Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: cCk/+4csi57kMCigstoqmWHwYlz3Pcs2PXj3RpCADTQ=
Subject key identifier: B3:F6:32:80:45:F0:34:E7:85:1D:92:23:D6:11:63:85:28:90:64:6D
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 01969D1A000BE2B3F57A56710173517330F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 0A67
Signing time: Sun 04 May 2025 21:00:48 +0000
Manifest this update: Sun 04 May 2025 21:00:48 +0000
Manifest next update: Mon 05 May 2025 21:00:48 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: lKT7wcbF/58/hKLNNDcgpAQwBjsC96tPjP2LT8u5aDU=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:00:0b:e2:b3:f5:7a:56:71:01:73:51:73:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: May 4 21:00:48 2025 GMT
Not After : May 5 21:00:48 2025 GMT
Subject: CN=b3f6328045f034e7851d9223d61163852890646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:ce:22:18:f6:c0:60:bf:76:7a:4c:29:3c:
25:6d:68:75:c4:97:4f:98:4f:70:1f:e6:a6:53:c8:
0a:47:79:1f:59:94:d4:34:ea:bc:2d:18:4f:6a:cb:
a4:11:97:dc:72:c3:88:27:7e:22:26:d5:ea:7b:37:
74:b1:4c:34:ea:de:0f:2d:52:11:0d:89:2e:8c:51:
74:72:03:83:e1:83:df:7f:11:ac:19:1b:f0:79:b1:
d9:29:22:19:96:ff:f6:e9:7e:09:a5:cf:b7:6f:8e:
5f:34:28:a2:61:06:2a:f2:4c:bb:eb:a2:48:43:4d:
7a:17:f5:10:42:41:39:e0:85:96:c2:cf:ea:aa:c9:
60:3f:2c:90:3b:24:85:df:54:92:57:53:cb:15:e7:
2d:5d:f3:00:a9:12:03:a0:25:93:9a:cb:78:89:ae:
d8:33:c2:9f:be:8e:21:b5:0d:d5:80:25:f1:3c:79:
d4:20:b8:41:94:2c:9c:7b:f3:b6:56:8c:71:7f:b2:
22:c1:08:db:c8:68:17:66:7a:96:c2:b3:bc:f2:3e:
83:9e:dc:a3:0b:89:ce:0a:7f:9d:26:2d:86:39:d5:
c0:08:83:66:60:49:21:37:67:82:69:57:87:34:15:
ee:ba:55:b6:c1:38:28:50:46:6f:c4:04:83:14:66:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:32:80:45:F0:34:E7:85:1D:92:23:D6:11:63:85:28:90:64:6D
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:10:68:48:aa:c1:40:1e:9b:f0:a9:71:88:77:ff:d7:d0:
73:52:4a:f2:23:12:6f:b4:76:76:a9:b6:92:af:6b:93:2a:93:
31:ea:fd:c5:8f:f1:f6:d2:1c:8f:f3:24:7d:65:83:7f:39:6f:
81:0b:90:7b:5c:b4:3e:72:54:c1:fc:e2:71:14:b4:5b:e4:e9:
64:10:49:09:7a:74:74:ec:56:5d:ca:59:54:73:ce:ce:35:36:
43:82:af:ff:60:5e:11:c8:2c:d5:20:01:4f:c3:5b:55:76:d6:
7b:04:5c:67:d7:5a:b6:dd:f0:dd:b2:9f:8c:9d:97:91:30:67:
07:c8:3e:65:51:ef:2c:97:e1:c8:0c:98:b2:26:7f:d1:d4:50:
c1:ce:91:48:d0:97:4c:f3:b6:34:a3:2c:42:31:84:cb:ff:28:
1f:ee:03:70:8a:04:53:fb:d1:fc:18:e7:92:95:31:21:a8:9d:
91:30:14:84:1b:aa:57:1d:54:de:ba:e9:e3:e8:f5:ad:5a:37:
52:65:cb:12:c1:e7:6a:71:fe:ae:4b:4d:32:8a:6f:99:c7:b4:
65:e0:a2:3c:09:44:f8:f7:61:94:48:dc:8b:e7:e8:23:8d:cd:
75:af:a4:7f:d9:78:f3:7b:90:e8:c2:58:87:14:ec:73:29:7e:
a3:1e:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:19:27 2025 by rpki-client