Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier: 4NeGpwNCNa7UYKYRBwXxnGL5LFCiqPrA/92rngIwepQ=
Subject key identifier: 35:68:B4:16:5F:8F:A3:4D:F1:78:82:BE:40:5C:D5:FC:98:8A:4A:9C
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01963A658F8D6495434843F871A92F7E4BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number: 0FE8
Signing time: Tue 15 Apr 2025 17:00:56 +0000
Manifest this update: Tue 15 Apr 2025 17:00:56 +0000
Manifest next update: Wed 16 Apr 2025 17:00:56 +0000
Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=)
2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=)
3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=)
4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 5nAPzhLQa+4mKbN8/4/0+lINZH7CGdLN/FhydO1ZWRA=)
5: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=)
6: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=)
7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=)
8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=)
9: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=)
10: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=)
11: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=)
12: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=)
13: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=)
14: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=)
15: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=)
16: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:65:8f:8d:64:95:43:48:43:f8:71:a9:2f:7e:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Apr 15 17:00:56 2025 GMT
Not After : Apr 16 17:00:56 2025 GMT
Subject: CN=3568b4165f8fa34df17882be405cd5fc988a4a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:4f:af:44:57:59:1f:28:82:64:f3:05:03:
76:7d:95:6b:c5:92:d0:e4:7d:92:2b:f3:ca:9e:28:
d8:01:40:b7:f7:b0:22:83:1b:01:e7:00:c2:ee:13:
b1:1a:a2:93:1e:e8:4e:75:97:30:0f:64:b6:62:05:
5c:89:ea:c4:9a:d0:d9:86:01:2f:0b:62:32:26:02:
6d:b9:03:e2:4c:35:7f:a6:11:4a:c7:64:34:f0:25:
8d:73:6a:f1:93:fd:7f:a1:0c:e0:b3:6a:52:72:4f:
24:ed:a6:eb:aa:69:27:b8:b1:54:7f:fe:b4:7d:da:
ec:c0:c3:96:0f:b5:07:a5:e6:60:c2:f3:55:a3:c0:
65:3b:bf:54:59:1b:e3:11:9a:fd:fa:1b:75:e9:4c:
4a:4a:fb:ed:00:15:8e:0c:48:0d:32:e8:0f:95:77:
8c:42:1c:92:af:f0:42:c0:46:bb:ea:cd:94:df:a1:
7e:fa:f2:d4:66:70:37:84:9a:2e:9f:b4:fa:d1:33:
97:dd:8c:12:51:6a:44:92:44:3e:42:41:ec:0a:af:
0f:39:5f:d4:54:0c:35:a9:75:d3:79:c6:76:cb:40:
fa:c1:e7:b9:28:a8:61:0e:90:e5:74:f7:67:6d:aa:
99:21:cc:86:f0:33:a7:03:a0:48:33:e6:a9:e6:7e:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:B4:16:5F:8F:A3:4D:F1:78:82:BE:40:5C:D5:FC:98:8A:4A:9C
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4b:db:0d:68:ee:43:98:47:42:2e:c2:af:55:70:76:bc:14:
f0:f6:6f:28:27:5a:8c:6c:6e:81:60:3f:cd:33:4c:cf:fe:cf:
c8:2c:8b:c3:d7:c2:d9:d1:4f:41:28:42:3f:5b:8d:19:a7:fb:
34:a0:b0:94:52:34:7c:9b:5a:8c:15:b2:d5:e0:15:26:e2:49:
a3:1e:e5:bb:1e:c5:1a:59:85:55:43:7a:2f:80:81:cc:38:f7:
69:43:57:9a:80:04:61:5e:ab:80:40:b7:79:68:55:7f:f7:88:
47:ab:dd:6f:3c:5b:d0:7c:0b:d2:c5:c7:f1:60:45:12:32:3e:
57:e1:8a:40:54:ab:b3:b3:d7:78:73:e8:ac:53:0c:fb:71:f3:
5c:02:b8:01:3c:13:64:a8:7a:5a:1a:6d:20:11:74:98:56:d0:
9c:2d:46:46:cb:73:8c:4d:33:da:91:23:25:0d:81:18:78:dc:
91:8c:20:5d:43:8b:19:07:27:27:f9:97:84:a5:fe:c3:1a:83:
6a:bb:3d:89:6b:88:06:0c:10:a3:54:17:f7:dd:06:cf:75:d1:
41:61:20:b1:bf:39:b6:64:6a:fc:dc:c0:50:26:47:5b:cd:2d:
e8:04:46:34:64:04:97:2e:ed:87:95:22:77:3a:96:ff:0e:63:
68:dd:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:59:26 2025 by rpki-client