Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: zn4N5r9ayHJ255FzINOlqaY3c6xfksTMibvJ0xjWZkc=
Subject key identifier: A6:00:FA:FD:9B:EA:CA:6B:58:3D:8D:BD:E1:B5:EB:A0:B4:B8:79:A0
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01964D10760C03D628B9E43219A6826F05C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 025F
Signing time: Sat 19 Apr 2025 08:00:46 +0000
Manifest this update: Sat 19 Apr 2025 08:00:46 +0000
Manifest next update: Sun 20 Apr 2025 08:00:46 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: 7oZJj4taNGks+2z195JzpOn6nB7IsSkx7ob86CtPVEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:76:0c:03:d6:28:b9:e4:32:19:a6:82:6f:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Apr 19 08:00:46 2025 GMT
Not After : Apr 20 08:00:46 2025 GMT
Subject: CN=a600fafd9beaca6b583d8dbde1b5eba0b4b879a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:92:43:23:fd:c9:81:f2:48:69:18:09:b1:
aa:68:89:11:72:6a:cd:62:fe:48:4d:08:2b:e8:12:
61:c5:75:d6:f5:30:2b:99:98:92:3b:fd:8b:dd:04:
56:85:80:e9:13:1d:35:e9:49:33:3b:5b:e4:d6:74:
61:0b:ba:69:6a:d3:e2:9d:11:ea:6f:1d:74:bc:60:
d7:78:33:74:43:dc:0d:3b:87:02:01:18:d7:1c:84:
09:18:d8:ea:82:d5:f8:b8:47:99:bc:3b:ad:c1:bb:
07:42:4b:fe:17:b6:ad:a4:b0:78:50:68:5b:34:6b:
1a:05:0d:77:cc:ed:a9:1c:5b:13:37:0d:06:c7:b7:
e8:5d:11:44:9f:b5:37:3b:96:ba:db:1a:b9:83:c6:
92:80:5b:76:fc:3f:49:9f:49:db:28:31:29:95:24:
78:02:6b:ad:b0:00:92:bc:bc:ae:b5:7a:4a:53:d8:
dd:79:ab:45:fe:8a:f2:58:30:c3:78:bf:a3:96:da:
d1:25:e8:2d:04:46:42:5f:c4:9a:65:e1:ee:4a:f8:
9e:87:d6:42:be:90:9b:7c:b2:b8:05:10:2b:24:38:
5c:57:5a:15:a9:3c:49:eb:b4:25:89:16:36:6b:f8:
c0:bc:fc:e7:15:53:1c:52:6f:61:97:9a:64:51:ee:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:FA:FD:9B:EA:CA:6B:58:3D:8D:BD:E1:B5:EB:A0:B4:B8:79:A0
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:c1:85:8e:ac:a4:9a:80:4f:a8:15:50:e2:52:a1:67:cd:
39:00:12:fa:19:78:d3:58:90:81:94:d8:2e:c6:7c:f5:4d:5b:
e7:79:45:b7:a9:3e:9f:a6:af:cc:c4:23:2c:f1:8f:d6:ec:0d:
b4:20:d5:ad:db:79:0f:11:ca:fb:ac:47:91:65:b1:c5:a7:52:
54:25:b7:03:8b:02:d0:7a:41:99:da:7a:02:45:d5:a9:c4:31:
8f:45:d5:d6:4e:d9:35:cd:40:93:5b:8d:bf:10:4b:b8:6d:f3:
d8:13:28:b6:e0:89:f2:15:3a:45:cb:37:c2:ad:4a:5e:d1:54:
22:fb:67:33:12:e4:d9:98:09:8d:dd:c1:d8:e3:a5:1f:b4:66:
7f:97:8b:d8:c1:1b:a8:41:ed:b6:26:d5:f0:20:34:b5:41:ac:
aa:74:2a:94:56:59:a4:11:4f:31:ed:ae:c2:92:46:9a:34:a8:
b4:e1:33:f2:2b:0a:55:35:cd:bb:cf:f3:ec:fa:62:67:60:59:
73:c8:f0:87:60:76:ec:d9:6b:fc:f8:b4:27:9a:6d:43:78:94:
67:62:5b:c3:22:f6:53:e0:d1:d8:6f:15:4f:ba:46:b2:cf:2a:
89:0f:30:83:dd:8f:0f:36:20:98:db:55:c0:d1:c0:47:ac:05:
35:07:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:16:08 2025 by rpki-client