Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: uwBWkJm0hH4seXJ606yqNs4D1dBo7ONBzGPs8TBpBBE=
Subject key identifier: 80:E4:D2:38:5D:39:D6:67:E9:50:9E:5C:6B:2B:5D:15:06:11:8B:ED
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 01958249ECCC84CD498C7D2B55AAA89DD4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 02D8
Signing time: Mon 10 Mar 2025 23:00:37 +0000
Manifest this update: Mon 10 Mar 2025 23:00:37 +0000
Manifest next update: Tue 11 Mar 2025 23:00:37 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: DVgvGDbH4FExAZQ3n8sKGvyXBcBNy7MFK1M7ZRtAe+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:49:ec:cc:84:cd:49:8c:7d:2b:55:aa:a8:9d:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Mar 10 23:00:37 2025 GMT
Not After : Mar 11 23:00:37 2025 GMT
Subject: CN=80e4d2385d39d667e9509e5c6b2b5d1506118bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:42:44:0b:78:6f:ef:61:ea:c2:73:96:03:
d4:05:e8:35:bc:f6:36:bd:d2:75:50:e5:73:f6:99:
80:c2:9e:ef:93:f9:43:bd:5f:e0:82:77:c5:48:87:
40:22:04:96:12:bd:e4:91:aa:0f:f6:14:21:c6:cf:
10:8e:83:d8:bc:ef:bb:75:a5:ab:72:71:f1:7d:22:
2e:41:69:3d:97:b7:52:3f:c0:e5:e8:98:43:43:d0:
74:76:2f:d9:bf:b3:0a:ce:b2:3e:01:45:7f:87:6c:
96:70:09:0a:3f:b4:ae:62:40:04:94:c1:24:d8:d1:
d3:a3:a2:49:09:19:8f:66:4e:9f:e8:44:c0:4b:f0:
ff:bb:8f:c8:7e:4b:1a:e2:e4:49:5e:24:62:1a:6d:
da:ea:e0:e9:4c:cf:92:88:90:10:e6:b0:d4:db:7e:
12:b7:e2:23:3a:82:20:2d:4c:35:48:f9:95:ca:b6:
2e:77:ab:41:c2:b6:91:2b:80:5f:89:91:db:3c:ea:
8a:cd:cd:25:89:a1:d4:31:3b:8c:32:be:d2:f7:60:
7e:39:79:36:91:99:49:22:b9:66:83:b9:ff:2d:58:
23:38:2e:50:1c:76:78:c1:ac:80:67:36:4a:6e:53:
dd:19:7f:78:cf:3b:ab:8e:d8:10:9a:68:c3:98:97:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:D2:38:5D:39:D6:67:E9:50:9E:5C:6B:2B:5D:15:06:11:8B:ED
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:ab:88:b9:26:29:ac:f9:28:68:31:c3:70:73:10:f5:89:
95:53:ef:fa:b4:c4:14:07:42:75:0e:fa:7f:af:cf:23:f3:51:
3a:0f:ff:3d:42:ce:7a:31:11:01:05:7d:f7:3e:78:9f:dc:e9:
88:2e:81:bc:06:e7:32:33:5c:76:0e:f1:7d:58:a9:ca:1d:e6:
61:9f:f8:05:bf:9c:9d:c2:75:8f:04:c3:68:ef:31:f6:a4:1d:
bd:88:f2:f8:8f:d1:bc:e4:be:66:ae:df:43:98:41:13:ee:d7:
5a:3c:57:20:6e:4b:a2:92:21:e6:e9:3a:3b:3b:19:51:ef:b7:
cb:e1:cf:f5:1d:46:3e:73:08:87:48:0d:80:82:90:85:fa:a6:
e1:d6:16:09:a7:d5:72:62:79:34:17:11:be:f9:fd:ce:cc:8f:
ec:f2:8c:54:f4:48:f7:90:36:7a:53:37:ee:c5:5b:34:b5:90:
60:cb:a4:03:2f:60:89:4e:d5:91:77:3c:05:54:f2:e2:2a:47:
a0:9d:e8:c6:f9:ca:eb:5d:e3:58:3c:fb:3d:5a:90:e4:94:5f:
1e:36:da:fe:87:9b:cf:cb:24:31:46:d0:b7:c3:01:18:d7:b9:
58:2c:90:b3:d6:98:cd:9c:94:a2:56:77:bc:6d:15:19:58:e5:
11:44:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:09:59 2025 by rpki-client