Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: 8GmIAdDjL/xvgetVy9Nz5B/naKaZUS2t412GUeyMyFM=
Subject key identifier: B7:6D:17:97:96:06:D5:9E:18:8D:11:C9:C9:09:86:9F:F1:0F:DD:A8
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 01968FCC088B35D2AC5196727474ED5FC7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 0292
Signing time: Fri 02 May 2025 07:00:35 +0000
Manifest this update: Fri 02 May 2025 07:00:35 +0000
Manifest next update: Sat 03 May 2025 07:00:35 +0000
Files and hashes: 1: 5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa (hash: zgbevUmIAJrzV5Ei+G6fiiOaUat2c7OgWp0BEvn+Gtk=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: gZGU4MQAnKM+cn1OzhIBkjtlpmWyMabfqVDIgwwIt84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:08:8b:35:d2:ac:51:96:72:74:74:ed:5f:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: May 2 07:00:35 2025 GMT
Not After : May 3 07:00:35 2025 GMT
Subject: CN=b76d17979606d59e188d11c9c909869ff10fdda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:74:55:1d:3a:29:2f:6e:8d:26:41:1c:cd:
0e:91:24:a7:b7:3d:de:d3:18:76:a7:ce:ff:20:28:
46:f5:aa:fa:81:cf:64:32:ee:c2:84:a0:53:b1:54:
aa:fb:4b:35:e3:ab:94:ff:92:9d:c7:ae:43:57:ee:
ac:4c:5f:97:96:05:65:04:2c:71:e3:6f:5c:b2:5d:
b6:58:0b:b0:f8:1e:98:32:32:58:a7:e4:a9:2a:e0:
19:67:4c:04:cc:fa:15:53:74:45:6d:e3:ca:0d:5d:
07:8c:fd:7f:3d:aa:28:5d:e4:b8:14:13:ea:4a:42:
4e:dd:0c:eb:00:c8:90:c3:b7:56:dd:32:a0:33:82:
ab:66:c5:4b:46:94:98:6b:1e:3f:10:a4:53:c9:04:
3a:2c:3b:89:a1:92:9f:ff:16:af:60:94:d6:8a:d4:
38:24:79:72:92:1f:33:8a:1d:5c:d1:dd:8d:bc:09:
84:9e:b1:71:2b:82:bd:7b:e0:da:8e:09:68:ed:03:
96:aa:d8:da:e3:1a:b0:52:ab:c9:0a:33:c9:08:6e:
af:e0:0e:dc:e9:d5:31:20:f6:13:29:d9:5c:5f:b4:
a0:d8:1e:22:47:4a:35:ef:ee:2b:13:5c:c8:07:29:
e1:ac:ff:bb:f0:77:35:a7:22:f7:d5:23:71:6a:88:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:17:97:96:06:D5:9E:18:8D:11:C9:C9:09:86:9F:F1:0F:DD:A8
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:55:cf:c1:bf:02:03:85:c4:d0:3f:68:2b:a3:02:c2:b8:
96:3b:e5:07:b6:03:50:30:5b:95:1b:70:72:74:14:d9:d0:a6:
e9:3f:57:d6:1f:1a:ba:be:a1:b8:a4:cf:fb:2f:c6:0f:6e:43:
49:f5:24:26:06:0f:da:be:61:4f:b3:8c:ac:96:ab:5e:37:45:
96:68:4c:9b:23:a6:dd:c1:60:a9:3f:85:44:8b:63:eb:3e:16:
7a:d8:bc:27:80:8d:0c:b0:cb:87:37:e8:05:8c:62:27:76:9a:
58:a1:f7:85:a8:09:dd:f9:d0:43:b3:62:88:fb:8e:0d:26:71:
73:13:cc:ee:54:53:c2:8e:94:d3:f1:c7:42:2f:4c:57:1c:e7:
d6:4a:36:7b:d3:c2:07:5d:eb:9b:1d:fa:2e:32:cb:0c:43:35:
de:16:7a:40:40:ce:4c:6b:a0:98:74:7e:71:f2:17:f0:ce:79:
5d:0d:fa:f0:98:41:41:87:e2:e6:20:2c:9a:70:7d:88:14:a8:
04:53:8c:f6:d0:7a:49:0b:d1:d8:c4:8b:9e:f9:1d:63:2c:d1:
f5:e1:29:de:50:1a:64:c4:32:0a:98:fb:39:8e:97:ea:50:0c:
84:d5:2a:b9:1c:51:62:0d:21:32:87:db:a8:da:a5:67:a4:c9:
58:f3:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:29:48 2025 by rpki-client