Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
File: 80Cbg9EUyAkhERbKLI2zjc4WgPk.mft (raw, json)
Hash identifier: fKtlF5BuHNiVpiHYMaaLH6TyGssTFwJKI3Djd6UmuXE=
Subject key identifier: 68:A6:94:DB:42:88:8C:99:53:0D:1C:34:D8:D1:3D:B7:5D:0E:83:52
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Certificate issuer: /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial: 019610C51999DE1A3715203BDD98BF25C64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
Manifest number: 06FB
Signing time: Mon 07 Apr 2025 15:01:14 +0000
Manifest this update: Mon 07 Apr 2025 15:01:14 +0000
Manifest next update: Tue 08 Apr 2025 15:01:14 +0000
Files and hashes: 1: 80Cbg9EUyAkhERbKLI2zjc4WgPk.crl (hash: aipSksqCJDSFNQ4KugZCHcIn+8OkBSitAPGx0tEOmSI=)
2: SIpXBuF5J8M21Gywmn86E22uiyU.roa (hash: 0/HkiIDr1xidzVLyjio2x3kYkY2H4uzUst02FaBMwU4=)
3: cfMo45Jv9A1WGKpmxu905UcUbY4.roa (hash: U6aEuljm9L9MfkEprrOph8zxNUxsNX0jhdgLZVW2e8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:19:99:de:1a:37:15:20:3b:dd:98:bf:25:c6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Validity
Not Before: Apr 7 15:01:14 2025 GMT
Not After : Apr 8 15:01:14 2025 GMT
Subject: CN=68a694db42888c99530d1c34d8d13db75d0e8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:19:47:05:e0:c2:60:7a:6c:36:2d:fd:2e:
74:9a:90:b1:93:e3:ce:66:e1:7e:11:2d:3f:f0:ea:
79:3c:f2:b0:3e:ea:99:ad:b1:82:59:0c:4a:e9:d2:
38:9a:df:4d:a0:70:fa:1c:46:35:44:79:0c:6b:e1:
55:25:f4:0d:df:8d:40:18:c1:27:a0:d7:6b:2c:d9:
d2:38:a8:cc:b2:db:ea:ca:6d:03:5c:db:2d:0b:30:
7d:dc:42:df:e8:3c:73:66:ec:02:40:e1:8a:fb:c0:
4c:d3:93:ee:4c:22:79:55:72:45:99:b5:cc:ae:f9:
37:d4:35:45:24:14:95:62:29:7c:fc:3f:4f:32:f1:
42:68:f7:a5:9b:bf:29:e7:a7:57:25:51:31:45:43:
46:fa:06:5e:cf:fd:f8:7c:61:15:06:cb:64:dd:2e:
1e:db:3c:52:21:0a:d1:27:64:b1:f0:4d:9e:72:b5:
45:4d:e1:ec:dd:fb:54:80:cd:2f:33:94:2d:24:94:
84:79:8c:0a:83:fc:69:b6:db:a9:1a:f4:19:f6:58:
8c:bb:11:9a:75:91:5c:8a:4b:78:5c:8d:0b:a9:29:
57:bf:3c:d2:28:19:b6:e4:61:8a:c7:d2:a9:84:bd:
ac:a3:6c:c7:c5:4b:86:92:5f:c4:de:54:77:9d:c2:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:94:DB:42:88:8C:99:53:0D:1C:34:D8:D1:3D:B7:5D:0E:83:52
X509v3 Authority Key Identifier:
keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a1:e7:5e:d9:fc:79:56:8b:b1:3c:55:86:36:61:46:2f:6e:
e7:01:fe:d4:94:c2:a6:e9:05:13:0d:c3:77:21:1a:53:69:60:
0a:6b:9e:4e:ae:3c:85:dc:aa:34:9e:7c:eb:fc:87:29:35:60:
7d:4c:69:2e:86:18:34:d6:9d:26:c7:58:42:6c:fb:bd:92:29:
46:3c:64:6b:8e:2c:4b:ff:6d:e9:b1:17:4e:94:88:6f:91:08:
f8:64:00:91:fd:d1:9f:d4:24:de:7d:4f:d9:e6:8f:4d:5a:c5:
d9:95:12:c2:66:2a:4a:10:1f:4b:a0:04:ff:bd:d8:22:32:50:
09:e3:1e:da:50:6b:32:00:1b:ba:12:7c:ec:6c:92:04:9a:e8:
4c:da:f6:e6:6c:99:73:b3:e8:60:f6:ba:21:f7:b6:85:26:d6:
a6:3b:18:e9:2c:c5:2c:ff:80:8d:f7:91:5d:38:2c:fa:35:cb:
db:79:54:aa:af:01:0a:a8:b9:d8:8f:5c:72:14:60:b1:38:72:
89:47:88:a7:bf:e0:a6:09:34:46:00:18:e7:56:24:ec:9e:e9:
fc:4a:42:b4:51:35:87:97:72:19:f1:b3:69:6b:08:81:05:f9:
b6:1f:43:1b:81:db:43:d8:88:dc:a3:fd:aa:a5:b4:a8:b1:ff:
12:d3:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:22 2025 by rpki-client