Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier: BJ/qOwN5bQY94jFgpvryMX+JNfhPM7+KcEZbvkENtZw=
Subject key identifier: B8:15:EA:94:5F:1F:5B:16:5D:9C:36:CF:86:A4:3C:EF:4A:00:37:07
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 019656EF4AB9589CAD38D7DB02241E550FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number: 123E
Signing time: Mon 21 Apr 2025 06:00:44 +0000
Manifest this update: Mon 21 Apr 2025 06:00:44 +0000
Manifest next update: Tue 22 Apr 2025 06:00:44 +0000
Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: 2e6pVyGDVBsb9HZXUApCqoZbjlapAVf/IjTXK5otqQc=)
2: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (hash: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:4a:b9:58:9c:ad:38:d7:db:02:24:1e:55:0f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Apr 21 06:00:44 2025 GMT
Not After : Apr 22 06:00:44 2025 GMT
Subject: CN=b815ea945f1f5b165d9c36cf86a43cef4a003707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:17:bd:3f:ad:5c:a7:98:d9:b8:8c:fd:51:
78:c2:e1:9a:4c:73:51:fc:a6:56:da:e5:ad:c3:96:
da:8e:b2:78:14:b4:db:70:c9:6f:b3:5b:55:55:d0:
b5:0b:ee:ff:55:ea:1c:8d:cb:90:a0:a0:a0:64:04:
ea:4a:b0:3a:cb:43:9a:10:9a:c2:f4:6f:cd:1c:97:
36:24:9a:b5:32:d6:1b:55:f6:2c:28:0e:2e:b6:60:
f0:1a:0d:69:0a:11:4a:41:04:12:54:c1:b3:24:69:
47:45:51:39:57:fd:4e:3a:6d:be:6d:c0:d8:a6:7d:
ed:96:64:e1:ee:3d:e3:53:96:0a:0d:1a:41:fc:59:
60:c2:94:a0:4a:dc:62:d2:03:bb:68:1b:aa:89:c8:
88:13:df:4f:09:8a:f7:ed:2b:ab:5e:0d:f0:81:79:
84:28:2b:91:cd:74:db:42:53:e0:ed:36:21:20:14:
66:0e:66:b1:5e:c6:88:09:bb:88:75:72:5d:b6:5c:
0c:07:0c:17:b5:6d:7e:2e:d8:c1:82:71:b1:6c:87:
04:34:c4:19:af:d5:6f:06:ab:60:8b:89:3d:88:e0:
1a:8f:ed:e3:d1:e0:4f:4f:75:2e:bd:78:98:f7:68:
b0:9d:4e:f3:bf:75:9b:ac:f8:61:2b:c4:87:dd:6e:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:EA:94:5F:1F:5B:16:5D:9C:36:CF:86:A4:3C:EF:4A:00:37:07
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2a:66:e9:15:96:72:5c:9e:75:ee:1d:f5:4e:de:ff:9d:7a:
7f:a2:8a:0d:35:4a:eb:6f:4b:77:ff:2f:d5:20:98:a1:63:28:
9b:4e:90:3c:3a:2e:a3:60:4e:f6:f3:5d:3b:77:d2:5d:9c:1a:
01:be:0b:b8:15:5c:b2:90:71:19:8a:2a:8a:68:93:65:f2:c3:
26:25:83:3c:92:0a:f2:e8:81:10:0d:21:e3:18:d9:9e:7a:3c:
57:78:f3:17:28:d2:94:72:b7:40:d9:9b:45:9f:04:f4:9a:ae:
57:0d:78:a4:00:46:98:99:a9:06:f3:6c:ba:aa:e2:56:9e:f3:
54:d8:1d:27:b5:f1:8b:e0:9a:78:67:10:52:b9:e8:54:06:c6:
b6:b7:5a:1d:cf:15:31:f2:d2:db:3a:44:28:76:46:6f:f2:23:
f2:7f:9e:f2:15:fc:28:25:b3:9f:ec:9f:71:49:a4:9a:ab:f3:
fc:d1:f1:ec:c2:4a:70:52:5b:27:34:a7:87:20:14:37:cb:2e:
f2:10:81:2f:23:f5:29:4c:1d:b8:23:7a:e0:7f:d3:08:c9:31:
89:fc:e5:dd:68:b8:b7:49:74:8a:e4:46:13:0e:b0:81:71:2f:
5c:64:33:52:a9:2f:27:0e:1b:ee:2f:71:a0:b9:c2:d3:bd:c4:
16:af:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:22:44 2025 by rpki-client