Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: d+V+l9mnLZA86Wlj0Z5EoZY5DkLtCAtPGyka6A5Cj04=
Subject key identifier: F9:B7:F4:59:16:1D:70:8F:93:10:DC:94:79:52:54:08:BC:F9:DA:18
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01951210403D7C55CA89EB64764A273DB622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 041A
Signing time: Mon 17 Feb 2025 04:00:09 +0000
Manifest this update: Mon 17 Feb 2025 04:00:09 +0000
Manifest next update: Tue 18 Feb 2025 04:00:09 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: OuaalwUddk9LT7AlTlvv0bAUUqK4oH/o5AQp+peMosc=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:40:3d:7c:55:ca:89:eb:64:76:4a:27:3d:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Feb 17 04:00:09 2025 GMT
Not After : Feb 18 04:00:09 2025 GMT
Subject: CN=f9b7f459161d708f9310dc9479525408bcf9da18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:f4:46:85:5f:ab:96:0c:e7:04:71:dc:0b:
26:c6:21:a5:eb:55:27:30:9e:56:ee:58:b3:61:c5:
9b:16:5f:e0:fa:d7:0e:77:81:5f:ac:ec:7f:bb:af:
7f:dc:68:d7:b9:db:9e:f0:86:0e:f7:47:ba:e4:d2:
e5:27:8a:5f:70:a5:39:d6:8f:c6:54:d0:c3:93:32:
3a:62:73:c0:53:4b:9a:50:51:dd:b4:6d:96:80:fc:
63:0d:d6:09:37:e8:cc:24:95:f3:95:7c:46:f4:0b:
5b:75:77:f3:6e:95:08:21:e2:b2:05:76:11:d0:88:
df:d8:72:46:c0:12:35:48:94:64:a8:ff:69:6f:e0:
92:71:01:f3:ab:12:30:ff:d6:1f:e4:bb:06:11:0a:
26:65:e7:61:0e:94:b3:21:9d:b2:78:75:35:d2:e5:
6c:59:42:19:9b:ed:fe:a0:7e:de:ab:1f:fd:18:0d:
fd:6f:2b:cf:23:03:1f:71:bf:6e:0a:db:1f:52:af:
92:5f:4b:9f:c8:5d:97:4f:f8:1c:72:c4:d4:82:a2:
7d:1d:80:d5:d3:8d:a3:ca:c0:09:4d:4a:37:26:4c:
e0:e3:3c:8e:68:8f:a2:4c:2e:fd:58:02:fa:2c:c3:
34:83:c8:fb:ab:31:20:78:32:42:a6:36:2b:fc:39:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:F4:59:16:1D:70:8F:93:10:DC:94:79:52:54:08:BC:F9:DA:18
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:de:20:25:e5:95:1a:df:0c:18:f2:5e:a4:41:4c:52:90:2d:
7c:b4:0f:e0:ad:e5:0e:48:6a:19:cd:f3:5a:34:d4:77:38:5f:
9a:74:0f:3e:24:1a:9e:8b:06:ed:d2:86:14:78:9a:f3:aa:9d:
42:bd:76:6f:1d:cd:e7:e9:ea:f3:0e:95:3d:75:d0:20:6e:7c:
a9:e3:de:96:9b:17:d1:c5:2b:ea:e5:e7:ca:73:02:15:78:cf:
80:4b:6f:56:8f:c3:10:d3:e2:b1:de:1a:92:58:09:ba:c8:a8:
44:33:9b:c1:5b:6d:7b:9d:aa:0b:16:86:45:7a:5d:41:be:c0:
75:be:25:f7:64:ec:ec:b4:51:66:ec:20:7f:72:7c:a6:dd:27:
2a:51:46:7f:a7:3f:a8:f2:9c:da:bc:27:38:99:51:98:07:79:
e5:c0:06:bc:12:ac:8e:c2:26:12:bc:48:7a:82:bf:54:ef:b8:
66:06:db:b7:52:de:11:40:b2:19:0c:e9:ba:fa:7c:38:df:fb:
8e:ba:13:79:a0:29:b1:10:a3:9f:5d:5b:27:0f:0b:8d:96:f9:
47:dc:01:c9:5f:87:98:a6:8a:3b:7c:5b:42:6a:bb:e2:5c:ea:
f6:54:e4:de:e6:25:b0:8d:d8:13:33:be:a9:d9:c3:a6:75:cc:
f8:9c:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:59 2025 by rpki-client