Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: Va0xaWKJg8b7E00l4OziB9RAG+CHaDSPrOlqnilt7Nk=
Subject key identifier: 58:C3:86:59:B9:B8:C7:AB:38:DF:87:2D:E8:1C:83:1E:E0:92:88:6B
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019650485F9E10C0B363DAC52897ED2481BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 0364
Signing time: Sat 19 Apr 2025 23:00:42 +0000
Manifest this update: Sat 19 Apr 2025 23:00:42 +0000
Manifest next update: Sun 20 Apr 2025 23:00:42 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: Iu/3a1frPXl2jFtuG+jsXrnHsde459kx9UbphNzYu1Q=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:5f:9e:10:c0:b3:63:da:c5:28:97:ed:24:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Apr 19 23:00:42 2025 GMT
Not After : Apr 20 23:00:42 2025 GMT
Subject: CN=58c38659b9b8c7ab38df872de81c831ee092886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:eb:e7:40:30:36:c5:1e:e8:72:ef:45:d4:
a0:dd:78:ad:dc:9f:6e:ee:c1:cd:ef:f4:3b:a2:9d:
18:67:6e:37:f0:f6:87:76:12:fb:d4:c1:da:65:b5:
94:af:76:3a:e6:1d:a5:91:3d:fa:0f:97:34:fc:d6:
87:f0:38:15:25:b1:ad:01:30:78:07:7e:e4:9a:e6:
36:98:fd:c4:0c:06:ae:fc:15:1a:79:9d:4b:ec:21:
df:e3:f1:88:d5:ff:4d:26:19:ad:a2:cd:27:96:98:
3c:11:84:8d:75:f0:72:d6:a1:da:57:fd:a5:a1:c9:
80:52:d2:cc:78:c3:dc:0e:0a:35:34:ac:2f:0d:11:
a2:44:1a:98:25:d1:dc:94:6c:d2:05:2b:88:4d:3a:
ba:ad:f4:50:67:93:82:39:5f:e1:75:7e:f2:82:cf:
0a:71:f2:9f:1f:07:77:be:49:06:24:e6:60:15:25:
d7:76:5c:44:ff:fd:8f:8a:34:89:22:9f:bb:c8:aa:
46:88:df:d9:37:07:19:cc:56:b0:7c:e0:f6:60:38:
09:e0:1f:68:c3:0c:ac:9b:8e:3f:59:6f:7c:9b:d4:
8a:26:27:61:9d:6c:b0:1c:6a:24:9f:42:d8:13:ca:
61:00:b2:2a:c0:a6:30:ea:e5:1e:a3:6f:7e:bc:7b:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:86:59:B9:B8:C7:AB:38:DF:87:2D:E8:1C:83:1E:E0:92:88:6B
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:39:cf:3f:e5:45:34:07:7a:09:75:31:f5:73:d7:5c:77:
4d:7b:3e:34:41:bf:16:4f:0b:5a:8a:d2:21:cf:d2:c9:4b:26:
0d:96:10:b7:37:96:8c:e3:3d:2b:18:6c:a8:35:bf:f5:0c:9c:
17:87:c2:48:c9:74:b2:f4:70:37:c5:dd:7a:9c:f9:22:08:2a:
a6:94:59:ca:b7:2f:ca:25:f7:1e:1f:58:01:54:c3:c0:e1:a7:
d5:6d:07:6c:3c:fc:a5:01:ad:85:74:32:44:6f:7c:9f:04:a1:
7b:be:b1:06:c9:9d:9a:5a:97:fa:fb:00:84:f9:0a:1e:d9:93:
c2:fd:90:f0:2a:fe:61:09:26:87:30:1a:b1:06:58:de:dd:75:
c6:bf:f7:4a:4e:56:00:8c:b1:46:88:ce:9c:15:5a:1d:fa:f0:
e1:21:a8:94:b9:8f:38:f2:63:08:69:2c:f0:29:99:44:3d:77:
04:84:22:d7:9b:39:c0:1f:41:f1:a7:4b:fe:b0:95:c0:96:7f:
b3:a3:5f:b7:ab:f6:e8:50:c2:f3:72:67:58:3a:bf:b9:b4:a0:
44:05:32:6b:6e:fb:8d:91:cb:eb:e8:32:f6:a8:45:80:d6:7e:
69:89:42:33:77:2d:8b:42:52:99:45:9f:31:70:5c:5e:54:21:
cb:04:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:58 2025 by rpki-client