Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: SQZlA2F/fzFHvjanoO9l0PcaSxfO15/awIh6L1wcfRk=
Subject key identifier: C1:FD:E2:BC:2E:2A:79:53:6F:83:30:0B:A7:25:B2:64:BC:4D:17:8F
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 0196BF38217BC583DD3B33F0CD3A4641595D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 14C8
Signing time: Sun 11 May 2025 12:00:48 +0000
Manifest this update: Sun 11 May 2025 12:00:48 +0000
Manifest next update: Mon 12 May 2025 12:00:48 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: lA4WuXK8SrNsjMU9epuc23lYvDy5tCT3vmb3whsUCHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:21:7b:c5:83:dd:3b:33:f0:cd:3a:46:41:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: May 11 12:00:48 2025 GMT
Not After : May 12 12:00:48 2025 GMT
Subject: CN=c1fde2bc2e2a79536f83300ba725b264bc4d178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:00:33:b1:1e:39:bd:ef:f9:b7:80:3f:47:
24:69:3d:37:85:03:7f:c3:07:4f:8e:66:30:2a:6b:
ec:7a:3f:d4:5a:96:95:2d:bc:61:3c:5d:77:71:10:
69:5f:6e:af:ca:f2:85:ca:19:5f:6f:72:d2:e2:4f:
14:59:9f:1c:58:04:28:e5:9d:cf:9e:51:6a:5c:0c:
3b:c1:8b:51:81:61:0f:44:42:89:1b:0f:a3:8a:1f:
a7:a9:b1:b8:55:59:6f:92:1e:97:f8:35:21:c4:21:
41:06:58:53:f1:4a:8f:b7:73:4b:a0:f8:ba:ab:60:
01:5a:8e:62:03:2c:43:e2:9a:b2:10:af:0d:9d:ca:
cf:1b:5b:59:2d:ad:be:37:13:0d:6c:8c:6b:38:2d:
52:fe:2f:ef:ae:d3:de:24:d4:26:e9:45:cb:df:2c:
ae:fa:a3:33:13:4b:5c:c3:f7:7e:85:9c:d5:57:13:
be:bc:02:e8:00:a3:f9:8a:e0:5a:3e:29:20:11:bc:
8a:97:01:b3:98:3e:43:4b:49:e3:f8:42:d4:d7:6f:
62:08:cc:27:b2:c7:5c:0c:f6:ec:a4:a5:2e:87:29:
98:fd:88:be:0c:34:48:f0:2c:63:c6:fe:83:ee:d5:
43:d3:21:b5:88:de:9b:c8:f7:8b:72:ec:12:2d:66:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:E2:BC:2E:2A:79:53:6F:83:30:0B:A7:25:B2:64:BC:4D:17:8F
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fb:77:9a:09:db:e5:48:b5:18:a3:53:9c:63:19:65:09:df:
71:8d:57:54:62:73:4f:49:9d:af:58:b9:43:39:9f:5c:c6:8c:
d3:60:00:2d:01:c6:b8:c8:cb:f6:ce:bb:75:f5:f1:28:61:0e:
78:cb:1f:a3:98:8a:7c:d5:8e:aa:1e:72:1b:2b:9a:88:fc:46:
76:fc:84:35:8a:99:c5:21:38:8c:73:cd:e1:71:d4:0d:00:84:
e8:db:91:07:8c:c1:63:28:f0:b4:a1:e3:85:3a:2e:da:c0:bb:
e4:60:f6:93:2d:fa:99:b9:15:75:ac:1b:af:6e:2b:53:e6:c5:
43:d8:17:07:38:34:e5:91:a1:17:0c:1a:52:10:4e:48:f6:ae:
b9:ba:0c:a5:e9:99:48:70:a6:23:48:2c:03:3b:8a:ff:72:2d:
cf:ef:79:d4:19:25:d1:8c:0f:01:b2:ec:86:b3:34:49:e4:a7:
8f:00:bf:5c:f1:91:26:d2:b5:0f:f9:a5:4a:07:c7:b7:0d:95:
de:17:1d:48:04:a6:aa:4b:67:26:92:41:26:0e:1f:6d:7f:c1:
ec:b7:f4:84:46:6f:af:e6:f7:96:27:f5:d8:53:2c:83:5f:a6:
9d:15:73:b2:a4:d8:66:80:9f:c5:1e:25:70:1c:92:c5:b0:ce:
3e:f8:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:17:31 2025 by rpki-client