Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: mGuW2b8oUbZx2YOpJsW18ej6DE/gXmt0SVbGQ5QrpOQ=
Subject key identifier: 84:9A:24:B3:C6:ED:7F:68:85:99:11:DE:96:03:22:61:FE:B3:87:5C
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 01960A558A08CC9D002CA45737415D4B050C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0836
Signing time: Sun 06 Apr 2025 09:01:40 +0000
Manifest this update: Sun 06 Apr 2025 09:01:40 +0000
Manifest next update: Mon 07 Apr 2025 09:01:40 +0000
Files and hashes: 1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=)
2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: s/Wp4sg2Sx3amv6DqzjeXquJeTiQgA3ptx1Urazs+3E=)
3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=)
4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:55:8a:08:cc:9d:00:2c:a4:57:37:41:5d:4b:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Apr 6 09:01:40 2025 GMT
Not After : Apr 7 09:01:40 2025 GMT
Subject: CN=849a24b3c6ed7f68859911de96032261feb3875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:f3:cd:ff:b3:f4:51:6f:57:81:86:a6:40:
bd:b8:ad:8b:0d:cb:eb:d3:f2:3c:03:90:d4:56:dc:
02:6c:3a:74:02:23:b9:48:5f:9e:7a:f9:8e:29:b6:
c5:e2:d4:b2:a5:d7:f7:9c:cb:04:eb:27:a1:9f:39:
ff:30:4e:87:cd:76:75:ca:c7:76:bb:5b:6a:7a:44:
90:49:9d:72:4b:9e:df:b6:69:31:5b:37:99:e6:dc:
ac:50:5b:5e:64:45:99:d4:ea:1a:1c:b5:6d:78:19:
ce:ac:23:1b:7a:7a:c1:7d:62:08:ac:89:d7:5a:d9:
41:b9:21:0c:40:4d:df:00:81:90:83:c8:2d:fe:45:
3f:d9:7d:88:33:06:71:82:7f:c4:12:8b:15:bf:2f:
fd:f9:66:82:77:ee:c3:74:db:19:fd:7a:d1:f0:c1:
4f:36:4b:99:e1:6c:1f:41:44:7f:b2:2d:07:82:a3:
e8:1f:6c:4c:e7:0d:5a:19:14:9c:ad:b0:af:29:19:
fe:64:12:66:44:6b:f1:b4:6c:3c:7a:c5:b2:a4:26:
79:f4:ff:5d:bf:6a:94:8e:8f:99:2b:23:62:17:8a:
dc:b1:57:f0:f9:5d:71:c9:50:e4:7d:87:67:cb:35:
11:97:c6:89:d9:8d:b2:00:01:e8:85:9d:69:08:9e:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:24:B3:C6:ED:7F:68:85:99:11:DE:96:03:22:61:FE:B3:87:5C
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b0:53:53:8b:3c:fe:80:13:d2:1a:a8:17:85:29:a2:c7:c0:
99:4b:0c:34:17:98:f5:b4:52:6d:da:d5:28:8c:03:d8:89:57:
84:2e:f1:22:d1:48:c9:b4:43:8c:1a:55:c9:23:82:a9:94:a2:
33:69:c7:f5:5a:12:58:24:fa:07:d6:bb:2d:dc:64:d1:fa:73:
6c:81:50:28:3c:32:07:51:86:4c:fc:42:fc:a9:16:61:1b:bc:
ce:fe:f3:15:c9:46:9e:d4:80:d9:5a:9e:aa:05:b7:17:7f:54:
13:e0:88:70:ae:50:42:f3:37:9c:d3:79:57:77:aa:5c:1e:dc:
62:c8:25:aa:c4:8c:6a:cb:dc:64:c4:f1:a6:ac:50:2b:fb:72:
2d:44:90:02:57:2f:74:bf:31:92:42:73:63:a9:33:1d:27:5a:
bd:68:1b:45:66:d8:37:3f:65:c6:84:66:32:09:a2:b5:d3:67:
46:8e:d5:a4:46:5b:84:fe:61:a8:6d:74:bd:09:a3:d7:e5:a4:
85:ea:7a:7b:98:5d:05:5c:f7:e8:cb:48:cc:52:4b:8f:c1:cf:
29:42:3a:f2:52:d0:9e:c3:e1:1f:83:06:9e:67:c5:8a:f8:ee:
58:78:22:98:33:a7:73:36:aa:49:49:cd:f9:1a:48:7f:f7:be:
26:68:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:35 2025 by rpki-client