Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: +AArGDinSVPlwUvGLEds3CXo+6CHpue6rf/tpSAiD+Q=
Subject key identifier: 34:FD:82:35:69:47:CA:3C:B3:F8:A7:D6:32:53:51:6B:B3:A8:6A:D0
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 019679442F583459DA7020E907D67E965FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 111C
Signing time: Sun 27 Apr 2025 22:00:33 +0000
Manifest this update: Sun 27 Apr 2025 22:00:33 +0000
Manifest next update: Mon 28 Apr 2025 22:00:33 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: q83Y9V1NQff7naGOuYNcGY3cK3QM/xXIqEITVP0FC9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:2f:58:34:59:da:70:20:e9:07:d6:7e:96:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Apr 27 22:00:33 2025 GMT
Not After : Apr 28 22:00:33 2025 GMT
Subject: CN=34fd82356947ca3cb3f8a7d63253516bb3a86ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:cb:6d:62:f7:6d:52:73:87:f7:7c:cb:ac:
b7:90:69:6e:50:bb:7d:c2:03:f8:65:67:d6:84:a2:
94:a5:c9:55:fe:4a:b9:7d:31:62:51:dd:b5:20:ef:
50:07:f9:1a:b6:74:00:83:73:c6:fe:55:bb:a8:71:
50:e6:5f:e4:ed:20:79:ef:a2:19:a6:71:6d:42:8d:
3b:e8:4f:d3:8a:94:34:57:cd:4e:0e:b2:aa:30:76:
6d:de:b6:98:45:43:47:65:9f:05:0b:62:e7:17:29:
5f:86:95:7e:fb:6b:6c:92:a6:32:e8:29:20:6d:43:
ab:8e:c6:49:18:23:7a:9d:54:fc:32:dd:3f:bb:f4:
93:d2:66:9c:36:ee:69:93:94:d3:19:2b:5b:ab:88:
45:2a:50:79:4c:3c:7a:57:71:0e:9a:ae:6b:ff:b3:
af:b3:73:9f:26:ed:51:bd:75:9e:84:2e:2c:80:ef:
60:35:ee:6a:b2:d0:3c:43:81:ef:40:d5:7c:4c:7f:
83:80:84:c2:f2:e3:8c:ce:99:15:3c:ca:35:70:b8:
38:aa:4e:8b:73:1e:b9:b2:08:7a:54:3e:30:f2:ed:
1d:65:cf:a7:c5:25:49:63:f3:97:fe:da:96:d3:ae:
86:c2:3c:d8:75:8e:b6:75:8d:9e:c9:4b:60:a0:0c:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:82:35:69:47:CA:3C:B3:F8:A7:D6:32:53:51:6B:B3:A8:6A:D0
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2d:a3:3b:57:e7:6a:9e:84:3b:42:46:36:4b:a1:a3:98:54:
fb:80:6c:94:69:a7:25:8d:69:46:13:5c:3c:7f:06:d5:53:22:
44:04:4b:ea:a9:a1:94:b4:0b:8d:31:79:9f:c6:cd:7b:7f:3b:
9f:45:9c:42:d8:6f:a5:6b:08:54:97:04:5d:6f:b8:d1:76:77:
43:c3:3a:81:5d:c2:c0:7f:9d:be:85:c6:c7:c0:ba:3b:47:4e:
7e:36:78:14:53:8e:0e:3d:b8:47:73:91:eb:b8:82:d2:f7:a7:
50:83:53:a3:09:b5:2b:40:95:b2:14:ca:0d:2a:29:ee:b5:14:
82:f2:f0:65:b1:f8:50:05:8d:e0:b4:8e:6d:d2:7c:d5:67:80:
00:20:df:44:44:1d:3b:e9:98:06:0f:2a:bc:33:fd:ac:6f:ba:
5b:e9:86:cb:c7:2d:5d:c8:f2:3f:82:0b:77:b2:30:30:8e:07:
71:b4:e4:36:6c:d8:d3:30:e4:8d:db:39:e8:4c:8f:a5:32:8a:
99:e7:05:34:b3:a4:f2:42:52:cb:da:aa:b5:8a:16:6b:7b:e4:
19:5a:0c:5b:c9:7c:fa:9f:c4:e1:66:50:1a:56:9a:52:25:b5:
98:c5:1e:b8:2a:c0:dc:20:1d:6d:1e:69:3c:1d:73:59:e4:10:
89:c5:51:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RC9YNFnacCDpB9Z+ll+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux
NTQ1ZWQwHhcNMjUwNDI3MjIwMDMzWhcNMjUwNDI4MjIwMDMzWjAzMTEwLwYDVQQD
EygzNGZkODIzNTY5NDdjYTNjYjNmOGE3ZDYzMjUzNTE2YmIzYTg2YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHLbWL3bVJzh/d8y6y3kGluULt9
wgP4ZWfWhKKUpclV/kq5fTFiUd21IO9QB/katnQAg3PG/lW7qHFQ5l/k7SB576IZ
pnFtQo076E/TipQ0V81ODrKqMHZt3raYRUNHZZ8FC2LnFylfhpV++2tskqYy6Ckg
bUOrjsZJGCN6nVT8Mt0/u/ST0macNu5pk5TTGStbq4hFKlB5TDx6V3EOmq5r/7Ov
s3OfJu1RvXWehC4sgO9gNe5qstA8Q4HvQNV8TH+DgITC8uOMzpkVPMo1cLg4qk6L
cx65sgh6VD4w8u0dZc+nxSVJY/OX/tqW066GwjzYdY62dY2eyUtgoAzGlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT9gjVpR8o8s/in1jJTUWuzqGrQMB8GA1UdIwQY
MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt
ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx
LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy2jO1fn
ap6EO0JGNkuho5hU+4BslGmnJY1pRhNcPH8G1VMiRARL6qmhlLQLjTF5n8bNe387
n0WcQthvpWsIVJcEXW+40XZ3Q8M6gV3CwH+dvoXGx8C6O0dOfjZ4FFOODj24R3OR
67iC0venUINTowm1K0CVshTKDSop7rUUgvLwZbH4UAWN4LSObdJ81WeAACDfREQd
O+mYBg8qvDP9rG+6W+mGy8ctXcjyP4ILd7IwMI4HcbTkNmzY0zDkjds56EyPpTKK
mecFNLOk8kJSy9qqtYoWa3vkGVoMW8l8+p/E4WZQGlaaUiW1mMUeuCrA3CAdbR5p
PB1zWeQQicVRgw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:34:52 2025 by rpki-client