Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: QIC6AXv3CDcN5p6qwZAi2Hg7GT2ZS7ZIeQgoG1LzFUM=
Subject key identifier: 82:C9:41:AC:0D:24:77:EB:42:4C:6B:B5:57:38:91:EE:0D:C3:28:6D
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 0196C15D5F474FFE3FA250B8AA3924CE5E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1078
Signing time: Sun 11 May 2025 22:00:43 +0000
Manifest this update: Sun 11 May 2025 22:00:43 +0000
Manifest next update: Mon 12 May 2025 22:00:43 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: Bld8RLR8AgNLO3kZqUnPoXQo6iVYQU6BWdNyvmvKpLM=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:5f:47:4f:fe:3f:a2:50:b8:aa:39:24:ce:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: May 11 22:00:43 2025 GMT
Not After : May 12 22:00:43 2025 GMT
Subject: CN=82c941ac0d2477eb424c6bb5573891ee0dc3286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:23:0a:ee:0d:47:48:b9:9b:f2:d8:d1:5f:
ac:d3:f5:6a:22:e7:03:85:ec:d9:ce:a6:71:a1:8d:
51:6c:4a:8e:73:21:c1:dd:e1:c7:f5:33:4e:c1:82:
c6:47:f7:73:3d:41:1e:d5:3a:81:b1:6c:14:35:60:
48:29:a6:ec:63:c3:d1:29:ad:da:74:f6:29:c5:e8:
5b:b9:d1:58:0a:5b:cb:f5:85:00:da:cd:27:6f:75:
30:ba:21:60:31:9a:1e:91:3a:d1:cd:ba:3a:6a:34:
a8:3f:d1:ad:9f:a5:e3:99:5e:75:76:04:56:b7:f6:
76:da:bb:72:c2:6d:04:06:ae:5f:49:59:25:56:7e:
61:a5:c4:b7:ad:e3:ee:1b:ca:d4:1c:a6:39:48:a6:
e3:38:ee:63:ab:27:c0:61:20:69:ea:5c:cd:d5:c4:
f0:80:7f:90:ec:65:de:7d:d1:72:b7:2a:35:2a:6b:
ec:01:85:23:9f:67:94:4a:c9:18:80:2b:96:2f:73:
95:64:60:fd:6a:69:79:e6:1f:ea:e0:98:eb:d6:13:
cf:49:a9:63:1e:14:e7:42:b4:19:f4:d9:1a:72:fe:
09:4b:42:8b:bf:68:dc:36:c8:bd:40:d1:0b:ee:e8:
e7:c9:a9:2f:f4:dc:57:1b:d9:80:4d:11:d3:c0:bd:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:41:AC:0D:24:77:EB:42:4C:6B:B5:57:38:91:EE:0D:C3:28:6D
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d0:83:3d:87:b4:91:da:e3:7e:b7:d9:9e:5d:f0:54:6d:4c:
c6:b9:67:66:a7:1f:d5:88:f2:c3:dc:8b:03:0e:27:58:21:fb:
7e:59:07:5e:7c:5b:3d:d3:1b:ac:18:85:a6:da:44:0b:6c:3a:
f9:a2:d2:c9:3b:2f:7c:7e:2c:cb:be:19:23:7b:a4:7f:46:6b:
09:73:ea:b8:59:02:01:8f:e9:8f:78:a6:d4:0c:9f:ba:35:44:
18:90:98:93:93:b3:5f:b7:24:28:b9:0d:05:f7:06:46:1d:ff:
cb:44:78:71:c9:7a:35:1a:af:7e:3b:da:18:e7:8d:53:0b:43:
39:b1:b3:20:4b:34:08:21:ff:60:cd:46:a5:08:01:2a:31:34:
56:a4:32:20:ea:67:9a:1c:d5:f9:2b:03:4f:7b:32:2a:40:5a:
74:85:97:97:eb:67:4b:a4:67:c0:03:5f:bc:b6:cd:75:19:84:
47:78:68:73:3f:e1:5f:ae:fb:24:be:aa:43:9a:76:6f:3f:a4:
60:cd:26:d0:ae:f5:70:2f:9a:d7:56:00:30:4e:6e:48:2b:94:
83:aa:3d:f3:fe:9e:be:05:e5:eb:c3:ab:af:ef:a3:f9:93:6a:
1d:25:87:32:de:a0:99:23:13:fb:be:3f:fa:6d:b1:e3:f2:94:
59:ba:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:45:06 2025 by rpki-client