Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 0cFOfOvzq/6Zw271SlkSlDS6NV1465RBhagv3TwX0vE=
Subject key identifier: 96:5B:26:10:49:54:CC:5F:9F:BC:AD:1F:86:CC:1A:AA:8F:3C:11:6C
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 01961132E00F7FB4937A349A35F284F561AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 02FE
Signing time: Mon 07 Apr 2025 17:01:08 +0000
Manifest this update: Mon 07 Apr 2025 17:01:08 +0000
Manifest next update: Tue 08 Apr 2025 17:01:08 +0000
Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: 3fH3dpWPDzev4N0mGEysDS0kcWQZUduMKv+mLB2btb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:e0:0f:7f:b4:93:7a:34:9a:35:f2:84:f5:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Apr 7 17:01:08 2025 GMT
Not After : Apr 8 17:01:08 2025 GMT
Subject: CN=965b26104954cc5f9fbcad1f86cc1aaa8f3c116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:f6:ce:94:6a:cb:71:c1:eb:94:30:a9:de:
fa:e5:20:96:7a:ea:e4:67:1d:f0:1d:5d:58:25:65:
e3:fd:77:12:cb:cf:ce:eb:8a:1f:ec:9d:19:c4:b8:
05:3b:71:96:07:88:b3:1a:d9:a0:33:63:e2:98:f1:
58:43:77:d6:0b:be:91:7a:15:3e:da:83:86:3e:53:
93:73:8d:4b:22:d6:86:18:ae:a4:20:15:80:ea:fc:
ad:96:9e:e8:ca:72:cb:ef:31:c2:11:f4:49:54:60:
a7:49:4d:3e:6a:a4:5e:88:69:f7:c4:c6:ac:35:c1:
8a:7a:c8:89:c0:3d:ff:f3:de:34:8c:cf:3d:15:e0:
7a:68:5f:d3:c9:a7:87:30:81:f6:e5:67:86:3d:6d:
e4:92:b7:68:a0:02:f5:a2:19:77:b7:0a:6c:27:75:
3e:76:71:b0:0a:27:5a:bb:f2:ff:36:02:cd:f2:0b:
71:80:a5:c1:b3:29:6d:2a:15:88:88:3e:8c:15:14:
be:e1:a9:ba:1f:40:ea:62:e8:97:35:be:23:05:3e:
5b:81:b2:09:ac:1b:99:74:95:1a:32:fd:ba:f9:07:
49:95:ae:a8:5d:ac:b8:c0:d2:23:89:e7:4b:c3:89:
56:02:57:65:2f:9c:a2:e4:3e:5d:20:0d:50:c7:a3:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:26:10:49:54:CC:5F:9F:BC:AD:1F:86:CC:1A:AA:8F:3C:11:6C
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:af:35:37:a4:71:61:94:8f:25:30:10:48:49:c1:bc:02:
8a:f1:af:b1:36:6b:dc:0c:98:f4:f0:96:45:7c:8e:9a:2f:af:
cd:2e:f1:9a:1b:2a:e8:fc:cd:f6:59:2f:c9:82:b4:50:4c:d5:
7c:f5:19:1b:fb:0e:30:31:8f:3c:86:47:e5:33:6c:ff:1b:59:
51:47:44:0d:e8:16:eb:38:7d:ed:fa:de:74:15:2c:66:9c:49:
10:bd:0e:9d:aa:99:41:8a:95:f9:11:67:5e:c7:58:57:d9:c4:
6f:eb:67:dd:fe:5a:5d:84:18:3b:24:6b:12:69:4f:8d:c6:a3:
70:91:e9:8d:17:ea:2d:39:b8:87:2b:2a:69:c3:8c:73:17:35:
bd:0e:fc:9d:6d:ff:7f:d2:e7:68:8d:0f:0f:60:fe:08:97:22:
bb:8c:18:69:34:d5:e3:3f:5c:03:97:0d:4c:f4:9e:20:c7:a1:
f6:9b:27:3c:ad:cf:3f:7c:dd:a9:19:bd:44:1d:36:31:49:91:
06:8e:b6:78:99:5a:cc:11:b9:e9:40:9a:6a:4f:f5:6e:07:2c:
d3:ef:71:37:42:56:1c:d4:a0:a8:3c:ad:56:34:52:af:6d:87:
07:49:81:03:cd:26:25:6a:97:3b:97:a4:fe:e2:b8:f1:22:c2:
9f:d1:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:43 2025 by rpki-client