Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: OxGVNTR5lZPqpxChtMF6rQtDN+9l9pYAuOXVRqnh+/0=
Subject key identifier: 61:24:DA:82:C8:9E:3F:E7:D0:9E:5C:09:1E:EF:E1:76:34:CB:A7:BC
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 0196BC6E3E1EC1CFBE78E96F42C960321BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 039C
Signing time: Sat 10 May 2025 23:01:03 +0000
Manifest this update: Sat 10 May 2025 23:01:03 +0000
Manifest next update: Sun 11 May 2025 23:01:03 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: y14xKsrR7p6d8woumnBA5CtdJ8pmq4uVoz1pe5B8T8Q=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3e:1e:c1:cf:be:78:e9:6f:42:c9:60:32:1b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: May 10 23:01:03 2025 GMT
Not After : May 11 23:01:03 2025 GMT
Subject: CN=6124da82c89e3fe7d09e5c091eefe17634cba7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:7d:ca:57:03:3b:b8:84:e8:90:fb:43:b7:
97:f8:3e:ad:48:3f:00:3f:7e:e3:d0:95:ea:d6:31:
92:b3:fc:74:d3:ee:2c:f7:e8:da:b8:95:18:d1:04:
d6:58:ee:85:de:db:8c:d3:64:ca:40:7c:4d:29:a9:
a4:a9:d9:52:d7:38:c3:4f:9b:8a:d7:8a:8d:49:5c:
2a:a8:6b:46:da:f5:8c:7e:de:86:98:2f:56:0e:ca:
b9:99:13:96:37:52:4e:8b:3f:75:eb:0b:a9:83:9f:
fa:f6:75:bf:fa:cb:c1:91:a1:70:56:6c:32:08:12:
6b:de:f8:c4:78:c9:56:69:25:c1:10:fb:88:4d:6c:
6b:62:0a:9c:0d:a8:46:df:ab:89:0f:43:94:42:7e:
5a:91:21:2e:7a:09:6b:ac:bf:ac:68:4f:a4:f3:e2:
fc:6e:1e:66:f5:10:16:00:a1:13:f4:4d:ce:07:af:
30:19:ca:8b:10:cc:0b:6a:6e:ef:a6:af:11:29:e4:
ed:95:20:04:fc:8a:c3:55:ea:e7:ca:9c:7d:65:5e:
02:fb:45:c7:4d:21:c7:2a:d3:d3:1c:b9:86:7c:a3:
8f:c0:27:6b:c0:e3:76:f3:d7:67:b5:c7:3c:b8:1c:
af:34:34:37:d1:3f:56:f0:e9:e7:f9:7f:6a:95:ce:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:DA:82:C8:9E:3F:E7:D0:9E:5C:09:1E:EF:E1:76:34:CB:A7:BC
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bc:23:80:c6:94:fa:84:ce:b4:1f:42:fd:ce:e3:0f:9f:67:
1a:83:e4:26:22:fb:ac:e5:45:de:b6:2f:ec:5b:3e:fe:df:1e:
58:df:3a:ff:fd:e6:b5:7a:92:75:55:7b:6e:23:0c:fd:4b:4c:
f6:e2:de:fa:b3:25:3d:f2:35:d4:bb:09:b3:56:f5:80:e5:8c:
b1:56:36:c4:8d:c1:a3:0f:f4:0c:0c:b5:9a:06:24:f5:ff:7d:
c3:b7:34:79:36:d8:9a:51:89:53:9e:6a:69:41:a1:1b:1c:ed:
55:a3:d0:ea:d5:95:b5:74:69:e1:0d:67:91:5b:2c:f7:98:07:
98:d2:69:69:aa:70:3a:7a:fe:1f:3d:91:6a:fa:cb:09:2e:d5:
9e:94:18:b1:c7:8d:69:14:9b:d2:cd:f4:85:07:19:52:28:ec:
dd:e2:6e:f9:23:64:3b:cb:65:f0:1e:23:9d:d0:06:73:68:59:
7b:79:f0:8e:e4:53:fc:58:9a:30:a0:05:c0:b4:5c:73:c3:4c:
3f:f7:8c:29:c3:e1:42:1b:e5:28:5e:1b:cf:35:6e:3c:61:af:
1b:62:56:17:87:e2:58:8c:4d:3a:a8:ee:21:d5:bc:f5:a0:17:
d2:06:14:9c:6b:16:a9:21:04:44:69:84:f1:84:44:fd:85:63:
a6:1c:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:35:16 2025 by rpki-client