Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: aagh7XiKTM16KZrsIrMnBaWwpAt01iAJ5iSl+i7qhcs=
Subject key identifier: 45:1D:05:B7:1E:F2:EA:0E:4A:27:B1:83:30:15:C9:7C:46:A4:AB:2E
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 01967D579BDBE4A5B42C290B6BB630948C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 1519
Signing time: Mon 28 Apr 2025 17:00:15 +0000
Manifest this update: Mon 28 Apr 2025 17:00:15 +0000
Manifest next update: Tue 29 Apr 2025 17:00:15 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: B1FXDIiVZyJE7HuyWI28eXYjVPz2BV6W+AXRMzPMNbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:9b:db:e4:a5:b4:2c:29:0b:6b:b6:30:94:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Apr 28 17:00:15 2025 GMT
Not After : Apr 29 17:00:15 2025 GMT
Subject: CN=451d05b71ef2ea0e4a27b1833015c97c46a4ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:8c:fb:57:2b:4a:cc:bb:6a:59:6a:3e:11:
29:cf:ea:a0:68:07:b4:34:03:92:08:e0:08:4b:db:
86:e3:95:db:03:b6:ca:24:92:32:b9:2e:40:09:b5:
63:39:33:d8:06:b9:4a:7d:f7:9d:bd:b9:95:31:b5:
e6:65:d8:04:19:74:03:bc:49:24:78:e5:3f:77:8b:
78:6d:d0:60:5a:1e:40:af:54:6c:2f:02:e0:ab:b0:
98:69:19:b7:1f:86:91:d6:0a:79:37:70:ca:a1:24:
6b:b1:cd:4f:93:14:0d:5b:8b:a3:d5:5f:cb:97:da:
62:9b:7a:3a:93:bf:b3:f5:4c:97:c6:65:4a:f4:75:
68:8d:1a:11:c9:07:85:d5:50:40:6c:57:0e:86:93:
f5:2a:d6:9c:1b:e5:6b:73:6d:04:63:23:56:e0:f6:
fd:b5:b0:d9:65:b3:77:0c:a3:ee:c2:9b:fb:69:c1:
0e:5a:f5:0a:89:02:0f:c3:74:78:3b:03:18:15:64:
9e:83:d2:e7:a2:39:f6:05:54:6c:ea:14:f4:8b:b3:
64:f8:23:97:cf:0c:aa:d0:c1:99:6d:2d:68:d1:1c:
17:d9:ba:9d:25:3d:5d:6c:13:8e:a2:9a:fa:1b:ad:
be:a2:47:1d:bb:17:de:d4:8e:e7:fa:5b:c6:b4:ff:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:05:B7:1E:F2:EA:0E:4A:27:B1:83:30:15:C9:7C:46:A4:AB:2E
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:e9:a4:c6:49:e5:d4:ab:bf:b2:2b:9c:0b:ee:48:5b:d7:
52:38:f5:3b:90:d7:38:02:da:83:eb:5d:16:ba:62:6b:9e:39:
dd:33:fd:ad:ce:9d:25:43:2f:a6:27:3f:6f:a6:5a:6f:bb:f3:
c3:e0:01:cf:c3:20:3d:73:25:1c:14:f1:53:80:ec:3c:a8:1d:
09:cb:09:34:03:24:6d:0c:d9:7a:a4:09:fd:b7:6d:16:22:3e:
c5:3b:d1:38:05:77:b6:30:f9:c6:3a:ad:72:d5:20:a9:57:c2:
04:3d:ce:5f:bf:a3:2f:b8:9f:ca:d0:bd:98:bc:c4:40:ae:0f:
ea:3a:7f:a3:a4:6e:8e:78:f1:fe:e5:6a:3e:fc:fe:57:02:bf:
77:4b:4d:6d:90:35:f1:c9:26:ac:c2:25:4a:49:bf:5c:e4:5c:
c9:c7:0b:ed:08:a8:4c:cb:14:a0:8b:a5:43:91:5d:94:1a:e5:
46:45:33:dc:72:af:91:7c:7e:a3:6a:03:d3:3e:ea:fc:5e:19:
e5:07:19:2b:5d:11:01:a5:57:d5:da:48:11:6c:8a:29:eb:42:
06:78:74:45:a0:c7:fe:7d:a7:b2:8c:a0:be:13:4d:a1:59:12:
69:75:6f:36:0c:7a:3d:ef:9c:9b:30:13:3c:c2:93:a1:c8:e8:
fd:fa:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:19:36 2025 by rpki-client