Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File: CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier: E3so+mbXDo6ZdSgj4Yo231ck1tmEnvv0XAHoCISvNTY=
Subject key identifier: B2:DA:3D:57:E7:B5:25:2F:DA:31:06:88:49:0E:D8:A9:A6:D5:5E:1E
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 0196A2E4A3F29AFC34D04485891BA9D1A972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number: 1161
Signing time: Tue 06 May 2025 00:00:15 +0000
Manifest this update: Tue 06 May 2025 00:00:15 +0000
Manifest next update: Wed 07 May 2025 00:00:15 +0000
Files and hashes: 1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: CvPfungzG99JeEUzM0oFEAMr8OeBFqpMKX/yCWX3KXs=)
4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:a3:f2:9a:fc:34:d0:44:85:89:1b:a9:d1:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: May 6 00:00:15 2025 GMT
Not After : May 7 00:00:15 2025 GMT
Subject: CN=b2da3d57e7b5252fda310688490ed8a9a6d55e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:9d:04:10:7f:72:3b:80:6d:4f:e8:19:7f:
6b:8f:09:3b:2c:08:e2:51:e2:96:f2:4c:05:f5:34:
0c:9f:1e:a8:0b:fa:20:cc:65:ab:57:b0:4e:9b:d3:
56:85:3b:24:98:ef:fc:3f:6b:25:97:63:e0:d6:98:
cf:1a:d2:3d:c0:93:07:0d:99:49:ea:37:e1:91:c1:
b2:d2:2b:72:e7:b2:5b:6a:d4:c0:0d:3a:97:9e:f4:
4e:cf:e5:52:c4:5a:58:29:40:42:71:b7:42:0e:fb:
49:25:d3:da:c1:64:bb:01:1c:3c:ea:96:de:b6:ad:
5c:06:f5:8c:18:8c:b5:8e:42:cf:da:8b:ac:ea:f9:
af:5a:23:d9:82:f3:7f:62:71:e7:2b:9a:6c:9e:97:
be:02:cf:be:64:a1:aa:df:8b:5c:54:f8:d5:ef:ac:
54:5e:73:86:11:f9:0e:90:b0:93:bd:58:01:3c:53:
f0:f1:d5:88:e4:88:0f:08:85:7d:ea:02:4d:b8:ea:
64:eb:34:63:c4:73:26:d9:d8:cf:79:4f:58:c2:64:
b8:e1:18:63:d4:68:e4:29:8b:17:f5:b1:63:59:3e:
a1:b1:9d:d0:75:ba:f7:eb:05:7b:57:4d:c5:f0:34:
59:0d:82:48:a0:d3:bb:8a:d5:61:b2:cf:db:68:38:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:3D:57:E7:B5:25:2F:DA:31:06:88:49:0E:D8:A9:A6:D5:5E:1E
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:1d:6d:cb:12:8c:af:22:af:70:37:a5:7b:e1:7c:4e:00:
b1:98:ee:4c:e8:8b:e2:cf:80:8a:63:8d:2b:21:43:f9:ad:49:
19:ca:0b:ac:39:87:52:0c:e5:46:73:af:a8:67:2d:39:64:a3:
ba:68:ea:e6:e7:f6:7c:1b:84:b9:22:d9:d4:94:9b:14:a9:27:
fc:83:8f:e1:2d:a3:33:f7:a8:5e:b3:df:02:f9:1f:3d:51:81:
3c:51:f4:23:b6:9b:c1:6e:0f:10:ff:4d:16:3b:d9:69:a8:f0:
da:e0:5c:90:c5:41:97:85:c0:48:30:36:8b:dd:00:59:40:39:
de:ad:89:d0:a0:0d:7f:3b:d5:db:83:17:6b:35:eb:fc:22:87:
a7:4a:4b:f4:3c:af:a8:c5:37:08:b8:7b:95:94:24:8b:98:37:
ac:e0:5f:c5:a5:17:58:e1:97:22:58:4f:7c:a4:1d:04:3f:f2:
1c:aa:f6:28:23:ff:f0:ff:14:ac:b6:42:6d:93:19:a1:b0:54:
22:ee:fa:5f:91:30:d7:3a:5b:4b:61:25:17:50:3e:9d:d1:3a:
24:f5:5b:73:f3:63:a1:89:9f:5a:88:d0:6a:10:1b:8e:13:1c:
06:c0:7c:2a:23:a4:52:0d:4b:19:0e:83:2d:59:11:0d:c5:85:
64:97:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:02:38 2025 by rpki-client