Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: /Om0PumF5qPraZpE9+JviDYgh/mX3DkxlhIvxmIiV5o=
Subject key identifier: 19:F8:58:E1:16:E5:98:96:F7:69:88:92:7D:02:A9:8E:CE:0E:A1:01
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01964D7E03B24CDBECA611D373808392E202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 046A
Signing time: Sat 19 Apr 2025 10:00:26 +0000
Manifest this update: Sat 19 Apr 2025 10:00:26 +0000
Manifest next update: Sun 20 Apr 2025 10:00:26 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: A+KZsoi+yNcW/WWe1u5/G5Sofh4w5aaXt5Zg3Moirhk=)
2: IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (hash: 1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:03:b2:4c:db:ec:a6:11:d3:73:80:83:92:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Apr 19 10:00:26 2025 GMT
Not After : Apr 20 10:00:26 2025 GMT
Subject: CN=19f858e116e59896f76988927d02a98ece0ea101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:6f:b2:3e:11:1e:e7:7b:57:15:0d:8e:96:
5f:3f:e2:b9:35:99:3b:31:cf:28:50:34:8a:0b:af:
d5:86:85:99:fa:15:09:88:18:9b:e5:2a:ce:cc:80:
43:53:be:57:6f:0c:c3:ca:45:8b:1e:58:6e:4e:df:
76:a0:bb:d8:25:76:26:1d:a1:ee:cc:28:e6:98:50:
48:a7:b3:b9:70:0a:c2:ed:9e:64:59:5a:8d:be:63:
ef:e4:48:3b:e6:30:e1:9e:36:62:e6:ed:a6:67:d9:
3a:90:d5:8b:88:29:ef:1e:c6:d9:ab:4c:cc:97:9f:
52:fb:88:fd:fe:1d:46:69:8a:f4:68:38:eb:24:c0:
ba:19:8e:04:47:46:d3:a9:92:cb:1f:02:e3:2d:99:
b7:d8:99:54:88:e6:a1:e4:5b:9c:37:1b:f4:84:58:
c3:b7:03:74:59:cd:7a:6e:87:b1:6d:fd:c0:09:b3:
cb:e1:91:4b:b3:40:b5:4e:93:a9:ee:ed:47:94:06:
55:ca:5a:29:37:f1:18:ae:ef:9d:b1:cb:a3:cb:9f:
c1:8c:39:82:9e:23:21:93:3b:bf:64:5c:c9:22:89:
27:d7:0a:f4:c8:6a:94:b1:e3:e5:15:20:dd:73:84:
85:43:81:ae:31:ac:2f:75:6c:9c:f2:b2:52:ff:f0:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:58:E1:16:E5:98:96:F7:69:88:92:7D:02:A9:8E:CE:0E:A1:01
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:4b:24:4a:9d:db:0f:e9:46:3f:79:18:9c:cb:d8:c3:13:
f2:22:98:c9:02:49:c5:2e:c1:53:c0:2f:5d:29:94:c1:68:f8:
79:29:5c:b4:39:05:aa:1b:4f:e9:12:85:64:ae:ba:0d:3d:75:
f9:3a:46:1c:0a:47:db:cc:4e:57:f4:1f:13:93:70:ec:bf:37:
db:48:ff:18:27:7b:8d:95:44:d2:0d:4a:ae:8b:c5:67:3b:29:
88:c6:e9:5c:0b:95:37:43:39:8d:a5:4b:ee:f4:18:4e:f4:68:
59:a5:c0:28:b4:8f:a5:0a:fe:8a:c6:91:91:67:bb:9e:53:a2:
74:b6:9b:cf:b4:dc:8f:2c:d6:92:8a:dd:02:0c:6e:64:a3:61:
03:01:be:67:bf:70:fa:3d:c2:83:6d:42:23:23:12:99:71:ec:
67:47:8e:e3:45:16:0d:f9:a4:6c:ae:56:a7:37:24:3c:17:0d:
e1:df:39:22:06:59:be:ce:bd:72:ba:6a:26:08:1c:93:48:52:
7a:5f:bb:02:24:8c:de:37:d6:5e:ed:e0:1a:9a:61:a3:96:06:
34:01:5e:79:f4:11:ed:25:8e:72:c0:25:c5:1f:dd:fb:e3:ac:
5a:6d:cd:db:4d:cd:fe:e2:f9:50:1e:d9:9e:e0:f7:61:ea:4a:
5d:55:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:47 2025 by rpki-client