Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: MQwTomtmOFZmjnRVgfx3nsVQdAuEEF2PGIEumlQWFHk=
Subject key identifier: C1:CB:CC:A3:17:A2:50:CD:82:5D:DA:68:11:B7:2D:D2:D0:8B:CA:9E
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019685EDB4AC51C900468060530FAB154F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 09:01:10 +0000
Manifest this update: Wed 30 Apr 2025 09:01:10 +0000
Manifest next update: Thu 01 May 2025 09:01:10 +0000
Files and hashes: 1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: ye+vXu5l9FvXwwhnEd66nOTJxF3lNK2+AzSk6sKNJbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:b4:ac:51:c9:00:46:80:60:53:0f:ab:15:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Apr 30 09:01:10 2025 GMT
Not After : May 1 09:01:10 2025 GMT
Subject: CN=c1cbcca317a250cd825dda6811b72dd2d08bca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:09:fb:7e:9d:3c:8f:ec:8a:07:86:3b:c3:
a1:7e:1b:53:50:13:cd:de:bd:d7:4d:7d:ed:c6:d3:
72:83:be:1a:c3:55:5f:31:00:80:ca:41:72:1b:f4:
0c:bf:54:89:b8:06:d4:ec:53:a1:2a:de:01:6e:88:
a6:66:69:24:f9:6d:95:7e:76:89:b9:6d:1d:b5:3a:
82:3b:a7:2f:8b:0c:c1:6d:e3:40:3b:c2:18:09:fb:
82:b6:ca:12:7e:7c:31:4d:93:41:79:57:ed:3c:96:
4b:2f:4c:92:4d:8c:ee:8d:4d:57:32:a0:2f:6e:c4:
6e:d3:15:8e:8e:7a:93:0c:5b:ab:c2:4c:ce:5c:82:
2c:8e:f3:11:5a:6e:64:34:61:76:e5:0f:a1:68:68:
95:cb:51:4c:6c:3d:5d:50:c6:4c:5a:17:e2:31:65:
0e:9a:16:c3:ec:b7:41:0c:22:61:47:4e:d8:52:b4:
29:a7:9e:9b:47:0a:b6:3e:36:b6:b9:4b:70:55:a4:
ea:99:42:f3:19:22:d6:89:47:34:e2:31:25:d6:2a:
a3:50:10:a1:61:ea:2c:00:f2:52:35:4c:b6:10:f4:
f0:51:54:8a:2a:91:2b:e9:41:7e:b5:16:dd:ac:7a:
38:87:e3:53:38:e9:37:ac:15:73:50:c8:59:13:b5:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:CC:A3:17:A2:50:CD:82:5D:DA:68:11:B7:2D:D2:D0:8B:CA:9E
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f1:33:2e:87:08:8b:7a:9a:ce:ee:4a:af:f6:b3:2d:8d:7f:
48:f2:81:7d:16:b0:44:df:02:7e:64:46:cb:5c:88:38:a2:91:
f3:71:ef:39:2f:6f:e5:a3:5d:02:b7:10:ce:6a:a9:b9:bf:5b:
bb:97:ed:10:6c:73:d7:cf:68:f0:ac:5b:45:84:ba:e5:60:61:
4a:fc:4a:12:ce:55:ef:da:c5:4a:ff:d0:54:3c:6b:2d:e9:e9:
a9:b4:26:e8:a4:4a:5c:66:d5:49:22:74:a8:b8:fc:b9:82:9c:
34:25:15:01:bd:d0:ca:8f:35:0e:5e:28:f5:3f:1a:2a:d9:c5:
cb:03:e0:34:e0:5e:1c:38:73:88:78:c4:ce:2c:09:28:7d:d7:
65:20:29:0e:61:ba:cf:74:d2:b4:8d:50:49:7e:31:a3:43:ad:
0e:48:09:d0:9b:93:3e:e4:51:55:bb:a7:5a:98:37:2e:dc:9f:
1a:6a:72:62:3c:d3:84:39:fa:93:62:bb:2c:99:96:ef:42:9c:
a8:36:fd:b2:fa:f7:84:8c:80:60:4d:22:a4:12:17:ca:e7:8b:
01:93:66:44:df:a0:7c:07:84:6c:0a:25:29:77:48:87:f7:22:
27:be:37:15:b4:3c:23:a4:93:e1:ae:c8:76:1a:09:80:50:9b:
e8:70:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:49:15 2025 by rpki-client