Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: qncehXwRtBikgbm7T9ewo6nfs51txoex5LP8ZWhLzrw=
Subject key identifier: 42:93:2B:09:70:F8:77:9F:E5:14:09:A6:BA:FC:8F:9A:FD:F5:D1:9A
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019511A2CD8DF2F8C8577710DE40B3FA864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0205
Signing time: Mon 17 Feb 2025 02:00:36 +0000
Manifest this update: Mon 17 Feb 2025 02:00:36 +0000
Manifest next update: Tue 18 Feb 2025 02:00:36 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: I6FhJRsER/kwm3uSieYmfEDDUD30P4uLVsm5o7aRdno=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:cd:8d:f2:f8:c8:57:77:10:de:40:b3:fa:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Feb 17 02:00:36 2025 GMT
Not After : Feb 18 02:00:36 2025 GMT
Subject: CN=42932b0970f8779fe51409a6bafc8f9afdf5d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:22:27:67:37:cb:ff:19:30:bb:58:d8:fa:
60:40:51:cc:06:dd:86:db:d6:5a:11:66:8e:d6:35:
b3:70:cb:ff:39:8e:03:81:54:0d:86:5e:cd:05:eb:
18:32:66:89:ba:7e:a0:90:62:7c:24:66:d3:2e:af:
9b:19:74:77:cf:66:cb:b5:c4:11:fe:45:0e:87:ea:
7e:c4:29:88:30:61:15:7c:48:a7:7c:04:d8:63:7d:
55:74:88:15:2e:db:7e:93:7e:19:0a:c7:4c:12:f4:
00:3a:01:76:f5:9e:02:b8:b2:6b:68:ad:d4:1e:63:
46:f6:33:48:e4:11:5d:6d:42:f9:a2:e5:e0:ee:9a:
ec:1a:20:c4:82:44:2e:95:74:c8:88:99:ac:ba:9b:
18:26:f4:78:03:9a:85:b8:45:1e:f1:0f:d4:b4:22:
7d:ba:7f:6e:7a:04:2e:5e:c1:d9:19:23:c7:6a:13:
28:cc:82:24:ce:de:fe:89:9e:0d:db:2b:2e:c1:80:
8b:76:62:49:9c:1b:89:5f:bc:2e:d9:25:4e:c1:ca:
4a:60:f6:31:29:f6:7c:08:bd:56:7e:77:98:24:37:
90:dd:7f:d8:be:f6:5b:7a:9d:20:0e:12:c6:d0:6e:
7a:6d:e6:7c:c5:ef:42:12:40:39:8e:85:61:36:37:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:2B:09:70:F8:77:9F:E5:14:09:A6:BA:FC:8F:9A:FD:F5:D1:9A
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:65:26:7f:9f:33:50:62:9e:19:c5:4b:6b:58:46:33:05:
63:cb:a3:6a:45:44:83:bb:50:e6:28:73:39:2a:b8:3f:85:2e:
ab:d7:97:35:af:d6:2d:1a:76:5d:80:e7:b3:a5:2c:20:d9:45:
ea:0a:0d:46:92:7e:3c:ac:ca:8d:fa:7d:76:e2:24:d2:ce:98:
37:e2:8b:b6:04:17:3c:d1:d8:f3:28:f4:a0:b8:da:c8:78:df:
ec:10:58:95:d2:82:ec:2b:81:d4:66:ae:00:34:df:65:3d:f8:
32:75:14:d1:d3:8a:1a:f3:73:a3:52:aa:3e:50:3d:5c:28:0a:
90:cb:b9:cf:cb:4c:52:58:58:de:05:a5:d7:ff:0a:9c:91:48:
01:6a:96:bf:12:11:ed:c1:15:57:49:25:14:f4:f8:4f:06:05:
89:60:2c:91:f7:38:5c:c4:d4:a3:39:eb:44:af:76:8c:0d:d4:
99:93:ab:cb:ef:55:4c:95:f3:87:78:aa:ad:2e:78:c4:c6:75:
fa:d9:25:92:37:25:94:c7:24:aa:1d:2a:83:b0:f7:90:c0:54:
6d:14:9d:d2:f3:da:8b:1d:b8:a6:d7:87:31:c3:16:fc:f1:15:
27:cd:3f:21:76:b5:3c:7a:ca:28:dc:85:b5:b2:10:65:2a:62:
6f:d3:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:23 2025 by rpki-client