Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: IEr2CUvB2ppyCMxyxrVZrZIc9Loydx+9k9t4Br8gjvY=
Subject key identifier: 91:0D:3F:60:03:3E:68:27:C9:54:05:7F:D3:03:D2:62:4D:0F:78:30
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019603AE6B199F9DF17150689C88F1394558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 131C
Signing time: Sat 05 Apr 2025 02:01:24 +0000
Manifest this update: Sat 05 Apr 2025 02:01:24 +0000
Manifest next update: Sun 06 Apr 2025 02:01:24 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: ostk/ZOydOcTKY2+j1iaJ3afjZNTz6QTJBFCGGVygAs=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ae:6b:19:9f:9d:f1:71:50:68:9c:88:f1:39:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Apr 5 02:01:24 2025 GMT
Not After : Apr 6 02:01:24 2025 GMT
Subject: CN=910d3f60033e6827c954057fd303d2624d0f7830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:e7:f7:41:1a:db:b7:38:99:0c:7c:0f:43:
11:65:94:27:96:66:d9:14:a0:6e:e7:77:13:83:01:
42:68:e9:06:8e:2b:46:94:c1:0e:85:a9:d6:e1:13:
ca:30:c8:dc:c8:67:ce:1e:1e:a7:c7:d7:e0:22:a2:
fe:81:b2:8b:55:a7:f7:1d:ab:b4:41:5a:18:61:83:
d9:55:6f:be:8e:4b:4e:c5:ee:95:e5:63:80:6d:41:
20:29:6f:38:22:0f:4e:10:9e:4d:20:50:d0:ab:64:
43:cc:36:81:c7:75:9e:8c:87:12:da:c1:2d:f0:ca:
63:bc:0a:ba:e1:12:2b:76:df:96:5c:b3:4c:33:2d:
ca:96:56:1b:78:44:c6:c7:61:f7:88:99:42:9c:bf:
f8:93:44:e2:40:cf:8c:e7:24:36:38:d6:62:b5:bf:
88:79:9d:76:33:96:34:fe:be:f7:2f:7a:5b:46:05:
6c:69:54:93:74:4d:fd:67:51:91:0e:a3:81:60:a1:
9b:a4:29:9a:f2:0f:ec:1f:ca:c6:0d:cc:8f:1c:67:
fc:a7:82:66:c2:56:49:d3:9b:dd:cc:13:6a:85:25:
06:af:31:cd:35:b5:3f:49:4c:7a:b0:b1:c7:8c:a5:
10:e2:8a:9b:d9:b6:0c:10:5e:cf:ce:f6:05:4a:95:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0D:3F:60:03:3E:68:27:C9:54:05:7F:D3:03:D2:62:4D:0F:78:30
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:95:d4:0a:39:1a:2c:0f:85:d9:76:f9:c9:30:35:85:2b:fb:
dd:1d:db:44:fe:83:fb:b5:b9:e8:82:11:de:c0:2c:14:6a:20:
f0:f4:0e:5c:fe:dc:ce:27:89:5d:e0:e1:b7:34:9b:76:63:f6:
c3:46:d2:3e:b5:8c:b2:97:ad:67:e1:9b:5d:98:3c:e8:39:0a:
e6:79:15:f6:2f:46:7a:30:96:63:54:09:1a:11:5b:10:be:ab:
8d:ba:6c:cb:cc:28:e9:15:f0:02:10:9f:da:63:a5:8e:33:65:
c8:90:65:5e:9c:22:54:2f:08:d3:02:56:e2:a9:05:15:56:09:
a6:ee:5a:08:21:ad:d8:c5:08:e9:d3:2b:2f:b7:e0:4f:3d:cc:
2e:0f:e9:74:9d:bf:a2:19:45:89:ee:64:33:25:2e:4e:3e:84:
41:14:3d:75:15:5a:70:c5:d9:72:8e:bd:51:37:05:77:cc:0a:
19:fa:2d:fd:38:e3:3c:29:6a:5d:8c:13:2a:01:5f:a8:71:ec:
4f:7a:2b:18:6d:d9:23:86:25:56:6e:00:e0:16:f8:31:58:d6:
d7:03:1e:52:ab:80:78:77:bc:10:c2:c8:95:a3:e6:99:26:f3:
2e:0a:45:a4:79:3d:9e:7e:d2:c6:ba:1f:90:bc:52:cf:c3:38:
23:41:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:01 2025 by rpki-client