Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: gc8DFBTGUm9hFvFg07sic36/dTpC6tlFNw2HXdsmAmA=
Subject key identifier: 00:6C:F9:77:16:7C:D5:A3:72:85:23:3D:4B:5B:EE:91:D2:0D:A6:FF
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019675D4FDAEE045A1BFA0136CE70C170767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 06:00:14 +0000
Manifest this update: Sun 27 Apr 2025 06:00:14 +0000
Manifest next update: Mon 28 Apr 2025 06:00:14 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: IsvBQOfawU+N7EPvYhPx9FjjGGcJgu8eQdXDnG/uvew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:fd:ae:e0:45:a1:bf:a0:13:6c:e7:0c:17:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Apr 27 06:00:14 2025 GMT
Not After : Apr 28 06:00:14 2025 GMT
Subject: CN=006cf977167cd5a37285233d4b5bee91d20da6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:f9:da:0b:72:0e:b6:1d:ba:b4:8e:5c:86:
3b:91:94:5d:c2:50:1b:ec:1b:83:66:b0:83:24:79:
55:92:0c:72:7f:d6:21:86:22:45:93:85:42:ee:c8:
25:06:4d:49:80:73:53:ee:88:ac:f3:84:49:58:90:
5d:9e:be:3c:c1:b0:ca:78:3c:b6:fc:2a:b9:63:ec:
34:f1:41:0e:ca:d4:a8:f1:60:1a:e9:0b:51:b3:b4:
20:9d:53:e1:c4:b7:be:93:ad:13:cf:b6:8f:19:3d:
69:c5:fd:da:4c:55:f6:1c:f0:d7:25:44:3d:44:28:
ea:e0:7b:a0:87:29:0e:77:4a:ed:9e:9d:60:ee:df:
b5:71:37:ba:d6:59:d0:68:90:87:a9:1f:9c:3f:a8:
2a:27:83:60:d7:72:2a:ec:6c:d3:ca:c1:68:66:7f:
f8:cb:d0:55:2c:6d:6f:dd:b1:75:85:d3:61:89:79:
bf:5d:8b:d8:65:f7:55:36:d7:3a:bf:1c:37:d4:15:
a8:2c:26:28:f1:9f:97:66:ed:e7:a9:29:8d:e7:6c:
31:ab:20:9c:00:09:cc:f8:65:88:6a:80:4c:3a:ad:
15:08:3c:89:f7:3a:97:e5:53:fc:24:3c:6e:17:02:
16:63:8f:da:9b:66:35:39:78:6f:4f:51:33:73:94:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:F9:77:16:7C:D5:A3:72:85:23:3D:4B:5B:EE:91:D2:0D:A6:FF
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:34:3b:ad:bf:cd:15:01:71:8d:5e:a4:97:7b:b8:4e:c8:
39:c5:8c:5c:08:9d:7e:58:10:ff:03:08:54:1b:90:5e:1e:32:
a2:6d:a0:a7:52:9f:d0:2e:d7:2b:f5:50:e8:52:68:e2:09:a3:
8d:f6:11:73:13:1a:d2:f5:8b:fe:0a:01:78:a6:b5:b6:3d:83:
16:c7:94:6f:06:5c:d3:7b:e8:d4:4c:5a:95:21:60:ee:bf:45:
b3:78:83:99:5c:6d:33:43:12:57:bc:66:00:33:66:4c:f6:d7:
5a:cc:dd:db:30:bb:53:68:b9:19:e7:17:ad:9e:df:63:d7:30:
f8:a4:49:47:50:f3:34:17:76:d9:00:27:08:4d:60:54:6d:e5:
fd:f6:76:40:db:82:8f:bd:ca:ff:77:74:04:fb:27:b3:42:b0:
69:cd:55:ae:de:49:78:5f:b8:9d:c5:ea:56:9a:81:be:c8:1d:
83:f6:2c:73:99:b4:21:f6:3f:45:7a:9f:81:5a:0e:85:44:ff:
69:94:dd:c8:ca:a5:18:89:44:b2:a9:ea:fb:af:13:ce:ac:e4:
98:c0:29:d5:6a:56:ee:d5:3e:e6:72:21:ac:7c:2a:28:92:44:
32:77:3c:18:ff:4f:d6:7a:73:66:ca:df:18:d5:3e:b4:30:cd:
aa:37:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:05 2025 by rpki-client