Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: 76wbB4m0b+Li+aDj5j3X+cJJpDTEBbDkopTDlaEHRic=
Subject key identifier: 8A:D2:CA:BB:A5:4A:33:C6:50:D6:56:10:BA:4D:1D:46:66:78:76:23
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019750B3FFA820507E38714E96FA1E0E5D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 1141
Signing time: Sun 08 Jun 2025 18:01:03 +0000
Manifest this update: Sun 08 Jun 2025 18:01:03 +0000
Manifest next update: Mon 09 Jun 2025 18:01:03 +0000
Files and hashes: 1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: o1RFfJJ9TiN8Dg9/8lwpye5RG9nQ4eom6dvsiV4I8x8=)
5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:ff:a8:20:50:7e:38:71:4e:96:fa:1e:0e:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jun 8 18:01:03 2025 GMT
Not After : Jun 9 18:01:03 2025 GMT
Subject: CN=8ad2cabba54a33c650d65610ba4d1d4666787623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:f8:0d:e3:32:b3:f2:8e:36:84:5f:6e:ab:
95:f5:3e:1c:d0:c9:49:ef:6e:4c:77:e1:e3:12:77:
10:a8:64:b9:3a:25:af:c3:1e:e5:90:2b:a1:6f:2e:
af:98:c6:fc:6f:a5:4b:8f:d3:18:67:54:23:ac:4e:
49:34:f7:52:73:72:25:bb:b7:80:6a:73:c0:26:3d:
ca:a2:bf:a0:d2:43:ff:7c:b0:8f:42:7e:8b:b7:74:
9b:a7:95:73:05:aa:55:0f:df:99:e6:a7:13:21:e9:
23:79:f9:19:63:38:b2:b2:22:4c:8e:25:ce:62:83:
6b:84:ed:98:b5:ad:cf:8a:c9:f8:ca:99:0c:6f:14:
e6:1e:52:ca:6b:e4:e9:51:ec:24:fe:a9:f5:e1:07:
fb:fc:e0:15:ee:4e:1c:3f:ab:44:ee:01:7c:af:41:
85:ac:06:bb:9a:fa:05:d8:63:e7:a0:91:76:4d:b1:
88:79:2b:f6:01:3f:90:0c:64:0b:2f:71:62:9d:f8:
a8:61:af:c4:5d:63:f2:77:c1:f9:d7:71:b8:af:a4:
e4:75:c6:76:9c:b0:08:ef:d3:43:50:6d:46:74:25:
08:2d:50:d1:3f:e4:5c:ec:b3:be:1b:aa:6c:98:b8:
0b:84:be:4b:63:52:d7:76:3d:88:c6:ab:50:b4:b9:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:CA:BB:A5:4A:33:C6:50:D6:56:10:BA:4D:1D:46:66:78:76:23
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:7d:8e:14:a2:5a:86:3d:ab:73:96:15:ab:73:68:5b:23:
04:f1:b9:35:79:37:df:b5:0f:42:ff:d6:1f:50:0b:18:2c:df:
28:81:e1:d2:d4:03:2e:de:df:79:af:fe:e5:7e:63:62:cb:b2:
94:c1:90:2c:45:aa:9f:0d:26:7c:f1:8d:7e:00:ab:8e:07:d7:
e0:fe:ff:bf:e8:28:29:2e:4d:b0:3a:14:e8:10:e1:e3:67:2d:
4f:35:06:9c:63:46:d5:fc:64:8a:1b:dd:b0:2b:98:68:3f:91:
8e:4a:bd:0d:38:35:ea:4b:95:85:7c:38:0f:5c:ca:47:99:48:
03:67:ed:39:4c:fe:2f:42:dd:12:4b:17:47:90:2e:32:5a:bc:
a8:02:5b:0b:4c:e6:d2:9e:f8:2d:81:42:ff:76:d1:22:dd:1c:
5d:a9:78:ef:61:94:ac:08:a3:cd:62:6a:36:7d:f8:76:93:03:
51:90:3f:08:71:dd:e7:57:db:eb:fe:a8:f6:27:b9:95:48:37:
40:e8:77:fa:de:41:ac:bf:4c:b1:22:05:dd:40:4d:13:d5:d3:
02:4a:3e:32:a9:8c:d6:ca:d7:99:88:bd:92:a0:dd:ca:bf:62:
fd:48:4a:b3:15:07:c0:48:2a:30:80:e2:37:1f:5a:48:56:dc:
52:8f:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:25 2025 by rpki-client