Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: p8hJmKHUKsCHFUUmJHrp97f+5Lgu6OCFMnwG+YcpGik=
Subject key identifier: 29:7D:A8:E0:33:85:DB:36:67:15:EE:DB:45:BD:AC:F4:63:A6:02:19
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0196B8C7AFAB09827CA4D34364D22937891F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0D51
Signing time: Sat 10 May 2025 06:00:16 +0000
Manifest this update: Sat 10 May 2025 06:00:16 +0000
Manifest next update: Sun 11 May 2025 06:00:16 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: RxM0kzZZRGOjDQycj/9j1hIihW70oBB0JRJiQN09sYA=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:af:ab:09:82:7c:a4:d3:43:64:d2:29:37:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: May 10 06:00:16 2025 GMT
Not After : May 11 06:00:16 2025 GMT
Subject: CN=297da8e03385db366715eedb45bdacf463a60219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:b2:1a:4b:df:62:a9:98:86:67:7a:98:f7:
ff:ce:b9:46:0a:3d:37:ab:24:3e:7c:08:34:0a:0e:
41:72:22:54:67:a8:0c:00:06:f9:8b:cb:d3:4a:f1:
d1:56:5a:40:9e:63:a1:18:70:21:25:e4:fb:b2:e8:
f3:00:a1:f8:eb:99:6e:e4:27:9d:20:49:8a:27:b0:
4e:64:64:ed:01:f7:99:28:ac:21:e2:a7:e8:64:90:
c3:d3:ba:fc:b5:3b:2d:3c:eb:6d:75:d1:d1:d0:2e:
6d:47:4b:bd:a4:1e:00:4d:2c:f3:64:bc:61:0a:cf:
db:0b:8f:e1:38:2c:18:c4:01:5e:14:f8:af:82:be:
18:18:ef:3b:8b:92:a5:4e:ad:ad:bd:72:6b:49:38:
27:c9:62:3a:ac:19:fc:ca:66:ba:b7:26:01:9f:ae:
dc:dd:ec:cd:48:1a:f7:24:af:1e:24:0a:63:d7:e8:
38:3e:60:9c:1f:a1:79:23:5b:29:11:cf:f9:e1:81:
be:13:dc:a8:17:2e:06:70:b7:31:3c:0e:16:d2:01:
73:69:4f:f5:e9:1d:07:fb:91:a2:62:52:87:7b:99:
fb:8f:1a:df:c1:f3:6d:c8:04:c7:38:1f:9b:08:1e:
11:1b:f4:18:f7:2a:2c:47:89:4f:f4:16:ac:c9:03:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:A8:E0:33:85:DB:36:67:15:EE:DB:45:BD:AC:F4:63:A6:02:19
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:03:57:cc:ff:cb:e1:3b:38:88:b8:b1:60:83:a1:24:4d:4b:
3d:65:31:0e:ca:fb:36:e3:28:2f:14:8b:67:0e:cd:44:50:73:
f5:02:36:3c:fd:eb:48:2e:18:7c:65:4e:9c:c4:0e:0a:5e:f1:
0d:bd:25:20:30:3f:c1:ef:43:24:83:17:ac:f5:2f:e0:68:56:
67:f8:25:1f:bb:19:ba:5a:33:32:93:b0:78:26:92:a0:1d:89:
c3:a9:4b:83:19:93:e5:71:cf:4b:c8:3e:85:f8:69:9b:3c:04:
11:f3:6c:aa:30:0f:95:51:85:0f:c2:71:ed:2a:3b:5e:9d:28:
4e:bf:9e:74:a1:79:89:60:54:40:e8:70:45:cc:a8:7c:62:d0:
cf:04:2b:67:f8:fc:bd:fe:2b:56:41:e3:53:0d:d0:43:c0:4f:
18:53:62:84:b9:4c:09:fb:6f:51:1b:ce:30:c0:68:75:99:f1:
1d:d2:e0:f6:59:bb:56:d9:a4:9f:f3:d2:fb:05:2c:a2:84:e6:
ab:92:0a:f1:99:56:5a:14:f3:5e:f6:93:34:cf:83:4e:6d:96:
54:64:2d:c1:b1:b1:89:00:5e:b5:71:6d:07:c3:86:5c:c7:eb:
69:b2:f5:69:e7:29:e7:92:93:df:f0:36:80:4f:f8:fd:ea:10:
2b:7f:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:22:24 2025 by rpki-client