Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: VyeEOEw6KRMEUuvEjv0FBR1JC81yrPonnreHu9GlEfY=
Subject key identifier: 95:C5:A2:3C:B6:99:1A:C2:B1:F6:57:94:60:FA:8B:81:14:1D:89:A0
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01968B4B57B2CEFE264F39CF961335ADA38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 14B7
Signing time: Thu 01 May 2025 10:01:32 +0000
Manifest this update: Thu 01 May 2025 10:01:32 +0000
Manifest next update: Fri 02 May 2025 10:01:32 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: dcrYbsR8VMUWDiyeHrukPOKipHALPAEkaK1Zr+Cw6U4=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:57:b2:ce:fe:26:4f:39:cf:96:13:35:ad:a3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: May 1 10:01:32 2025 GMT
Not After : May 2 10:01:32 2025 GMT
Subject: CN=95c5a23cb6991ac2b1f6579460fa8b81141d89a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:74:21:3a:b2:f1:a6:84:c8:63:ac:55:64:
81:72:6e:80:97:db:b4:a2:bc:7c:da:bc:6a:6d:bf:
42:fe:76:87:81:45:84:82:62:61:0a:19:bc:dc:38:
0c:92:bc:69:b8:ca:bf:d4:e6:ce:89:c9:d3:45:3f:
85:be:a0:8e:06:68:69:cf:49:13:bf:ec:12:4b:10:
0e:31:1a:da:4b:f6:4c:ef:7b:0e:e4:e0:d1:0d:5f:
a0:e8:31:ec:1f:c2:f9:eb:57:f1:2f:ce:4a:8a:2b:
53:9b:cb:a4:e2:c7:02:93:d2:84:ca:8e:2f:42:73:
97:bb:6f:6d:29:bc:c7:e7:94:f2:ab:d7:cf:d3:f7:
32:fa:bd:c8:41:14:b6:e1:15:10:20:5d:1c:73:b8:
32:d8:16:28:b4:ae:42:0b:46:55:a9:72:ee:ee:6a:
56:5b:a7:2f:2d:9f:8d:b9:bb:65:1e:c4:f4:7a:cf:
2a:56:25:5a:0f:ac:72:b3:ea:5d:c3:7d:e3:ec:b2:
12:2f:3a:8d:c1:af:63:d4:ec:0f:3c:2d:90:5e:73:
08:46:b4:1a:fc:76:c4:7b:07:ce:f4:b6:77:84:03:
ae:7d:aa:00:6a:0d:28:cf:a3:dc:3d:5c:b5:53:70:
fe:b3:6c:bd:bb:95:e8:c3:39:2d:90:91:f9:52:ec:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:A2:3C:B6:99:1A:C2:B1:F6:57:94:60:FA:8B:81:14:1D:89:A0
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:c2:1e:d3:e2:af:12:1b:df:f1:5a:d1:ed:04:44:25:b3:
82:85:c9:7b:0d:1b:49:ae:11:9f:9b:14:ee:aa:25:80:55:71:
2c:b6:5a:d7:b5:21:0d:8f:04:12:82:6b:d3:0b:92:72:2f:a8:
16:e1:95:ca:5b:b6:c8:64:95:37:9a:13:3a:aa:7f:c0:fd:03:
03:9a:36:a8:b9:cf:17:65:62:b1:16:59:88:ef:8d:be:2e:5d:
5b:dd:5d:9e:a9:3a:08:55:04:c2:dd:7a:a0:70:b9:ea:01:f9:
85:0b:20:25:3b:5f:ab:35:dd:72:95:76:8f:ba:01:09:2e:1f:
a1:c0:db:32:70:95:32:13:42:b4:c4:b1:7d:66:2f:67:e0:5f:
48:ca:3b:e8:f2:08:85:5e:8b:b5:e7:e1:03:cd:e9:9b:d2:55:
a5:d9:26:79:44:e2:ef:de:c0:8a:53:fd:0f:fd:02:ec:70:1d:
e3:03:cf:2a:e0:9e:26:e8:93:3e:48:b4:c8:3c:21:33:48:1e:
9d:f1:6d:b6:4e:68:9b:c0:15:f7:37:ca:b4:40:ca:d2:3d:b8:
4a:cb:98:aa:ea:66:c4:95:aa:d8:44:cf:01:fe:8f:9f:75:86:
f6:ce:09:91:9d:23:9c:c4:e0:d7:15:46:5f:3c:5b:4d:da:fd:
3c:36:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:09:37 2025 by rpki-client