Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: zBUBrcsF1nuvc/uMqcU1SrQ2dTuENM9SVt54sRmZbIw=
Subject key identifier: A7:49:9B:14:CC:9A:EA:23:D6:52:CD:FA:EE:01:3B:99:42:90:84:7A
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01958FCF15C357D4AED9C61C1D1EDF075DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 01FD
Signing time: Thu 13 Mar 2025 14:01:08 +0000
Manifest this update: Thu 13 Mar 2025 14:01:08 +0000
Manifest next update: Fri 14 Mar 2025 14:01:08 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: 6CHZtpHmuXFMhTeYTFr4yop+DzAVVZ/b/olk89yjpUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:15:c3:57:d4:ae:d9:c6:1c:1d:1e:df:07:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Mar 13 14:01:08 2025 GMT
Not After : Mar 14 14:01:08 2025 GMT
Subject: CN=a7499b14cc9aea23d652cdfaee013b994290847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:79:ba:d9:fb:c0:e0:22:f3:fe:32:5b:c9:
d8:ee:e1:33:34:89:f6:92:8f:b8:40:75:8a:ae:dc:
63:ae:64:5d:ba:09:31:54:94:8f:0c:85:c5:9b:dc:
6a:1b:f2:ca:2a:7d:0c:32:22:a2:ce:0e:f8:9f:07:
f8:26:8e:42:8f:d5:ed:16:cb:1b:65:54:02:6b:d8:
4b:94:af:d4:34:86:39:12:72:24:b3:5e:fa:30:02:
a7:b1:ea:d5:89:61:68:1a:37:3c:4b:ae:2a:d7:12:
85:fc:5f:f9:ce:c9:6f:71:0c:8c:00:88:b6:b4:46:
95:e1:53:4d:91:3c:26:0b:d4:25:5e:4e:ed:7f:a2:
27:9a:4b:2f:d4:37:33:b0:42:ae:ff:ea:26:35:e5:
70:f9:85:6c:cf:25:9e:3e:84:5b:ed:02:f4:8a:21:
d0:48:25:bb:8e:ee:4b:8e:61:86:73:38:c8:66:c7:
f2:aa:ca:93:8b:06:6e:46:ee:fe:12:5c:9a:fb:5c:
92:4e:4e:07:6d:93:80:56:f2:86:48:f8:00:69:55:
31:dd:07:93:a7:cd:77:0e:f0:e1:db:6e:ba:2b:e3:
10:ad:65:0e:e7:73:24:c3:23:12:11:23:74:7a:1c:
b4:c9:94:4b:5c:ae:55:80:89:cd:97:cd:4b:a3:f6:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:9B:14:CC:9A:EA:23:D6:52:CD:FA:EE:01:3B:99:42:90:84:7A
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:d8:97:87:d2:8c:ed:b1:d0:3a:c6:94:d8:5c:ce:7c:b2:
c0:63:c4:7b:91:ea:d9:f3:cb:5a:b8:f2:94:d7:fe:4e:b5:ad:
34:64:24:ab:10:b2:36:0a:5a:01:6d:c4:95:d7:ca:c1:c3:f9:
4c:bd:7c:7c:d3:86:4d:3c:47:6e:3c:e2:b9:32:b9:06:5f:c5:
fb:15:a1:91:27:bb:85:f5:5a:6b:2e:79:fe:b9:6d:ce:4b:9b:
35:05:8d:5a:42:2a:7f:42:4b:0e:5b:25:e4:34:1a:3a:37:a8:
4b:d2:78:14:8f:8c:76:95:c2:4f:dc:33:b8:d9:cb:ed:f6:1a:
0a:66:91:75:56:2b:d9:e5:67:b9:26:16:69:e7:f0:bc:d0:26:
7c:e6:61:82:94:42:fe:0f:e1:6a:b4:ca:f1:8b:57:fe:e9:4b:
7f:2f:8c:e0:c8:7a:21:76:08:bd:b9:95:3f:ea:c5:4c:7a:28:
30:3e:5a:d8:26:62:27:d8:2f:29:fe:ff:b6:00:f0:b9:0c:3c:
e0:97:d6:40:32:ca:3a:c1:be:5b:78:10:d4:0e:e1:7b:f2:75:
57:18:0b:0a:94:0d:10:1a:77:ef:77:5b:42:0d:7d:fe:e0:be:
18:87:d7:51:3f:86:c8:4a:31:b2:20:d7:a7:1b:3a:40:0a:ca:
b6:74:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:56 2025 by rpki-client