Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: IA7ws4P8zZQ6wBp9Upc/KFXagdd7/DY8IIO1q+tWCL4=
Subject key identifier: 87:71:B6:0E:B4:D5:06:40:D9:83:E6:A6:5B:7A:36:FE:73:A9:F1:BD
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01964D7DD14432CE77E11D51273EF93EFD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 103C
Signing time: Sat 19 Apr 2025 10:00:13 +0000
Manifest this update: Sat 19 Apr 2025 10:00:13 +0000
Manifest next update: Sun 20 Apr 2025 10:00:13 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: KgWXaYM/jXqoz7nzs8XkO3Kzu+ICZsEYFsgcj2/grFs=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:d1:44:32:ce:77:e1:1d:51:27:3e:f9:3e:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Apr 19 10:00:13 2025 GMT
Not After : Apr 20 10:00:13 2025 GMT
Subject: CN=8771b60eb4d50640d983e6a65b7a36fe73a9f1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:8a:3b:31:cd:57:43:c0:fc:de:2f:e7:1e:
48:b5:4f:45:ff:5a:b9:b7:8c:b8:8e:83:12:2a:23:
bd:1a:a7:13:34:7b:f8:69:b5:f1:bc:39:ea:1b:0d:
d8:e9:b3:d3:db:41:bd:b6:06:27:01:76:e5:08:bf:
91:99:0a:16:9b:3c:08:22:bc:20:8d:d6:31:a0:5d:
64:9e:7d:9b:e1:53:29:3e:cc:41:a0:d9:bb:9b:ef:
b7:26:33:ce:77:1a:95:80:8e:5e:9c:f9:18:ae:93:
5d:12:58:4e:9c:c7:d9:0c:3c:8d:66:01:7f:15:82:
35:25:05:ce:9d:eb:8e:b0:6c:14:0b:cf:41:25:f5:
18:43:bd:4d:74:67:ef:48:0d:10:44:c9:25:c7:cd:
90:c4:89:f2:75:7a:6d:89:ab:80:50:dc:08:7a:e9:
8d:1a:92:60:a3:ad:3d:9a:7c:8b:0b:50:42:0b:59:
df:0f:6e:b2:d1:dc:94:1e:a0:ad:f3:44:11:6c:a3:
c1:da:02:e8:46:1e:38:ea:23:ce:81:43:a1:dc:72:
e0:c6:41:47:ff:b4:11:c5:67:72:1c:03:de:32:60:
19:79:c9:b0:17:36:44:2c:9c:13:63:1b:8c:3b:3e:
64:89:78:a0:f7:92:1e:2d:c0:ee:a4:c0:32:a1:21:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:B6:0E:B4:D5:06:40:D9:83:E6:A6:5B:7A:36:FE:73:A9:F1:BD
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:b1:de:dc:e6:0c:70:86:4c:f0:39:4c:e8:ae:91:e4:18:
55:e8:c1:cd:99:eb:6e:ca:aa:98:60:41:f3:3e:ad:17:93:4e:
0b:6c:dc:f9:ff:75:1a:c7:d1:8d:50:f6:71:52:ce:94:26:5b:
5d:3c:a5:c1:64:18:7f:96:30:89:ec:ce:8a:d7:42:7b:9e:2d:
47:84:4d:14:ee:4a:0e:9f:fa:49:26:f7:67:3c:f0:e2:48:99:
65:e7:c9:b8:c2:e9:ce:8e:97:43:d0:1c:31:dd:3d:b1:57:ce:
c0:db:3c:15:9b:13:cd:43:6a:b7:13:40:73:cc:ca:9a:e7:02:
a5:b9:12:ae:8a:06:2a:8a:ae:cb:c6:ad:b1:19:d2:99:59:b2:
59:58:74:29:db:97:4e:ca:dc:a8:52:fb:95:a0:d2:76:9c:60:
7e:ae:cb:e4:69:14:f2:8f:ff:bb:83:3a:79:98:a8:73:40:97:
a8:2e:11:96:59:38:87:14:f3:57:fd:a6:35:b1:bb:27:e1:5d:
e7:f1:15:67:d3:3e:f3:81:3d:0a:c1:60:5e:76:e8:0a:cd:14:
b5:21:57:4e:ee:03:a5:0a:71:d5:5a:5c:b5:e5:e4:f0:d7:7f:
bb:21:e4:fb:ff:e7:96:10:6c:0d:1e:b6:f0:1a:83:1c:44:f4:
88:4c:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:47 2025 by rpki-client