Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: EFJEKCUh6itCO/lEP4Erz6RGpXY8mwcXMtLXabsEDOU=
Subject key identifier: BE:1F:66:BA:23:7B:33:38:C9:08:3C:F9:35:24:3A:D5:4C:D4:FC:09
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0196AC8D0D8C0CD68857B25E97539DEB5A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0A8E
Signing time: Wed 07 May 2025 21:00:47 +0000
Manifest this update: Wed 07 May 2025 21:00:47 +0000
Manifest next update: Thu 08 May 2025 21:00:47 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: Qnihr+bOZUhrCctB/3vSpbbcGjOvUeN8fVbIjbZS2Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:0d:8c:0c:d6:88:57:b2:5e:97:53:9d:eb:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: May 7 21:00:47 2025 GMT
Not After : May 8 21:00:47 2025 GMT
Subject: CN=be1f66ba237b3338c9083cf935243ad54cd4fc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:25:53:ed:14:5e:c0:ad:66:b4:6a:07:8e:
ef:d4:78:2f:ce:a9:8f:26:de:3d:78:bb:13:44:ed:
af:20:53:6b:b4:80:ab:6d:9c:e5:53:48:c0:03:5e:
68:cd:e0:03:81:a7:14:b8:b0:a3:b9:59:f2:1a:6d:
4c:04:55:e4:f6:7d:9d:95:14:7f:04:ba:90:9b:ad:
f5:aa:22:ee:43:60:8a:02:98:81:60:3f:60:67:ee:
70:16:37:7b:3c:0a:00:36:0d:1b:a5:45:0d:9c:d4:
a9:e2:e5:2a:fc:88:b8:70:c4:2b:18:d8:24:7b:b6:
65:54:4e:13:7d:68:9b:4a:6d:b6:aa:2c:d4:91:7e:
89:cd:7e:8f:c0:90:3b:9a:73:4c:98:f5:46:31:3e:
56:94:7d:22:70:be:0a:0a:c4:b6:0c:04:fb:0d:48:
56:9a:d7:83:36:73:a5:93:1f:93:66:a7:86:7f:15:
16:8b:10:9a:e4:c6:3d:55:f3:08:b0:4e:8c:dc:de:
06:71:69:5d:6d:96:79:3d:91:40:6f:cc:3e:e8:65:
da:49:e7:47:f4:22:9e:cf:46:21:cb:64:e7:97:67:
a7:e5:96:4d:ef:7d:57:f4:1d:87:e0:0a:ee:66:0b:
f2:36:8f:3d:b1:9a:51:db:af:21:d9:11:1c:53:60:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:66:BA:23:7B:33:38:C9:08:3C:F9:35:24:3A:D5:4C:D4:FC:09
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:cd:5c:df:57:6c:d2:19:cf:47:91:74:c4:18:24:43:05:
85:e9:00:c5:e7:65:6c:e3:09:f7:56:3d:68:59:98:1e:14:61:
fc:18:d0:c6:f0:2c:28:3e:5c:56:af:93:70:fa:81:58:22:d5:
94:af:cb:cc:fc:8e:0e:1b:17:ff:81:a2:09:ad:d3:bd:62:53:
b3:79:8f:aa:02:40:98:68:57:74:83:f2:a0:18:bc:c7:65:0f:
0e:c1:9f:6e:50:49:93:f8:85:e1:7a:d5:d4:c0:e6:74:f3:c6:
79:72:a9:cd:43:bd:67:91:f7:69:e4:14:89:e8:cb:01:2f:f5:
dd:22:8f:f5:3d:01:54:64:e5:77:a8:7f:01:35:65:ff:63:56:
c4:3d:3d:a0:e3:10:cd:8f:47:e7:f7:78:98:2e:d2:36:11:9e:
9c:62:38:41:c3:0f:23:ad:28:77:61:06:0b:87:e3:22:1d:07:
30:b9:1d:66:50:68:42:a7:13:ed:a4:9a:1f:96:34:73:02:84:
1a:04:89:e8:ab:12:41:5d:0d:01:df:cd:bb:03:b8:3a:a6:c4:
e1:b1:5a:5e:82:d2:6b:82:c5:53:88:a0:18:42:72:f8:d9:fa:
ba:9f:12:8a:7b:2f:c3:15:9c:94:13:f6:c8:dc:ae:54:9f:cd:
7f:75:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:22 2025 by rpki-client