Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: s0n7S7vDr40w+4+swf7UC30H1RtLweMqdeu5VnhrcH0=
Subject key identifier: CB:27:44:D6:76:28:32:CB:DB:B0:62:64:CD:B5:D8:C4:8C:8E:A1:8F
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 01968AA5AEC955754C8E0DB401F4A1880D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 1232
Signing time: Thu 01 May 2025 07:00:36 +0000
Manifest this update: Thu 01 May 2025 07:00:36 +0000
Manifest next update: Fri 02 May 2025 07:00:36 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: gI9yqwVcRdVPHaJEv2LluQeXEW82Fp1L0gzPjQ0Y/To=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:ae:c9:55:75:4c:8e:0d:b4:01:f4:a1:88:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: May 1 07:00:36 2025 GMT
Not After : May 2 07:00:36 2025 GMT
Subject: CN=cb2744d6762832cbdbb06264cdb5d8c48c8ea18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:12:9b:f1:13:12:d4:74:25:b4:51:75:fa:
f2:4a:b3:58:f2:15:13:27:5a:c8:06:5b:13:6d:58:
a0:24:86:58:77:51:93:af:55:d1:95:da:df:43:4f:
53:2a:10:86:95:20:d3:24:47:65:58:db:21:44:27:
61:ef:24:c1:65:4a:5d:81:19:96:d8:1b:1f:07:a7:
93:f7:ab:dc:75:e2:23:81:7c:29:8b:f2:90:cc:aa:
38:43:45:34:5d:aa:48:18:66:4a:30:8a:b1:c3:67:
38:ee:a6:32:83:9e:e4:8b:08:01:ce:52:87:57:5b:
26:e9:40:a5:d8:16:20:77:36:16:61:87:33:33:c7:
22:95:a1:3c:2d:16:ef:c0:0d:05:26:81:1e:c7:eb:
71:8d:bb:56:a7:45:a0:f2:18:20:49:1b:77:69:0e:
18:fa:92:95:38:e7:29:24:43:32:5e:f1:24:b8:04:
2c:c5:c0:95:3e:2d:35:a0:ec:b0:54:25:52:49:68:
2f:49:8a:4c:e9:d4:53:77:b6:e8:82:c9:ee:fb:9f:
f2:c4:de:d6:fb:26:4b:52:e0:22:1d:10:41:c2:29:
ec:e7:05:eb:95:4a:10:e7:03:2c:9b:09:2b:f8:0e:
bd:de:4f:b7:77:3a:c0:37:c9:d4:40:1d:c2:3f:68:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:44:D6:76:28:32:CB:DB:B0:62:64:CD:B5:D8:C4:8C:8E:A1:8F
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:23:d8:e5:98:e0:73:9e:e5:70:e5:00:1e:26:d4:27:dd:d1:
b1:4c:cc:0b:78:c5:71:c6:b1:4d:5b:82:3e:44:08:3b:fc:ad:
74:73:43:a1:68:43:df:18:b8:38:ed:7d:86:a2:db:c8:f9:1c:
96:ca:68:9e:a5:7e:e2:a7:59:fa:ae:f0:1a:92:a6:cb:aa:1f:
0d:8e:ca:62:d4:a8:c0:3d:72:a6:3f:3d:24:5a:20:d9:87:90:
ad:c6:53:70:d3:ca:53:a0:f5:e9:8a:cf:f9:16:f5:98:d6:cd:
35:b8:b8:75:39:b0:02:cd:2e:9d:43:a4:16:00:3c:7e:0a:78:
02:4f:35:34:af:5d:f8:21:28:82:c7:c1:8b:f4:3b:7b:c7:78:
59:7e:93:53:0f:32:d7:ee:82:6b:93:8c:04:95:ff:57:ad:29:
c3:4d:c2:01:09:e9:88:71:bb:65:ec:ff:8c:41:0c:13:61:03:
ed:c8:b3:a0:1a:9e:b1:85:f3:2e:ba:9f:f8:cd:58:33:90:bb:
5b:4b:5b:c4:82:5b:0a:43:63:db:11:56:4e:49:6e:d9:37:22:
65:4f:69:09:63:6c:ed:95:d7:3c:3f:83:bc:6b:39:2a:f7:35:
46:5f:c5:fc:a0:b2:88:92:86:dd:b3:59:19:39:3b:b9:7b:1c:
b1:8f:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:41:56 2025 by rpki-client