Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: gxbGQg+N+yaU/IFDzDiO65StOyk/70gUcQFIsHQ7zHA=
Subject key identifier: FF:99:D7:69:57:72:9B:F9:CC:AB:C4:4F:CC:88:2B:BC:15:4C:BA:5D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 01974AE8F863AFA28D3DA92BF4B051189EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0AE0
Signing time: Sat 07 Jun 2025 15:01:11 +0000
Manifest this update: Sat 07 Jun 2025 15:01:11 +0000
Manifest next update: Sun 08 Jun 2025 15:01:11 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: SPJnp1Wf5jSg40rlYviG7eGnCxEJkQsbfotkrkAfaaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f8:63:af:a2:8d:3d:a9:2b:f4:b0:51:18:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jun 7 15:01:11 2025 GMT
Not After : Jun 8 15:01:11 2025 GMT
Subject: CN=ff99d76957729bf9ccabc44fcc882bbc154cba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:1e:7d:50:fa:25:5d:a6:ab:e3:56:f1:1c:
f2:ad:2a:b0:ea:a7:82:ea:10:66:07:e4:bf:bc:ab:
a5:62:be:51:0f:67:13:a2:27:7c:37:64:a6:14:5e:
0a:86:23:0c:0a:fd:d0:28:3e:97:0c:a2:71:18:fe:
78:86:43:df:56:9a:40:c9:45:eb:ca:ca:cb:55:7d:
c5:b0:fc:0b:97:cd:64:ea:b2:fb:60:a0:2e:9d:87:
51:5c:fd:20:d4:4c:2e:11:eb:56:9d:c8:5c:ce:05:
80:81:b7:66:41:41:28:88:89:1c:3d:f0:12:8c:ec:
2d:aa:25:08:6f:6e:ce:fb:82:ed:71:68:64:51:de:
d5:b8:51:ee:f3:2f:36:b6:bf:1c:d7:79:c9:a9:5e:
99:70:91:a9:5c:bb:c5:73:24:17:ae:7c:4b:bc:6e:
55:d7:ec:66:36:cf:4f:85:d8:9a:8d:12:52:c6:27:
aa:d1:fa:a3:1d:3f:f5:8f:80:10:be:eb:5b:16:11:
ee:2c:f7:f8:73:4d:56:c7:5e:a5:d8:d3:5b:af:39:
e5:5b:3a:63:da:f5:1f:30:6a:19:cf:db:64:a1:58:
7f:69:8b:a2:d8:69:81:78:6b:b6:52:c8:b7:47:d1:
92:7c:25:b7:29:44:c6:30:d7:a0:c0:47:67:6c:d9:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:D7:69:57:72:9B:F9:CC:AB:C4:4F:CC:88:2B:BC:15:4C:BA:5D
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:ab:80:39:59:0b:09:cf:37:4c:93:b6:28:75:64:a6:4a:
fc:e7:97:e8:51:a6:40:93:2f:c3:f5:25:08:0e:ef:5c:0c:df:
a1:2f:5d:96:89:d0:f1:b0:64:4b:03:9f:17:3b:53:69:21:e9:
d9:02:23:b2:e4:dc:3f:d7:fa:91:01:ec:e1:d4:53:47:e1:a2:
36:e1:a1:84:16:0e:c2:5f:b9:1f:3a:5c:dd:47:0f:28:4e:a6:
6a:8c:9c:a1:62:bd:a4:76:ed:28:46:e9:db:59:e5:21:09:df:
9e:cc:34:dc:a9:93:af:56:4f:b9:e7:82:9b:f7:ca:bc:34:0c:
d8:78:4b:60:bf:1a:70:a1:07:00:36:e7:14:09:4f:e6:44:a1:
ff:69:32:ae:c8:f6:65:62:dd:f1:bd:d5:2d:7e:25:73:80:30:
6b:31:c1:c9:1d:a7:1e:9e:7a:1d:fe:29:70:88:a1:66:34:3f:
c4:31:3e:ce:a5:d2:60:96:38:53:b9:92:ff:f5:9c:7e:aa:74:
d3:86:a6:3b:b4:cc:79:e3:47:a3:af:fc:0a:41:ab:7a:3d:83:
9e:16:32:1c:21:9d:48:2d:c7:09:e1:99:a5:65:03:21:8d:d2:
ba:95:6c:43:77:d8:3a:ae:96:86:b9:b2:18:de:eb:d7:9a:f8:
80:03:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:12 2025 by rpki-client