Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: y48FKTMGEkCmFEy3hBCUr8ORBC5pu1FT+kNgRkjMak0=
Subject key identifier: 88:7F:01:72:3D:7B:90:C4:F2:45:14:A9:1D:6F:A2:5A:B9:AD:BB:0E
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019648FCC87C56CB2FCB324321F3E149B126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 13:00:48 +0000
Manifest this update: Fri 18 Apr 2025 13:00:48 +0000
Manifest next update: Sat 19 Apr 2025 13:00:48 +0000
Files and hashes: 1: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (hash: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=)
2: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: EFxavIDp+7BR5x5GY5F2fAMIK9BY7moJrBpeFl3iSEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:c8:7c:56:cb:2f:cb:32:43:21:f3:e1:49:b1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Apr 18 13:00:48 2025 GMT
Not After : Apr 19 13:00:48 2025 GMT
Subject: CN=887f01723d7b90c4f24514a91d6fa25ab9adbb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:07:19:94:84:89:f3:27:00:07:83:e8:dc:
5b:2a:31:8f:60:66:44:88:1f:ca:e2:c8:68:f4:20:
fb:ee:b9:50:f2:85:ef:6b:a0:4b:2d:ee:85:33:0a:
e3:a9:04:c3:92:4b:8c:85:87:7a:69:06:ed:fa:44:
b1:d3:13:28:57:ba:85:f1:fb:f0:05:62:7b:3c:6e:
24:27:a3:a5:21:dd:b0:95:8d:9c:b5:8a:b8:b8:bf:
67:4b:00:48:18:59:6e:6e:1b:a3:eb:49:b7:c5:ea:
5b:cf:2a:14:24:41:86:2c:6b:24:cc:1b:81:40:25:
92:db:9b:74:7b:33:69:23:0f:d5:40:37:88:ea:40:
c9:40:3d:da:48:8e:60:1d:e6:1e:02:2a:77:30:9d:
1d:ff:d4:5a:05:e1:54:6f:59:66:bf:6a:9f:50:25:
ac:2f:d7:5c:9e:b3:17:e0:8e:ab:2f:89:69:75:2f:
20:e5:a2:6d:d5:ca:3a:d8:dc:8f:71:2a:78:2c:2e:
3c:aa:e2:40:19:f4:6f:23:64:35:a1:74:85:8f:bc:
e7:1a:51:2f:0a:2a:3e:18:f8:67:1a:3c:ff:72:38:
4a:4d:47:c5:57:a9:d1:39:a2:58:eb:2b:4f:7a:49:
c8:13:d1:13:c8:35:26:2a:f4:50:c7:9f:9d:9d:5e:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:01:72:3D:7B:90:C4:F2:45:14:A9:1D:6F:A2:5A:B9:AD:BB:0E
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:87:7b:d2:c3:81:7c:17:7d:8b:f5:03:83:13:b6:27:40:
7d:f1:3e:04:c2:9f:cd:94:ac:af:70:8c:0b:f5:84:63:9a:cf:
64:f1:93:23:04:54:29:5e:b1:49:ce:d4:46:ba:8c:df:e7:7e:
bf:de:4e:4f:9a:d0:c3:13:c2:71:1e:02:c7:e9:3d:46:f7:bf:
a6:8d:ed:20:0d:0e:21:02:2e:ff:d8:54:92:17:45:e9:cc:73:
e8:11:bd:af:22:b4:4a:1b:79:2f:cb:7c:8e:de:e6:20:ce:80:
74:cb:5f:24:cb:57:18:75:89:3f:65:20:17:a6:98:f9:b4:09:
fa:59:ac:9a:4c:52:5e:5c:bd:56:e7:ed:0a:30:bd:2a:9e:da:
06:09:c7:4d:87:29:31:f0:d4:a0:a6:83:92:e0:c1:11:9c:82:
64:5f:ba:cc:1d:a2:6b:fb:f0:57:02:30:07:74:92:8a:4b:58:
bd:8a:7b:3b:c9:86:fc:8c:e8:41:19:65:03:ae:95:c7:2f:d8:
fb:f6:f7:fb:11:f6:83:93:cb:bb:cc:14:e4:b0:47:34:5a:62:
af:26:fd:fc:13:e6:48:d2:fb:e5:98:69:65:82:60:6e:25:77:
42:a5:64:a9:54:e4:c5:c8:b6:5d:21:4e:1f:e8:29:e6:01:ef:
28:94:bf:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/Mh8VssvyzJDIfPhSbEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjUwNDE4MTMwMDQ4WhcNMjUwNDE5MTMwMDQ4WjAzMTEwLwYDVQQD
Eyg4ODdmMDE3MjNkN2I5MGM0ZjI0NTE0YTkxZDZmYTI1YWI5YWRiYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15YHGZSEifMnAAeD6NxbKjGPYGZE
iB/K4sho9CD77rlQ8oXva6BLLe6FMwrjqQTDkkuMhYd6aQbt+kSx0xMoV7qF8fvw
BWJ7PG4kJ6OlId2wlY2ctYq4uL9nSwBIGFlubhuj60m3xepbzyoUJEGGLGskzBuB
QCWS25t0ezNpIw/VQDeI6kDJQD3aSI5gHeYeAip3MJ0d/9RaBeFUb1lmv2qfUCWs
L9dcnrMX4I6rL4lpdS8g5aJt1co62NyPcSp4LC48quJAGfRvI2Q1oXSFj7znGlEv
Cio+GPhnGjz/cjhKTUfFV6nROaJY6ytPeknIE9ETyDUmKvRQx5+dnV5lsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh/AXI9e5DE8kUUqR1volq5rbsOMB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghWHe9LD
gXwXfYv1A4MTtidAffE+BMKfzZSsr3CMC/WEY5rPZPGTIwRUKV6xSc7URrqM3+d+
v95OT5rQwxPCcR4Cx+k9Rve/po3tIA0OIQIu/9hUkhdF6cxz6BG9ryK0Sht5L8t8
jt7mIM6AdMtfJMtXGHWJP2UgF6aY+bQJ+lmsmkxSXly9VuftCjC9Kp7aBgnHTYcp
MfDUoKaDkuDBEZyCZF+6zB2ia/vwVwIwB3SSiktYvYp7O8mG/IzoQRllA66Vxy/Y
+/b3+xH2g5PLu8wU5LBHNFpiryb9/BPmSNL75ZhpZYJgbiV3QqVkqVTkxci2XSFO
H+gp5gHvKJS/AA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:08 2025 by rpki-client