Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: rdJdCglPLi4oOCCeylLxc+41QVP13UKTPbZiyRh/dW0=
Subject key identifier: B8:C0:25:51:3B:5B:43:01:59:F9:F2:F1:8A:5C:9F:42:9A:77:FD:57
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 01968691CAA616F581129E06D6C4FF9F5A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 12:00:23 +0000
Manifest this update: Wed 30 Apr 2025 12:00:23 +0000
Manifest next update: Thu 01 May 2025 12:00:23 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: jOFGEoCJr5YmtHj4HJFCO5Dpeey9P5p769nD8y35ug4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:ca:a6:16:f5:81:12:9e:06:d6:c4:ff:9f:5a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Apr 30 12:00:23 2025 GMT
Not After : May 1 12:00:23 2025 GMT
Subject: CN=b8c025513b5b430159f9f2f18a5c9f429a77fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:39:61:28:3f:29:3a:74:35:c5:10:27:45:
3a:d3:24:13:3e:93:95:30:05:9d:8d:55:d2:f6:48:
df:87:4f:68:34:29:f5:8e:66:07:54:6a:ea:bc:75:
c9:c0:3a:f0:ac:44:9b:1d:eb:15:76:7d:4f:ff:f7:
bd:fd:72:a8:fb:98:d0:bf:0d:92:ba:e1:2d:ad:a7:
c7:bf:e4:b0:8c:8b:6e:ad:1d:9c:1c:38:9a:37:a4:
66:3e:fc:f4:25:95:bf:8d:ec:ec:ca:70:e3:ad:da:
11:1a:6e:76:1e:af:93:ce:60:f8:76:f6:77:fa:2e:
ff:30:74:65:b3:d2:dc:02:32:47:7e:af:dc:2d:91:
12:b1:fe:8c:81:75:f7:6a:98:34:97:0a:06:01:e0:
f9:3e:8e:58:da:3b:5c:93:3a:f6:65:27:4d:c2:6e:
32:8d:62:fd:cf:dc:1b:a1:21:01:10:35:2b:6e:ff:
1b:33:f4:65:b1:be:ee:6d:9a:ff:26:e7:43:6c:0a:
d6:79:86:03:27:ec:3c:eb:aa:f3:24:58:11:f9:0e:
12:43:03:42:25:b7:59:49:47:c9:f3:75:56:d0:3c:
8c:7d:52:f9:5e:c1:12:01:87:25:f1:cb:6a:bf:8b:
ea:f0:3e:47:95:c9:86:8f:29:b4:ec:a9:a1:e0:cf:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C0:25:51:3B:5B:43:01:59:F9:F2:F1:8A:5C:9F:42:9A:77:FD:57
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:f3:15:71:9f:91:7f:be:30:18:8c:5b:6c:7c:ca:fd:50:
11:a9:b8:9a:b3:8f:d6:ff:30:b1:b8:5b:30:a1:c8:e9:63:e2:
67:1f:ef:c5:c1:b2:c4:6a:e1:5b:52:5d:8d:9c:bc:12:41:8c:
d3:aa:e1:34:c2:57:65:ae:8e:32:d1:16:40:6b:76:0b:ea:ed:
f8:fd:dd:62:4a:ec:ca:51:89:4f:6e:4c:2d:a4:bf:69:8d:23:
fb:3a:95:35:26:21:68:df:3e:f9:ba:ae:fa:db:13:dc:0e:25:
53:e1:1b:75:d8:f3:3c:20:d1:30:24:40:40:96:1b:f3:41:9b:
9e:c0:dd:27:9a:37:79:8a:d1:74:be:14:be:d3:6b:8d:a6:b1:
44:d4:dc:23:64:be:bb:88:91:d7:a6:16:09:78:6b:dc:7c:ce:
c4:b6:0d:40:a7:28:8d:c2:c0:b7:68:96:79:13:2f:4c:d1:98:
7d:66:38:24:1d:97:a3:dc:ad:14:02:01:95:33:57:b8:e5:18:
86:54:ec:df:38:86:1a:f4:46:12:c2:e8:d9:57:85:39:64:3e:
d5:5b:51:aa:81:2b:36:67:a8:85:28:a8:ad:27:fd:b5:1e:0d:
aa:c1:d4:92:6f:f0:10:6a:ea:43:47:7c:a3:b4:dc:2a:dd:19:
e0:ff:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:43 2025 by rpki-client