Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: WwjnBtzqMLWeuYLiOmFSdBARuqIc/tK3rOVfTNq02eY=
Subject key identifier: 55:5F:CC:8F:93:F5:5E:96:58:77:0A:10:F3:4C:9F:22:5B:D5:CC:14
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019671F888154F3CB80DFD45A7F6880AD674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0B74
Signing time: Sat 26 Apr 2025 12:00:35 +0000
Manifest this update: Sat 26 Apr 2025 12:00:35 +0000
Manifest next update: Sun 27 Apr 2025 12:00:35 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: ANE6BUMotOSYzDY+UPhcOdso6PKRNLYc2LJPN2ZSIcM=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:88:15:4f:3c:b8:0d:fd:45:a7:f6:88:0a:d6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Apr 26 12:00:35 2025 GMT
Not After : Apr 27 12:00:35 2025 GMT
Subject: CN=555fcc8f93f55e9658770a10f34c9f225bd5cc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:ee:3b:64:83:2d:4c:c3:0c:1c:17:69:c6:
08:ce:e0:3b:ca:0b:38:17:b1:f7:fd:d3:e0:34:8d:
06:5c:b7:c9:69:04:4b:43:73:15:a7:30:80:16:61:
08:b0:65:80:e6:c5:27:40:76:23:5b:99:ce:3c:20:
08:96:91:c6:1c:78:b8:a0:25:35:f0:2b:59:ec:d1:
90:1f:f3:23:de:84:ec:1a:48:27:8b:e0:90:c3:9f:
eb:a9:17:ad:37:3f:ab:1e:ab:05:b9:d2:1b:09:bb:
30:0a:d2:30:2f:56:99:21:ea:3c:2c:4b:01:4b:6b:
08:2b:b4:1a:e4:a0:5b:d0:57:aa:85:f0:88:2f:23:
19:d4:67:53:32:07:70:60:4f:d1:e6:13:e3:7e:5d:
2d:f5:e2:02:c1:65:12:fb:8e:ce:5b:a6:85:99:57:
2f:92:c6:84:4d:07:8f:2b:b2:74:d3:1d:a0:82:55:
f3:22:f2:cc:b2:69:56:a4:31:a8:f5:01:b1:85:7c:
35:b1:ab:ea:ff:2d:2c:35:bc:b5:b3:11:16:e8:22:
15:fa:19:07:b5:57:41:71:4b:d2:19:0c:be:0e:9e:
bd:7c:2a:8a:df:c2:45:2d:08:d9:a4:94:74:b7:98:
d4:b9:66:a4:67:d5:f5:76:c2:7a:e6:8b:39:ed:33:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:CC:8F:93:F5:5E:96:58:77:0A:10:F3:4C:9F:22:5B:D5:CC:14
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:26:a4:0d:97:61:a2:e1:fa:60:bd:bd:e6:67:2b:09:75:
81:70:15:8d:70:13:9e:c9:2e:45:df:aa:ff:c8:18:c1:e0:27:
68:ed:fd:5a:19:44:1f:05:6b:39:36:9f:d8:af:ab:ff:97:3b:
28:bb:6d:02:c1:12:27:9e:d5:0b:53:60:3a:12:55:c3:4e:d7:
df:a6:bf:c0:a4:dc:99:ef:ff:a6:a7:ed:e5:ba:42:cf:3d:64:
5b:6b:8a:7f:5c:b4:0e:35:04:09:cf:5b:cb:a4:37:7a:a9:e2:
2f:39:44:18:1f:a6:d0:d1:eb:e6:1d:bc:eb:cc:4e:19:3d:f4:
a1:df:3d:a4:29:85:ca:c5:d3:ed:3d:1c:60:97:c7:0d:05:66:
9f:3d:d6:be:00:48:75:3d:54:6b:77:6c:5a:84:13:7e:87:f1:
9f:15:ab:de:be:35:9a:c8:1e:9d:9c:ac:61:50:6e:80:18:d2:
dd:1f:bb:19:00:0d:3c:09:d2:60:e6:e7:b3:0a:ce:02:77:f2:
c9:c5:4a:6f:7e:5f:ed:62:b6:c6:63:52:3d:fe:1c:27:7a:30:
2a:4b:f9:00:55:12:89:47:b5:40:e6:f5:2c:ae:49:ed:70:eb:
a0:ce:52:02:77:a9:b0:51:db:58:34:e9:29:70:3e:09:45:93:
8c:04:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:25 2025 by rpki-client