Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: XDedXZMEDIVbiS2HJ5tj16XBpn6JNvd6SXIU/6InXaM=
Subject key identifier: 37:57:EE:A1:0F:02:0B:77:96:CE:D5:4D:A3:5D:E4:45:49:17:46:A3
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019695609724F85BDFA7D2703578C8EE028C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 09:00:57 +0000
Manifest this update: Sat 03 May 2025 09:00:57 +0000
Manifest next update: Sun 04 May 2025 09:00:57 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: VFs4U9aYp1X+HElQUF64RxiorKfXu1TyBVidBPC1klE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:97:24:f8:5b:df:a7:d2:70:35:78:c8:ee:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: May 3 09:00:57 2025 GMT
Not After : May 4 09:00:57 2025 GMT
Subject: CN=3757eea10f020b7796ced54da35de445491746a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:a1:f3:ce:08:fe:05:29:4e:77:9b:33:b9:
e7:f1:74:2c:cc:fe:b8:31:d5:df:4f:8a:72:9e:b1:
2d:2a:b4:9b:a7:b5:07:81:ab:cc:12:cf:ea:ea:81:
fe:84:f9:54:f8:f0:f6:6e:1c:9e:50:45:2a:c2:90:
0e:b6:93:79:86:a5:f6:b3:8a:fd:13:28:0a:4d:73:
28:89:a3:31:5f:1a:1b:7e:6a:98:22:37:dc:c8:76:
d0:16:e9:0f:23:22:a8:95:c2:2c:4c:40:87:de:04:
c1:8a:1a:f2:f8:06:d1:47:13:34:65:ec:49:c6:c4:
92:5d:ce:47:d6:25:10:7d:31:14:25:76:18:25:97:
77:e2:df:43:b0:36:a6:30:13:51:88:3c:66:27:bd:
53:22:5b:e5:63:31:1a:b4:40:2f:ca:58:0f:3b:0f:
30:55:e3:ea:f7:2f:1f:45:9b:4c:03:3d:fe:95:81:
37:02:74:0b:84:5c:89:b2:1f:a1:5e:e9:00:4e:ae:
ac:51:db:a0:a0:4f:e1:e1:ed:45:41:4a:11:28:a5:
d4:d1:60:80:04:fa:33:22:2a:00:58:87:a7:bc:0f:
b3:31:a1:c2:2d:82:12:aa:42:cd:e7:78:71:b1:11:
0c:dd:78:a8:dd:93:c4:ed:d2:8a:66:a8:dc:19:38:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:EE:A1:0F:02:0B:77:96:CE:D5:4D:A3:5D:E4:45:49:17:46:A3
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:cf:17:52:d9:29:71:90:6f:8d:5f:0e:34:f6:d2:06:ea:16:
7e:dc:11:74:8c:25:96:23:ad:fa:60:18:2e:15:6b:8c:a1:91:
4d:83:62:09:4e:71:4e:ef:4e:9f:cb:0b:08:d6:33:a6:b9:d2:
01:20:82:c8:1b:f7:e4:0e:4b:85:3a:2b:26:c5:39:5f:5a:41:
17:5e:30:ec:96:bf:4f:0c:a4:81:6f:e5:ca:74:96:af:ab:09:
f7:30:2c:d6:87:ec:5d:18:7c:ef:16:d6:37:29:1a:b3:90:e6:
80:0b:fb:22:3f:4e:57:01:eb:33:56:de:e0:0f:5a:59:88:be:
1d:38:7d:61:9c:cd:44:7a:e0:a7:dc:47:6a:90:30:0b:0c:2d:
ec:df:69:a6:93:56:f7:ee:a7:39:94:b9:ce:da:67:cc:a7:d0:
e4:9b:93:15:40:a1:89:d4:d9:2f:37:d0:9e:bb:b5:83:bb:b6:
00:aa:7e:4f:77:03:bd:1e:aa:3d:57:29:3f:ce:b0:0e:c6:b4:
67:40:00:49:12:a8:ca:ec:7f:d9:67:b5:88:f5:15:8a:bd:42:
57:d7:c2:8a:75:88:2d:fe:77:ca:29:95:54:f9:0a:e7:64:cb:
63:41:71:1c:7e:9a:82:35:41:00:21:ba:c3:a3:b2:27:1d:d7:
f3:1b:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:36:24 2025 by rpki-client