Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: NuVf0UtD+DT4JQ5EtQB7tJaqUfMLkRAzXl7oMmpHJfI=
Subject key identifier: D3:20:8D:52:79:A3:48:4A:D6:BF:CF:D8:E6:63:77:72:DB:93:56:2E
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 0196911658078AC16552F9933FBFFCBAD057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0CAC
Signing time: Fri 02 May 2025 13:01:22 +0000
Manifest this update: Fri 02 May 2025 13:01:22 +0000
Manifest next update: Sat 03 May 2025 13:01:22 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: PUaexs/SkCy+4qMrowSlGxfq3ISt7BPw0YmVKXGkz/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:58:07:8a:c1:65:52:f9:93:3f:bf:fc:ba:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: May 2 13:01:22 2025 GMT
Not After : May 3 13:01:22 2025 GMT
Subject: CN=d3208d5279a3484ad6bfcfd8e6637772db93562e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:59:50:2d:89:41:71:78:3b:01:a8:85:9b:
50:9f:dc:4f:3e:41:bc:17:4a:d0:b8:df:63:13:a5:
5c:82:ad:e2:c2:3d:8e:0f:c5:9e:2e:28:31:00:af:
be:ba:b0:cf:59:00:13:5a:bb:0f:8d:59:68:d9:22:
01:6a:88:3e:f3:4e:a6:8b:1c:38:94:4f:a6:10:e8:
ab:bd:9f:ee:e5:77:01:cf:bf:a1:6e:77:7f:5e:b5:
d3:7f:91:e3:7f:49:26:22:66:15:19:06:6a:8e:f1:
84:0e:e4:ce:da:06:df:6c:e1:ed:16:26:9b:2f:6b:
d4:42:2a:ed:c4:b4:e0:fe:a9:52:96:50:db:5e:8c:
53:6a:c8:81:0c:27:81:b6:82:61:f3:58:5b:9a:5f:
fa:d9:81:b6:f3:4b:b1:b4:50:65:4f:75:7f:96:dd:
14:a5:95:1f:ad:3b:85:e8:06:a1:61:a0:fd:0d:32:
d2:6b:7e:98:df:73:5e:31:15:a0:99:16:20:e9:d5:
53:2d:b4:ca:28:4e:17:a4:25:47:e2:9b:3e:c2:a4:
75:5b:3c:53:9b:3f:3f:57:90:70:2c:0c:ca:03:b2:
63:2c:e6:a3:9e:2f:51:07:94:10:ed:85:c7:bd:15:
9e:75:a2:f8:40:92:b5:3d:09:d3:f6:7f:b6:c5:f7:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:8D:52:79:A3:48:4A:D6:BF:CF:D8:E6:63:77:72:DB:93:56:2E
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:31:b7:9a:b8:be:e4:26:5f:64:1b:35:cd:b8:27:80:fd:
15:c2:03:a3:2a:de:aa:67:b7:3e:40:b6:37:15:b9:62:90:c5:
4f:a5:12:e4:d8:9c:80:6d:64:f8:88:23:e4:ca:0b:9b:cc:5e:
74:bf:c3:62:3d:92:40:93:ae:9d:d4:f2:40:a1:70:eb:d3:3a:
5a:8b:d6:70:52:a0:62:cc:c7:d5:f5:17:99:5e:95:ad:92:0f:
b6:f4:98:bc:9d:ba:7f:d1:2e:4d:41:f0:da:64:23:55:77:9a:
55:a3:ad:01:01:70:3b:2f:27:18:98:e0:6c:f9:43:9b:d9:52:
9b:1a:a0:fb:5c:20:76:87:e9:d5:c9:ab:95:0c:a7:2c:c3:e2:
e8:55:64:89:29:3b:d9:30:d4:43:22:88:fc:e8:13:73:c4:12:
3f:56:f3:75:25:69:0c:07:16:47:ae:18:ab:6b:6b:d4:fa:f2:
f3:1c:1d:0e:de:f6:0d:2a:a8:fc:5c:bd:b3:f9:91:e6:c8:01:
21:ca:90:ee:da:d0:64:4b:3e:e7:1f:da:dc:e5:59:30:88:a1:
c9:0a:8b:8f:49:8b:aa:69:a7:97:6c:1e:16:87:28:e1:cd:9b:
74:ce:52:ab:76:e1:a8:74:02:2b:c1:74:8d:76:6b:4b:72:27:
22:9c:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:38 2025 by rpki-client