Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: HNprMjY4swLNSjcWQnPwigLpgSr+4gXvz5zSDNO8D4I=
Subject key identifier: FD:76:F9:FF:11:5E:8F:6D:D0:3D:E4:C0:FA:15:44:0F:EF:B5:A2:E7
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019653B7D15AC0A6FCBB5A46866E25BAA800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 15:01:17 +0000
Manifest this update: Sun 20 Apr 2025 15:01:17 +0000
Manifest next update: Mon 21 Apr 2025 15:01:17 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 9I1dx3SERDZ6C5YQCMAClpUf6M7HCYuTTveWGn7YhJ0=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:d1:5a:c0:a6:fc:bb:5a:46:86:6e:25:ba:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Apr 20 15:01:17 2025 GMT
Not After : Apr 21 15:01:17 2025 GMT
Subject: CN=fd76f9ff115e8f6dd03de4c0fa15440fefb5a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:60:d1:9d:89:18:fd:60:fd:7e:11:36:97:
d7:54:f8:00:f4:81:b4:46:8d:c1:60:d9:7d:4b:66:
93:bb:6b:58:6c:a3:8e:d1:54:20:16:84:e9:7c:53:
82:be:f6:9a:11:0a:9a:99:92:8b:ad:9a:ff:94:cb:
73:e7:7f:39:b0:41:18:d4:c0:58:78:9e:10:cf:e5:
49:9c:75:d8:1d:70:15:a2:66:04:42:7c:17:07:0c:
b4:1b:09:60:d8:dd:ef:0d:77:5e:79:0a:15:38:bd:
74:cb:6b:60:fb:64:ba:4e:6a:70:90:fc:22:9e:df:
4a:b5:e0:fb:b1:db:3b:46:4e:51:5b:bd:07:9c:4b:
5d:6a:ee:1e:e7:14:81:ac:4e:a4:cc:c3:b7:2e:f1:
72:bf:2d:d7:78:6c:cb:c7:35:2d:c3:e6:5d:f6:2b:
c7:42:24:7d:10:8b:a0:b2:08:c1:8e:82:7a:c7:28:
42:3f:11:4d:08:c7:1f:ff:24:67:a4:e3:03:0a:08:
fd:7b:64:b3:47:08:dc:49:5f:1e:c7:36:13:ed:3f:
97:a4:cb:f6:30:21:47:0c:df:35:98:0e:c8:7f:71:
86:1f:b8:52:0c:6c:37:26:c4:06:73:42:56:19:32:
10:2c:c1:0b:85:8b:4a:75:76:e1:9c:43:bf:1f:81:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:F9:FF:11:5E:8F:6D:D0:3D:E4:C0:FA:15:44:0F:EF:B5:A2:E7
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:16:69:d5:e3:83:1d:26:c1:00:bf:49:d9:ae:a6:16:53:
10:ad:35:f6:af:c8:d6:a6:59:50:27:33:6c:bc:09:83:af:66:
76:31:89:de:1a:22:f8:30:a4:be:2d:e1:1d:5e:f3:52:cc:b8:
d2:2a:d9:e3:1a:ae:3e:91:03:51:e2:5a:81:77:8d:f5:a3:95:
b6:dd:dc:f4:5c:d5:bf:f8:38:2d:aa:2e:da:ac:29:5b:a3:03:
5e:67:f2:ec:41:7e:12:99:ea:02:ac:78:d5:65:3c:35:00:7a:
ba:0b:76:cb:84:05:e0:f6:3e:92:ae:66:8f:85:c7:70:0f:21:
a6:dc:6b:0a:cf:9f:6e:0d:a5:e8:e8:aa:35:c1:75:e5:b7:08:
49:93:d3:af:37:ea:8d:c8:9e:02:bc:3f:0f:d6:c3:da:80:47:
74:97:08:ab:10:ba:89:bf:6f:86:57:e0:5d:77:fc:8c:a2:9d:
13:be:f9:46:c0:ef:70:7c:80:fe:92:7c:b0:62:c6:7a:27:c6:
9b:f7:65:0b:45:f5:a6:58:68:34:9c:69:2f:e1:f1:fd:55:2a:
91:47:c7:84:3c:69:93:64:06:3d:01:ff:61:ad:3e:1e:a9:f8:
97:27:a7:fc:f2:da:03:dc:87:1d:5e:47:c9:af:a5:3a:32:21:
b2:46:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:38:27 2025 by rpki-client