Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
File: cCFOfqyx0k4hHi8l_uStdX5sll0.mft (raw, json)
Hash identifier: kWx4NKEmqDTcKmnkv2djhAr3cKaTbzP7/epLkqqm74A=
Subject key identifier: EF:40:1C:86:6B:E7:DA:32:85:73:CE:3B:CE:CF:32:FA:BC:76:F8:53
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Certificate issuer: /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial: 0196C013D56FC56C83BB9E21DD81144ABF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
Manifest number: 04DD
Signing time: Sun 11 May 2025 16:00:47 +0000
Manifest this update: Sun 11 May 2025 16:00:47 +0000
Manifest next update: Mon 12 May 2025 16:00:47 +0000
Files and hashes: 1: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (hash: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=)
2: cCFOfqyx0k4hHi8l_uStdX5sll0.crl (hash: zeC0QQ7DC6MH8pc+hpO8r0uYL++dop6zDlX0srs4zH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:d5:6f:c5:6c:83:bb:9e:21:dd:81:14:4a:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Validity
Not Before: May 11 16:00:47 2025 GMT
Not After : May 12 16:00:47 2025 GMT
Subject: CN=ef401c866be7da328573ce3bcecf32fabc76f853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:91:7b:e3:d1:42:5e:91:65:89:29:a3:3c:
67:ef:77:1f:1c:dc:85:2e:c4:c4:bd:22:10:43:c6:
f2:af:aa:82:9c:24:20:59:3d:2e:bd:9c:a3:a7:2b:
3a:c0:70:9a:ab:6a:ac:52:fe:3b:7b:39:c8:28:dd:
51:fa:0c:3f:5e:1f:dc:d1:44:16:58:bf:f8:2b:b4:
10:4c:0b:0d:16:69:98:5e:af:f5:6a:e3:ce:82:e2:
14:16:12:ae:dc:f1:78:89:80:fe:fb:a8:0d:75:47:
79:43:26:72:c1:ba:30:c2:31:55:d6:e4:c6:8a:fb:
98:36:f5:44:40:ed:2f:41:85:07:36:b8:dc:d6:2c:
3c:ea:3b:cf:b0:6d:c1:41:dd:9e:78:38:af:38:5f:
9e:c5:a8:d0:f0:cc:c5:5a:e4:f6:fc:e7:22:bb:72:
d0:be:dc:bb:3e:b9:35:ef:cc:32:58:06:e6:7a:44:
9d:f9:08:b9:c1:c6:b9:56:94:d5:d7:c5:4f:68:4d:
ca:be:af:44:e1:e8:a9:8c:1a:74:27:cf:cf:47:29:
35:e9:dd:a5:35:8a:7b:b5:63:a6:40:ab:06:73:e0:
17:46:9a:22:82:a9:5b:44:25:fe:74:aa:71:e6:74:
b6:ef:8d:8e:fe:19:5d:7d:18:2b:13:5e:f5:9b:39:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:1C:86:6B:E7:DA:32:85:73:CE:3B:CE:CF:32:FA:BC:76:F8:53
X509v3 Authority Key Identifier:
keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:da:31:9b:8f:07:85:16:f1:5d:b5:64:f2:a9:d0:e6:33:94:
b1:90:a9:15:db:3f:ab:02:5a:ee:df:a9:43:6a:8d:4e:36:bd:
ec:7a:4b:97:90:d1:dc:46:cc:55:11:4c:5e:6c:b8:ef:6a:ad:
e0:9a:cf:84:cf:84:8b:47:72:b4:30:a1:f4:32:f3:61:ac:a5:
e4:47:51:e6:bb:81:79:38:08:fe:ba:17:b0:c1:fd:03:b1:a3:
3f:b4:3b:c9:f9:04:cd:e1:5e:79:0a:5c:24:d3:26:a4:a0:46:
f3:17:cc:b6:09:e1:39:64:cc:64:82:fd:97:c3:07:a7:f8:4c:
6a:33:81:e5:9b:d2:ac:55:e2:d4:08:73:7d:78:7e:cf:77:12:
5c:33:f9:04:4f:0a:04:f1:89:cb:46:41:16:99:e7:48:7e:d3:
18:e4:71:44:2e:ae:d6:dc:01:ec:01:98:40:72:12:e3:dd:1e:
40:90:e4:cf:e1:d2:76:97:46:e2:57:99:a7:bc:80:ed:a5:29:
bc:0f:c4:dc:40:54:f1:33:2d:0c:42:f3:8c:b7:ac:a9:f1:45:
c8:01:61:fe:2c:c8:8f:b8:4d:85:4d:c6:19:37:95:80:32:86:
f1:ca:df:a2:3d:99:80:ad:c1:93:b6:b0:fc:0b:27:4a:af:35:
57:55:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:09 2025 by rpki-client