Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: jiToPUQcL+tHbbX6PZOqYO19yoheByM/P5QqEuY3NL8=
Subject key identifier: 40:26:4D:01:B5:DA:5F:80:40:2C:D4:24:D8:18:14:55:B7:E5:B5:2C
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01964A469CDF8FE25324489F779D5FCD56B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 19:01:03 +0000
Manifest this update: Fri 18 Apr 2025 19:01:03 +0000
Manifest next update: Sat 19 Apr 2025 19:01:03 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: BdAq3Oy36rLbec8INDpcKJQHaXFA1yk0/vZZvcec+iE=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:9c:df:8f:e2:53:24:48:9f:77:9d:5f:cd:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Apr 18 19:01:03 2025 GMT
Not After : Apr 19 19:01:03 2025 GMT
Subject: CN=40264d01b5da5f80402cd424d8181455b7e5b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:52:e3:91:04:db:56:69:6d:3f:19:d8:b8:
2a:3d:14:72:12:d2:78:62:0a:72:60:64:9a:10:6d:
8b:60:68:a3:88:90:4f:76:c8:3c:7e:15:7c:2f:ca:
bb:c4:24:60:53:55:df:00:11:14:e5:e7:bc:ca:73:
04:e1:72:b8:4c:76:71:43:6f:7f:f1:d2:48:c5:d8:
7b:4c:ea:16:e3:2a:76:48:e0:bf:53:1b:fe:2d:7e:
47:1b:6f:c0:04:6b:3a:49:ec:75:b7:2a:90:e7:59:
7d:f0:5b:4c:d8:26:1d:bf:4c:63:39:8c:98:9e:9e:
1b:32:1d:6c:79:15:e0:03:c9:95:51:da:89:62:36:
50:ee:db:64:98:89:a3:43:47:a0:0f:02:ee:95:b3:
86:b8:16:9e:fd:9b:ed:c2:31:67:f8:77:d5:27:a9:
64:56:77:42:6c:8a:33:b7:7d:ea:07:da:d1:59:c2:
53:68:6f:9f:48:9a:05:95:46:10:f6:62:0a:81:5c:
04:b2:83:94:33:71:b7:b8:67:e3:52:40:ce:ec:30:
43:bd:d1:bf:f2:a2:d8:77:97:5d:0b:d0:87:6a:b5:
ac:d5:70:44:6f:08:77:48:19:68:b1:ae:06:06:89:
bf:61:cc:a7:bc:ad:8c:bc:c2:f7:f0:d0:42:44:1e:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:4D:01:B5:DA:5F:80:40:2C:D4:24:D8:18:14:55:B7:E5:B5:2C
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f4:a4:3d:cb:e8:8e:76:5d:85:a5:bb:a6:40:8d:b4:f5:c7:
bf:56:2d:8f:af:05:48:15:9e:fd:53:f0:a5:0e:8d:a0:8a:f5:
de:8f:d4:32:48:47:fe:30:4f:cc:70:81:a7:af:65:31:3f:74:
a9:a1:98:28:f4:b2:c7:73:f2:5f:31:fd:2b:6b:08:95:23:8a:
18:71:70:b2:b9:94:94:86:e9:39:e6:4f:d7:c5:2e:fb:07:b6:
8d:d1:fc:67:36:b6:3c:8d:8b:d1:26:3a:4c:0e:bb:ce:4b:cd:
eb:26:3f:d9:54:c8:d7:93:7e:db:88:6b:56:2c:dc:53:ea:2b:
d4:63:5f:b7:ea:33:fc:25:52:7d:c9:0b:7f:55:13:62:61:fa:
65:46:6b:ce:9c:17:83:b2:ff:cc:18:5f:be:3e:01:06:3e:97:
9a:e9:3a:68:6c:3b:b8:32:53:68:70:36:c5:96:a1:c8:51:08:
ba:fc:be:25:41:23:ff:e4:35:0c:15:fe:33:d1:cb:70:5b:06:
83:9d:79:35:2f:f2:f4:66:76:3f:48:db:4c:93:d6:9a:89:02:
a6:a8:c4:d6:39:87:f7:82:03:1c:e4:17:93:db:38:3f:b0:4c:
7f:95:a2:4a:a6:cb:f9:81:1d:22:73:c0:cb:c6:c6:35:92:d4:
26:a6:99:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRpzfj+JTJEifd51fzVawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjUwNDE4MTkwMTAzWhcNMjUwNDE5MTkwMTAzWjAzMTEwLwYDVQQD
Eyg0MDI2NGQwMWI1ZGE1ZjgwNDAyY2Q0MjRkODE4MTQ1NWI3ZTViNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCxS45EE21ZpbT8Z2LgqPRRyEtJ4
YgpyYGSaEG2LYGijiJBPdsg8fhV8L8q7xCRgU1XfABEU5ee8ynME4XK4THZxQ29/
8dJIxdh7TOoW4yp2SOC/Uxv+LX5HG2/ABGs6Sex1tyqQ51l98FtM2CYdv0xjOYyY
np4bMh1seRXgA8mVUdqJYjZQ7ttkmImjQ0egDwLulbOGuBae/ZvtwjFn+HfVJ6lk
VndCbIozt33qB9rRWcJTaG+fSJoFlUYQ9mIKgVwEsoOUM3G3uGfjUkDO7DBDvdG/
8qLYd5ddC9CHarWs1XBEbwh3SBlosa4GBom/YcynvK2MvML38NBCRB6N1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAmTQG12l+AQCzUJNgYFFW35bUsMB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvSkPcvo
jnZdhaW7pkCNtPXHv1Ytj68FSBWe/VPwpQ6NoIr13o/UMkhH/jBPzHCBp69lMT90
qaGYKPSyx3PyXzH9K2sIlSOKGHFwsrmUlIbpOeZP18Uu+we2jdH8Zza2PI2L0SY6
TA67zkvN6yY/2VTI15N+24hrVizcU+or1GNft+oz/CVSfckLf1UTYmH6ZUZrzpwX
g7L/zBhfvj4BBj6Xmuk6aGw7uDJTaHA2xZahyFEIuvy+JUEj/+Q1DBX+M9HLcFsG
g515NS/y9GZ2P0jbTJPWmokCpqjE1jmH94IDHOQXk9s4P7BMf5WiSqbL+YEdInPA
y8bGNZLUJqaZFg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:17 2025 by rpki-client