Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: jEjX/bMzJF053FtYmfHZ43telhXySpAATI4u4y/959s=
Subject key identifier: 91:DE:17:EC:60:2A:32:F5:DD:65:8E:28:D1:C7:FD:A2:5A:2A:9F:41
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 0196778C9AAB07592F1FE430695077DBFBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0848
Signing time: Sun 27 Apr 2025 14:00:25 +0000
Manifest this update: Sun 27 Apr 2025 14:00:25 +0000
Manifest next update: Mon 28 Apr 2025 14:00:25 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: OzOIQk/BUan4VJtY61Svz5TbuToq+n7otN0toV5YeiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:9a:ab:07:59:2f:1f:e4:30:69:50:77:db:fb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Apr 27 14:00:25 2025 GMT
Not After : Apr 28 14:00:25 2025 GMT
Subject: CN=91de17ec602a32f5dd658e28d1c7fda25a2a9f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:ac:57:de:3c:6b:89:0d:61:f9:c0:f6:a5:
3d:54:8f:c7:65:09:26:6a:2e:4e:60:0e:78:d9:bf:
33:1b:bd:ec:da:5b:02:48:1e:58:47:fa:3d:05:79:
d8:bc:04:91:2d:f3:ab:a6:b1:e7:51:56:eb:dd:ed:
67:af:26:f0:23:0a:da:02:f4:87:68:4a:2d:d6:00:
a3:d7:5a:68:60:8f:92:9f:71:2f:26:e0:13:a8:cc:
b8:46:bd:73:e6:44:e7:05:85:83:48:a5:68:21:3b:
bb:52:37:01:71:38:9e:7d:99:62:98:1e:b4:de:1f:
96:b2:96:3b:f3:9a:69:d4:c0:f6:e1:cf:64:e5:23:
30:7d:b3:68:6d:77:6e:17:0c:16:83:d8:8a:33:d6:
1c:cc:30:bb:fc:c7:af:bf:2a:e6:d2:f5:e0:73:af:
e4:1f:2f:8e:06:73:fd:1f:d6:0a:f2:09:d4:d8:12:
bb:56:fd:c4:85:8c:4f:a3:fa:20:f6:14:25:46:ac:
9e:ee:fa:12:be:aa:87:dc:1f:c1:e6:71:a0:ef:c6:
97:dc:df:30:88:07:d2:5d:8a:15:36:10:a9:38:eb:
09:db:37:de:08:79:71:e2:bb:5f:49:10:58:dd:6b:
f0:91:13:e8:5d:80:e3:66:40:13:ed:3a:e1:1e:61:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:17:EC:60:2A:32:F5:DD:65:8E:28:D1:C7:FD:A2:5A:2A:9F:41
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0b:32:07:c4:85:42:2d:81:15:ff:55:b0:79:66:26:bc:f4:
63:6f:62:c9:bb:1f:d6:c4:73:38:32:ea:0c:84:74:2d:ac:36:
df:2a:42:df:95:1a:d6:39:29:6a:94:17:7e:d4:7a:63:17:96:
a5:f7:f7:c9:50:4a:64:ca:24:6c:79:93:64:63:f5:fb:37:a9:
1f:22:0b:f5:7d:3e:47:07:5d:9c:01:e4:5b:42:f5:ec:c4:09:
52:af:2f:b5:7c:b2:94:ea:d7:56:49:e5:6d:be:e8:f2:29:d7:
74:17:de:fe:c3:03:d9:ef:53:87:09:51:45:79:10:60:34:0e:
cf:b8:d7:14:b2:c2:d4:9b:cb:9f:e8:1f:a5:a7:cc:70:b3:8d:
eb:d8:f2:9b:fd:86:1b:b0:a5:b3:c6:a9:6d:cc:c8:1b:89:91:
f2:61:7f:47:99:8f:54:a7:36:c1:5a:e0:86:9b:20:8c:bb:99:
e4:38:dc:7e:82:60:07:ef:b1:68:0b:db:ad:e1:f3:fa:df:a0:
3d:65:81:ba:13:de:60:7e:06:70:05:58:3b:61:59:1b:66:c5:
64:17:0d:92:2c:db:47:71:6d:a0:aa:01:54:61:5a:90:3f:fc:
8d:f3:43:53:a4:bd:bb:c2:4b:0d:e7:18:e4:a0:7f:5c:72:27:
76:6d:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:25:10 2025 by rpki-client