Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: sX+D2uzsq6RQWcUOi4DKQ7c3qSFu1C/5tShdOGa2X8Q=
Subject key identifier: 29:C7:7A:E5:0F:3E:94:2E:CA:75:8C:CC:86:CE:F2:EE:B4:93:54:A3
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01964F35D44C2D2F20B7B90E6E60D99F7ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 18:00:49 +0000
Manifest this update: Sat 19 Apr 2025 18:00:49 +0000
Manifest next update: Sun 20 Apr 2025 18:00:49 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: ThVsefCrdNDAY/fQtJT/tGYwp4Lo/81f+Kkkpwbt3LQ=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:d4:4c:2d:2f:20:b7:b9:0e:6e:60:d9:9f:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Apr 19 18:00:49 2025 GMT
Not After : Apr 20 18:00:49 2025 GMT
Subject: CN=29c77ae50f3e942eca758ccc86cef2eeb49354a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:76:d9:6a:bc:4c:52:bf:0c:48:3a:6b:c1:
52:f4:1d:a1:64:5f:d9:9a:8d:25:e8:45:20:b2:a2:
4a:d0:77:14:3f:38:e1:43:f2:09:65:25:ba:d6:21:
34:70:04:73:bc:e3:c3:47:3d:39:88:62:03:a4:4f:
68:a5:36:f1:df:c9:14:cd:65:6d:97:59:1b:6b:6c:
e1:6e:a4:97:7d:eb:b0:dc:3e:d6:32:4a:9c:63:67:
56:f1:ed:22:4a:a7:7b:11:6d:b8:fd:f8:5d:b0:5f:
19:f3:0f:f3:8f:fa:5b:15:ba:6f:08:49:e6:5a:bd:
ee:ae:bc:33:6c:02:96:9e:08:16:96:45:3d:02:51:
6e:cc:69:b7:62:ec:90:0a:a9:86:c0:3d:58:78:92:
0e:88:e2:ce:b8:81:84:29:bc:c2:f2:eb:e7:ff:e5:
73:a6:e4:1a:56:63:49:72:6e:5c:15:6b:7e:2d:4b:
59:15:86:02:fb:31:34:38:a7:5e:6c:0b:9c:d7:50:
99:e6:d3:68:1d:0c:41:56:06:ac:0e:8f:5a:1c:90:
2e:a2:6f:db:ac:5a:76:88:b9:8a:20:87:9a:da:27:
fb:53:ba:84:ea:36:80:e7:ec:f5:bb:8f:3b:35:76:
d1:3b:6b:96:2a:d3:3f:9d:c7:bf:56:6f:3d:63:3b:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:7A:E5:0F:3E:94:2E:CA:75:8C:CC:86:CE:F2:EE:B4:93:54:A3
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a3:24:ed:60:dd:da:3a:32:86:53:21:5f:ce:78:28:cf:89:
b8:7a:de:19:16:5f:1d:d1:c9:2e:f8:aa:d3:e6:e8:21:e6:c3:
a6:9e:16:3e:4c:8c:7b:04:f9:9f:a3:d6:c5:18:16:a6:a6:ed:
2e:f0:89:f9:80:24:5d:d3:e6:1f:0f:23:38:94:92:ab:21:05:
97:2c:4a:53:37:c1:35:af:87:69:42:74:bc:3b:d8:fe:59:d0:
87:e0:f9:d3:1e:96:bf:ef:2e:16:a3:0d:64:f4:6f:2d:a4:db:
1e:c5:b9:b2:83:5b:a3:9e:4e:a9:7f:a0:28:00:e1:b5:8a:5e:
b7:8b:62:0a:da:60:88:ec:e0:85:ea:92:66:bc:0b:a7:1a:83:
6b:02:f5:59:4d:77:04:ac:30:2b:d1:f5:eb:04:35:0a:10:79:
3c:0f:03:48:16:b4:56:d9:e1:40:03:18:03:bd:ba:43:b0:a1:
dd:e5:fe:a6:c3:74:ed:55:e0:07:f9:36:f2:2e:ca:d2:de:43:
0a:f9:91:7e:35:b0:91:3a:92:4c:11:a7:f0:f7:8d:7a:46:2e:
ba:41:98:8f:66:45:a2:7b:6b:86:6f:14:00:4c:48:46:d8:bd:
ea:c0:62:d1:4d:17:66:ac:dc:05:ba:d8:e9:50:f4:02:b3:a9:
07:d7:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:45 2025 by rpki-client