Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: 3v/NSmFV3mJ0b/FTkEAg5H1IgpbrgHeFwjc4V6vjnMQ=
Subject key identifier: 2E:56:BF:51:53:BF:41:99:08:92:07:4D:0B:83:F6:E3:9A:BF:83:77
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019676E7CB33068ED6AE79EFCDF5FF045120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 11:00:24 +0000
Manifest this update: Sun 27 Apr 2025 11:00:24 +0000
Manifest next update: Mon 28 Apr 2025 11:00:24 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: EpPgvnyLlBkVhUHlM+L0ETahshZvVoJO6A0N1PSTrV8=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:cb:33:06:8e:d6:ae:79:ef:cd:f5:ff:04:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Apr 27 11:00:24 2025 GMT
Not After : Apr 28 11:00:24 2025 GMT
Subject: CN=2e56bf5153bf41990892074d0b83f6e39abf8377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:d2:e4:63:4f:5a:c3:f7:b3:04:f8:14:d1:
99:e9:2c:d9:04:aa:e1:7a:27:94:b7:c8:1f:6a:4e:
47:69:9d:2a:52:35:35:8e:e1:2a:a6:d9:c9:c5:30:
5a:da:63:6f:d6:7d:91:b9:fc:11:39:92:84:3a:9d:
60:5c:67:8c:89:32:1f:20:45:a2:82:58:b1:de:63:
f8:1a:fe:83:66:d2:96:02:68:b7:22:43:68:fa:ca:
ee:5a:8d:b9:8f:74:72:95:80:17:2a:f9:90:5e:0b:
95:11:ff:87:4d:fe:9f:e6:e1:bd:ca:a2:1c:d6:f6:
f2:3f:aa:a6:f9:e0:e1:e4:b1:e0:e1:ae:22:f6:62:
13:bc:50:ca:77:8d:5f:42:2f:a4:2b:db:f7:03:e3:
88:ce:00:d7:c7:22:ab:0a:4e:53:c2:c5:d4:77:fc:
a9:15:ad:2d:d1:ef:f5:74:d0:2f:9a:d8:8e:f3:c1:
7b:1e:39:0e:ad:63:e0:fb:1c:4f:16:73:38:37:2e:
d8:d9:c4:5a:89:6a:91:6e:35:42:f2:18:0a:37:a8:
a8:4b:eb:4c:15:56:d3:8a:f3:d0:11:ef:2d:17:82:
9d:52:12:85:f0:af:08:bd:14:b8:e8:7f:f5:de:21:
ee:4d:de:ba:ca:13:37:8b:9a:9f:07:29:21:55:68:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:BF:51:53:BF:41:99:08:92:07:4D:0B:83:F6:E3:9A:BF:83:77
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cc:86:ae:c1:6d:c7:d7:44:f0:1e:41:86:ee:e0:06:20:e9:
00:e1:d6:58:da:ff:c1:37:9f:e9:fe:d6:4e:09:db:4a:2b:a3:
01:59:3f:4d:58:bc:74:bb:2b:d6:ff:65:ee:36:71:c3:2d:66:
16:7e:f8:36:fe:c5:64:65:4e:32:0f:37:3c:04:39:a5:4e:90:
d8:d6:c5:72:51:11:e1:7f:4c:58:86:0f:5f:21:f7:08:60:1f:
e4:09:db:43:70:7c:3b:f4:75:cc:70:45:2d:04:8d:36:83:f8:
ab:ea:7c:83:cd:b1:65:6a:d0:63:ea:e5:ed:48:b4:2f:65:bb:
9b:80:92:bc:3b:89:1b:cb:94:ff:18:49:18:36:15:51:79:11:
cb:42:14:54:09:fb:25:4c:fc:27:30:5f:eb:68:5e:76:03:be:
ac:58:18:ae:ac:cc:c8:5d:09:ce:f7:07:e0:6b:d2:a6:cf:f7:
ed:f6:f6:ab:a4:d4:43:0e:9b:97:f3:62:46:7e:20:34:6d:dc:
9a:04:fe:b2:d6:a0:6d:63:60:47:4b:61:26:94:bb:e1:f1:28:
db:5a:7e:c0:39:94:59:8a:bc:4d:07:da:8e:e2:71:42:34:3a:
4e:a9:5e:0b:a7:88:77:6e:67:0c:a6:c1:db:80:3c:f5:9d:99:
7a:de:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:18 2025 by rpki-client