Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: inOCKWVmzoVFpK0WK1Qn82gGlf4jTNlwA0FPO3I/MAc=
Subject key identifier: 2B:50:8D:80:41:4D:B7:E1:D8:86:0A:2B:05:38:C4:03:FD:73:0D:20
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019641432109B5F66C99EECA449CE5EB191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 04B7
Signing time: Thu 17 Apr 2025 01:00:40 +0000
Manifest this update: Thu 17 Apr 2025 01:00:40 +0000
Manifest next update: Fri 18 Apr 2025 01:00:40 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: rRMZwDo0uKqC91/1VmyoGxaQF/1Sqn1aYecI1pNFFvI=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:21:09:b5:f6:6c:99:ee:ca:44:9c:e5:eb:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Apr 17 01:00:40 2025 GMT
Not After : Apr 18 01:00:40 2025 GMT
Subject: CN=2b508d80414db7e1d8860a2b0538c403fd730d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:e9:d1:ef:91:32:f0:d2:f8:a3:2c:02:59:
fa:22:1c:08:82:be:4c:9b:b2:0c:de:87:2f:d3:9d:
55:3e:d2:75:64:2f:fe:23:b2:eb:f8:b2:77:fb:8d:
ab:c0:fd:0c:5c:52:f4:39:d2:87:9b:3f:94:c2:ac:
35:19:97:5c:62:58:52:f8:1f:90:9e:cf:ab:15:b2:
0f:42:f7:e2:ca:5e:9a:c7:54:f9:e8:30:55:00:29:
fe:87:22:49:22:53:47:c1:e3:9f:13:ba:cf:d8:8f:
7a:65:c7:8b:01:a0:b7:ef:a7:58:cd:ed:73:34:f1:
a1:4e:18:1e:aa:e5:98:e7:0f:aa:42:6a:8c:71:4e:
21:59:60:3e:55:76:96:ab:cf:f2:5f:92:de:c5:b1:
bb:fd:fa:e4:c6:95:67:32:60:51:dc:27:52:17:11:
02:63:ae:bb:8c:23:50:74:78:26:01:b2:6b:77:ec:
ae:21:d1:a1:2e:0a:fc:8d:4f:84:1b:ab:e1:15:3a:
82:c4:5c:d9:6a:12:aa:20:43:92:00:cb:a7:0a:a9:
29:d8:ba:83:18:e0:0c:34:2f:cb:85:66:d8:73:d8:
00:8c:34:62:1e:46:e3:ee:a8:b1:fc:34:b2:3a:34:
55:3d:5e:a0:cd:40:79:d1:d2:42:84:91:3e:e0:0e:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:8D:80:41:4D:B7:E1:D8:86:0A:2B:05:38:C4:03:FD:73:0D:20
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:0a:c4:55:78:e9:a7:2c:ff:92:7b:d4:0c:2f:a4:54:31:
60:c1:a5:4b:70:5c:a0:5c:e1:6b:b0:55:72:1b:96:77:1b:db:
34:21:a5:9d:43:e9:c1:34:85:19:24:eb:b6:85:e0:07:ea:bd:
2d:96:48:41:db:41:2d:25:fc:a4:45:34:ed:6a:02:2d:55:d1:
ac:f7:1e:d6:8b:14:07:c3:59:94:c1:30:7c:14:f2:84:dd:8d:
7d:8f:05:20:e9:2e:3a:c2:4f:a0:0b:83:fc:a0:a7:c6:ed:a0:
2b:bc:9f:53:cf:90:a6:6f:29:dc:7b:b4:fc:b4:cc:1e:8e:e7:
cd:94:61:bb:ab:03:13:3f:a3:f9:da:8c:da:27:ab:37:7a:74:
ea:c7:85:21:d0:c9:37:fe:39:ff:89:97:2a:53:30:0d:53:9d:
4a:81:63:88:1a:de:b0:75:8c:3f:74:66:2d:84:8f:9f:39:a1:
81:35:9b:13:93:9a:7b:7a:e3:a5:b5:78:97:2b:33:67:87:fb:
5a:ec:a4:a9:34:44:87:c2:8e:9e:fc:a6:8b:46:b3:3e:61:c7:
57:e1:3b:b0:62:34:69:15:6c:cf:4c:f0:b3:f9:fa:fc:87:4a:
45:f7:55:c4:41:6f:78:1d:a3:07:11:e9:1e:e9:02:63:af:22:
58:0a:ee:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBQyEJtfZsme7KRJzl6xkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj
ZjJlODEwHhcNMjUwNDE3MDEwMDQwWhcNMjUwNDE4MDEwMDQwWjAzMTEwLwYDVQQD
EygyYjUwOGQ4MDQxNGRiN2UxZDg4NjBhMmIwNTM4YzQwM2ZkNzMwZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpbp0e+RMvDS+KMsAln6IhwIgr5M
m7IM3ocv051VPtJ1ZC/+I7Lr+LJ3+42rwP0MXFL0OdKHmz+Uwqw1GZdcYlhS+B+Q
ns+rFbIPQvfiyl6ax1T56DBVACn+hyJJIlNHweOfE7rP2I96ZceLAaC376dYze1z
NPGhThgequWY5w+qQmqMcU4hWWA+VXaWq8/yX5LexbG7/frkxpVnMmBR3CdSFxEC
Y667jCNQdHgmAbJrd+yuIdGhLgr8jU+EG6vhFTqCxFzZahKqIEOSAMunCqkp2LqD
GOAMNC/LhWbYc9gAjDRiHkbj7qix/DSyOjRVPV6gzUB50dJChJE+4A53vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtQjYBBTbfh2IYKKwU4xAP9cw0gMB8GA1UdIwQY
MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt
M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw
LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHAKxFV4
6acs/5J71AwvpFQxYMGlS3BcoFzha7BVchuWdxvbNCGlnUPpwTSFGSTrtoXgB+q9
LZZIQdtBLSX8pEU07WoCLVXRrPce1osUB8NZlMEwfBTyhN2NfY8FIOkuOsJPoAuD
/KCnxu2gK7yfU8+Qpm8p3Hu0/LTMHo7nzZRhu6sDEz+j+dqM2ierN3p06seFIdDJ
N/45/4mXKlMwDVOdSoFjiBresHWMP3RmLYSPnzmhgTWbE5Oae3rjpbV4lyszZ4f7
WuykqTREh8KOnvymi0azPmHHV+E7sGI0aRVsz0zws/n6/IdKRfdVxEFveB2jBxHp
HukCY68iWAru5A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:27:52 2025 by rpki-client