Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: Jg97o1veSyIHrtHPMixeoAb38NPgRNtJQzVx7bqDcYE=
Subject key identifier: B2:C3:2E:89:0D:A6:6C:1E:EA:ED:2C:6C:25:27:FD:18:6C:47:01:44
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019673E695239390C3BD1D4B8858F7A77EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0851
Signing time: Sat 26 Apr 2025 21:00:13 +0000
Manifest this update: Sat 26 Apr 2025 21:00:13 +0000
Manifest next update: Sun 27 Apr 2025 21:00:13 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: MIFBZVZb8T/ckxRl8rtRoCs/iuNnOS3Q4ZfH6wZHLjA=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:95:23:93:90:c3:bd:1d:4b:88:58:f7:a7:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Apr 26 21:00:13 2025 GMT
Not After : Apr 27 21:00:13 2025 GMT
Subject: CN=b2c32e890da66c1eeaed2c6c2527fd186c470144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:72:59:5d:bc:24:42:95:1d:10:38:2a:47:
8f:be:09:55:18:1c:12:c5:c2:53:87:d3:66:fd:1a:
b2:6a:87:7d:ba:8b:b5:3e:a0:a0:ff:93:f1:8a:67:
da:8f:78:1d:2d:07:fb:80:ed:85:65:60:7a:32:08:
d7:8f:89:8d:c1:74:31:bc:86:03:3a:0e:b7:41:a0:
e6:b7:28:2e:38:c9:f7:60:8b:72:9e:1e:e3:29:91:
5f:10:34:33:af:88:41:9b:e7:7a:8f:ac:b1:93:34:
b1:73:5c:76:ae:fe:8f:70:bd:e5:b4:88:c0:21:3d:
c0:69:2a:c5:38:61:81:73:fe:ac:71:6d:68:14:c3:
ba:2d:f4:6e:0e:c2:dd:20:d0:b6:36:22:a7:21:9f:
bf:c1:6e:be:d8:28:b2:3d:05:fb:a5:86:08:0d:d9:
69:b2:a6:b4:a2:85:96:e3:57:11:7b:00:be:89:6a:
4a:88:27:dd:b3:f3:d2:03:4f:92:d4:18:68:bb:8e:
14:b4:71:73:fd:e2:a4:9b:c5:f4:95:1e:86:df:a6:
5e:d7:61:f6:88:a9:f1:17:42:a6:da:e5:69:33:b1:
da:3f:9a:80:62:13:bd:90:d4:df:fc:ba:31:da:10:
46:1d:2f:80:13:b9:45:71:71:0a:09:8f:d4:2c:b6:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:2E:89:0D:A6:6C:1E:EA:ED:2C:6C:25:27:FD:18:6C:47:01:44
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0f:1d:2b:35:80:6f:32:b7:5e:46:a6:ab:5d:5f:99:56:08:
b0:8b:ec:58:9c:2a:26:13:51:d7:ff:6c:6d:90:a9:9f:bd:a3:
04:15:b0:85:8d:8e:bf:ca:42:b8:7a:cf:3a:26:6d:f1:98:cb:
15:5e:3e:cf:55:f2:3e:f7:f7:14:a6:a7:49:34:3e:72:8d:49:
12:14:96:76:b8:48:47:77:91:41:70:3d:30:da:7d:48:77:ee:
77:c1:1b:6e:13:4c:ef:52:0d:87:b4:11:82:96:e1:b5:71:bd:
c3:77:69:f1:b1:d3:d3:1f:80:8a:f1:ce:82:1a:39:74:2f:2e:
ac:3a:98:78:f8:62:7a:dc:d2:d9:82:80:9f:2e:20:cf:3a:19:
63:ba:43:76:e8:17:fa:df:13:ef:65:44:d5:d6:fe:3d:85:ad:
5f:6c:fd:de:93:d4:2c:2e:70:ed:2c:80:4c:37:11:08:29:8e:
2f:53:e6:5c:a7:5f:30:96:af:88:4f:91:24:bd:2a:b5:d7:95:
ec:f9:ad:1c:d5:b1:c0:39:bf:48:15:30:9e:a8:99:41:7f:81:
d1:88:57:e3:71:81:a6:46:21:63:7c:61:fd:af:4d:bb:6b:42:
ee:a9:50:d1:b5:93:d5:ac:a7:1d:5d:02:f4:61:80:b6:5e:54:
03:78:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:27:23 2025 by rpki-client