:17:85:79:4f:ab:
04:d8:77:80:c2:08:4a:22:d8:50:be:6f:4d:6c:24:
fe:e1:b2:36:2c:69:87:a2:ec:36:5f:8c:e2:22:ea:
89:c6:1e:48:5b:d4:6a:af:fd:24:eb:82:29:68:c0:
43:e5:18:36:00:fd:5f:c8:ce:77:e5:3d:7d:00:ad:
2d:f0:67:ef:53:a7:b5:08:45:41:9d:26:86:dc:36:
3d:97:cb:e9:de:bc:a2:2a:bc:1d:1b:02:3b:95:d5:
22:4b:ae:7f:34:78:0b:dd:a3:12:f4:64:3d:34:db:
92:10:d2:75:c4:e5:ed:6b:a9:79:a9:09:57:c9:01:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:77:8F:82:C3:01:BF:F4:22:71:58:29:51:5E:5E:F9:2B:84:B9
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:c5:19:74:81:c7:b4:fa:b7:e7:ba:a3:d4:a5:b5:f6:b2:
42:b6:df:c8:63:28:9f:c5:7e:69:16:92:77:6c:73:8a:f6:09:
2d:50:76:04:4e:e3:d5:cc:e4:c9:20:4a:e1:f6:24:fe:98:16:
6e:5d:2a:4d:77:51:2f:b6:65:d4:72:7d:6b:67:30:a9:c8:c5:
1e:db:65:36:86:1b:b8:7c:16:05:a0:f0:1d:9d:54:e4:c0:0b:
93:de:8a:d2:4f:ec:72:b3:14:19:a2:9c:8f:dd:9c:13:de:f7:
67:b6:1c:ff:c4:ba:ff:1c:45:e6:e8:71:3e:8d:bd:0a:6d:ec:
5f:12:6b:13:a3:ca:c5:39:38:ff:6b:75:3b:e8:1d:37:72:7b:
c5:a4:2d:71:e2:d2:0e:ec:b8:97:40:aa:46:b1:32:06:7b:94:
60:99:51:38:3e:06:6a:92:ac:37:2a:5c:ae:85:be:67:3b:0d:
ac:0b:2e:24:81:db:27:86:5d:4f:bd:a1:90:20:24:fa:fc:66:
ec:e5:7a:10:3a:c7:1f:8e:db:cc:5c:56:78:fb:57:4b:4b:6d:
23:4c:62:cc:ae:c2:05:35:ed:b5:52:4a:5c:59:ce:da:d3:b2:
56:69:c0:1f:87:30:a9:0b:c9:d6:18:39:39:35:05:67:33:fa:
9f:a7:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:57:03 2025 by rpki-client