Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: 06RmbR54vW8vKRsjJBcGJdc7mpdrhVksqqsAsjXnfW8=
Subject key identifier: 26:9F:9B:F6:10:8B:2B:0C:D1:32:05:2E:D4:85:CE:C9:B5:A2:FD:58
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01967A56E7F398B04F236245EDD388B306B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 03:00:37 +0000
Manifest this update: Mon 28 Apr 2025 03:00:37 +0000
Manifest next update: Tue 29 Apr 2025 03:00:37 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: EfOIjNAZucIBSy30NcLhxfGYS0CFc79t3p47DCVlWAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:e7:f3:98:b0:4f:23:62:45:ed:d3:88:b3:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Apr 28 03:00:37 2025 GMT
Not After : Apr 29 03:00:37 2025 GMT
Subject: CN=269f9bf6108b2b0cd132052ed485cec9b5a2fd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:74:7e:e9:e9:0d:a5:39:d9:1d:d4:f2:d7:
d6:bd:da:37:85:6a:aa:15:47:0f:7b:67:58:50:ce:
81:f0:b0:e9:45:86:f6:b1:74:a9:16:cc:c0:38:e2:
e4:1f:c2:da:27:54:23:80:40:8a:fa:1a:14:53:0c:
7b:af:af:80:50:51:56:20:3c:d8:dd:62:f5:48:5e:
e1:15:85:12:9a:bd:d6:12:bf:61:2d:64:1c:03:a3:
22:e3:6a:93:96:cd:76:79:fc:2d:cd:c0:fb:6e:bb:
1a:1f:86:33:4f:0c:46:9d:84:21:60:74:26:77:40:
9d:6d:a6:c9:02:88:b7:9b:20:10:40:dc:d0:cc:9f:
d6:5e:6b:05:d8:a4:9c:98:02:5c:91:59:09:dc:d7:
27:fd:ae:8d:3b:d1:a7:86:44:af:39:35:0a:22:24:
1b:6d:53:49:fe:0a:38:58:c4:8c:d2:44:ef:23:dd:
15:ad:fe:91:0b:c2:49:6d:9b:7a:16:ac:96:97:a3:
b1:c0:25:33:d4:ab:5f:2f:6d:43:28:14:db:50:24:
78:8e:44:74:0d:55:88:8c:e1:27:06:e6:cb:c1:07:
33:3b:ae:65:99:da:e2:06:12:a7:d1:9f:9f:24:66:
a7:eb:24:ec:68:62:cf:62:e6:4f:06:33:b2:fd:df:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:9B:F6:10:8B:2B:0C:D1:32:05:2E:D4:85:CE:C9:B5:A2:FD:58
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:08:ff:63:df:08:4d:c8:67:8a:6b:bc:2a:80:38:23:da:
5f:60:f8:77:db:c9:1d:29:5a:8c:0c:1b:68:c1:37:df:51:d9:
8a:17:cb:43:87:77:b3:73:2c:20:ab:20:20:91:5b:c5:8f:1c:
2e:d7:00:8f:86:dd:19:52:d9:69:42:bf:9e:cb:f4:dd:fd:45:
fe:9f:93:82:52:40:51:ed:49:f5:a8:19:2b:dd:34:91:62:e0:
cf:32:24:ee:8f:63:24:3c:da:b3:73:94:70:6a:d8:53:e9:1b:
ec:ce:d4:eb:18:5f:22:3f:a8:11:af:69:3a:04:48:7a:dc:16:
09:13:74:aa:00:44:74:3f:bc:26:b9:44:04:17:db:99:72:c4:
8c:c4:9d:0c:ef:2d:3f:51:00:47:fb:72:72:1b:92:ac:f8:5f:
d3:7f:c5:7d:17:12:cb:de:7b:c3:33:bc:71:13:ae:3d:9e:e2:
e4:10:30:9b:e3:27:64:9a:c9:75:b4:3a:25:ac:e3:48:ec:e0:
96:08:89:18:e2:78:e6:70:e7:97:b1:0f:6f:81:e0:16:e7:a5:
0e:da:4f:36:f3:39:fe:3d:8f:a3:ae:0d:86:77:13:b6:3f:78:
8c:97:39:9a:3b:06:69:ed:a1:b0:ec:62:81:22:fe:a4:28:12:
5c:18:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:45:55 2025 by rpki-client