Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: 0U1YgQk4g0YaPOl79k8uE6TbTnpB9hc0NVxC9kqL3ZI=
Subject key identifier: AC:A2:BD:6B:C1:C5:84:91:3E:46:3D:F5:FC:1B:34:69:59:F7:7E:51
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 0196C1CAFCC6E97EED9EFAC465DE45F9C896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0527
Signing time: Mon 12 May 2025 00:00:27 +0000
Manifest this update: Mon 12 May 2025 00:00:27 +0000
Manifest next update: Tue 13 May 2025 00:00:27 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: MdzqBo/uP6y1hJtNbL3hl9njSLiS/sVRZKVy3H0lPS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:fc:c6:e9:7e:ed:9e:fa:c4:65:de:45:f9:c8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: May 12 00:00:27 2025 GMT
Not After : May 13 00:00:27 2025 GMT
Subject: CN=aca2bd6bc1c584913e463df5fc1b346959f77e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:fb:5f:c0:ea:53:84:d2:ed:a7:16:f4:da:
e3:a4:35:c4:f1:f5:fa:15:7e:c9:20:f1:fa:3b:5b:
e8:04:6c:32:6e:d7:c7:ec:83:ed:5b:2d:75:40:f2:
8d:16:c4:29:77:6e:46:36:e2:de:8a:b6:7c:47:87:
51:40:15:aa:86:19:26:dc:75:f5:19:66:b4:86:d5:
49:67:b6:77:60:8f:51:d6:1b:56:dc:b3:ac:0e:9e:
4c:99:52:46:6c:54:17:ec:32:83:35:50:1b:c8:c4:
58:32:a5:76:96:80:3c:08:4a:c1:b2:e3:4b:f5:4f:
4b:11:c2:f8:28:ea:f2:e9:1d:a2:9d:56:cb:f9:49:
8d:75:15:f3:d8:b6:7c:9b:85:cb:71:9d:29:fc:fb:
02:ac:55:7d:70:a8:35:bb:5a:70:34:ed:1b:6e:eb:
66:ef:9b:32:05:21:50:92:54:83:6e:14:18:6a:3a:
7e:9d:c9:4a:2c:2e:cb:3c:f2:8d:8c:bd:0c:2b:cc:
e9:3c:c4:02:67:c1:d6:61:6d:1f:e2:7e:8f:99:fe:
44:9b:68:bb:2b:3d:ac:9a:5e:a0:8f:4d:3e:8f:1e:
5f:3f:bf:59:cc:b9:52:67:4e:6e:cf:aa:55:8e:ca:
c8:6d:ce:5e:9e:63:88:b6:a3:bb:37:29:f3:bb:19:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:BD:6B:C1:C5:84:91:3E:46:3D:F5:FC:1B:34:69:59:F7:7E:51
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:34:eb:49:7a:8c:77:30:53:78:9c:81:a1:2f:c5:a7:7c:00:
e8:a0:4d:61:ac:b0:d7:62:28:1e:a0:13:4d:46:d0:aa:5c:b5:
f3:fa:0a:db:77:1f:bf:46:a9:98:7d:b1:1b:33:c9:ea:72:90:
c8:72:f2:53:07:fe:2c:c2:ee:f7:4c:a7:c4:2e:2a:4f:26:b7:
df:3e:35:15:dc:99:c2:2f:de:02:f5:3c:12:c9:9c:4c:88:62:
33:47:bf:ad:1e:30:19:06:28:fe:97:35:b8:03:ce:51:df:9c:
cd:9f:3e:df:b4:ad:8e:c5:f1:4b:41:4c:60:c3:78:9d:ea:6c:
fb:ab:0d:52:2a:2e:fd:0b:b1:bf:e0:22:58:f2:34:22:0b:d2:
81:8c:68:5c:94:01:42:79:f7:1d:d8:82:35:50:da:63:24:ec:
d0:21:14:6d:36:42:7a:13:0e:c5:a1:1f:00:07:70:91:33:b0:
a8:c7:ab:19:3f:3b:79:66:24:53:b8:82:18:e4:5a:06:92:c1:
cb:52:77:2e:e9:c0:e5:f6:a4:e7:a0:1a:ee:78:25:f7:2a:b6:
60:fd:5c:0c:3e:24:a6:aa:45:d4:44:be:32:4c:0b:40:4a:c7:
1b:29:aa:66:2d:e7:58:e6:a1:33:0d:c6:c4:02:3a:79:f4:58:
10:15:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:48 2025 by rpki-client