Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: 1H7L/sPn0Oi3Soo1OLkEsNP6b7aHaJ/9CwK4BkwPIS8=
Subject key identifier: 69:71:B4:8B:D5:E5:29:7D:20:79:E5:02:B7:A0:4F:70:12:EF:81:F7
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01967F0F6B25A2987393E11F377ACAAEED9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 01:00:38 +0000
Manifest this update: Tue 29 Apr 2025 01:00:38 +0000
Manifest next update: Wed 30 Apr 2025 01:00:38 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: mLQlzXzm3VUldmtTNOIWtmmP/RaTLHtXbW7ARBR3cSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:6b:25:a2:98:73:93:e1:1f:37:7a:ca:ae:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Apr 29 01:00:38 2025 GMT
Not After : Apr 30 01:00:38 2025 GMT
Subject: CN=6971b48bd5e5297d2079e502b7a04f7012ef81f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:83:40:aa:33:b5:8a:d8:f5:e1:e2:da:55:
ac:5c:2c:8d:4e:4b:30:5c:e7:13:b8:1a:55:d9:8b:
37:6e:3f:ae:46:b2:db:fc:eb:1d:92:94:c8:9a:c4:
c2:75:51:c0:34:66:72:fb:ee:df:8f:f2:2c:66:04:
9c:41:6d:6c:4e:ef:6a:d4:ef:79:28:98:ab:c5:59:
10:82:a5:c0:7f:96:6a:4f:c6:dd:15:0d:a3:13:f3:
91:b2:30:f4:ad:9e:2e:70:86:2b:02:7c:b8:ed:ea:
da:47:67:ae:54:79:c7:57:9c:00:e6:88:e2:78:64:
26:41:5a:41:fa:1e:60:41:55:32:77:b5:6c:c7:d6:
95:0c:ec:1c:98:85:0e:25:3c:8f:70:18:4c:33:39:
ca:06:04:72:fc:4f:13:71:71:c9:83:3e:18:8d:61:
54:d3:4d:07:2e:52:79:af:46:5b:c6:29:e5:b2:fc:
e7:f2:81:f5:3c:aa:d9:f4:f3:12:5e:45:79:f6:48:
7a:57:82:13:7e:79:b2:ec:86:53:62:a5:fb:f8:5d:
e4:fa:07:71:9b:2c:7e:74:28:73:63:02:1e:98:71:
ff:ee:e1:6a:f3:81:88:93:17:6f:1c:fa:6f:b6:5d:
da:0e:fe:5f:75:33:78:d8:6c:cc:d7:48:9f:5f:5a:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:B4:8B:D5:E5:29:7D:20:79:E5:02:B7:A0:4F:70:12:EF:81:F7
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:a8:61:49:68:c3:84:72:88:d9:28:2b:9e:70:f2:13:37:
11:56:18:51:e0:ac:6a:4d:27:5a:d2:56:58:9d:b0:e4:7f:54:
e9:ef:cb:44:f4:35:b0:2f:ee:ff:4f:a2:3b:ab:45:92:65:49:
fe:41:75:9f:0b:5a:c7:1f:c1:57:54:16:e2:0d:b1:92:50:0a:
1f:93:35:46:b2:1c:79:86:15:29:0e:cf:ba:ca:87:a1:88:39:
f5:64:97:c1:f5:14:3b:09:c9:46:b1:a7:33:ae:db:56:b6:7d:
70:03:3b:7c:5e:3d:62:9a:70:6f:a3:45:f4:4b:78:39:04:75:
d9:9d:1a:b8:db:2e:84:e1:1f:03:b2:65:28:6c:41:6d:13:b6:
6d:5a:f3:a1:73:ca:01:82:f8:44:4d:6e:07:9e:90:0e:71:37:
3b:ab:e2:0c:88:ac:19:75:80:7f:a9:d5:5c:2c:6e:0b:53:80:
a7:9c:22:fb:ed:99:6a:c1:54:ac:6d:ae:b4:28:f8:5f:0f:09:
0c:a9:4f:65:5a:99:82:59:fe:b2:c2:28:80:80:93:8a:03:c5:
89:8e:53:7c:4d:42:75:3b:97:80:53:01:6a:b2:2e:e4:eb:42:
fe:93:41:a8:d6:3e:da:98:61:b6:03:c5:17:03:97:4b:e3:30:
ba:99:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:38 2025 by rpki-client