Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: 7H4vagV+g4ztsCEat1vO6ByyPRVCMCX9/7Pke27hb5U=
Subject key identifier: A8:A6:B7:F0:74:2B:8D:8B:A4:28:B3:C6:84:14:D1:E8:65:F1:B1:FE
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0196CA96F79C13201A5D75D6AB5BB89594A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0382
Signing time: Tue 13 May 2025 17:00:13 +0000
Manifest this update: Tue 13 May 2025 17:00:13 +0000
Manifest next update: Wed 14 May 2025 17:00:13 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: tLfOmN+8AswaX7wASK6gslj0/tlmXIoWK0L6HMq4PzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:96:f7:9c:13:20:1a:5d:75:d6:ab:5b:b8:95:94:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: May 13 17:00:13 2025 GMT
Not After : May 14 17:00:13 2025 GMT
Subject: CN=a8a6b7f0742b8d8ba428b3c68414d1e865f1b1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:37:95:15:9c:18:a5:7a:10:63:17:6e:7c:
be:23:ec:d9:d0:a4:7f:2e:80:c0:54:f9:b8:ab:60:
5a:b9:e0:18:4b:d9:8a:98:67:c6:a5:9c:be:36:de:
89:f2:74:95:04:62:d3:16:15:35:6a:af:91:53:94:
ae:8c:72:82:7a:1a:04:68:f9:47:d2:c9:f8:d5:3d:
63:7c:ea:92:7c:2a:a5:bc:64:3b:9b:50:b8:f7:19:
49:23:22:ec:52:87:56:17:d6:2e:87:4c:59:3a:dc:
b7:12:0a:cc:38:e0:5b:d6:0a:a8:1d:b3:58:1c:10:
68:a0:2f:7a:76:30:4d:7c:40:31:37:4f:98:21:fa:
3c:9d:58:ab:73:8c:0a:3d:0c:c8:fe:43:67:4e:ea:
da:4e:d8:42:a8:17:af:bb:a0:6d:d5:a5:99:d5:b8:
e6:35:c7:34:66:b2:63:81:e1:93:d6:67:29:4c:8f:
24:a5:71:e4:b6:9c:18:c4:07:4e:e5:3a:2d:ae:0e:
3f:62:50:f1:35:05:1f:19:23:a2:e8:aa:41:9b:2c:
c5:e7:87:24:54:39:8c:50:4b:ed:24:86:4b:16:2a:
34:73:4a:5f:5a:9d:28:5b:1d:02:da:fc:8f:17:1a:
d3:88:16:1d:54:3a:f5:3c:7a:cd:1e:c9:f4:2a:07:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:B7:F0:74:2B:8D:8B:A4:28:B3:C6:84:14:D1:E8:65:F1:B1:FE
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8b:49:d3:ed:bb:18:17:1d:44:d1:01:12:6c:fd:f2:1c:62:
15:fc:45:ae:ce:93:7d:27:77:68:38:12:0a:32:59:a7:23:fc:
7f:05:4e:4a:ce:00:e9:da:29:15:e1:f6:79:aa:c4:a4:b8:3e:
d1:56:7e:8e:26:ac:75:8a:dc:b7:00:4f:ea:62:22:df:fd:33:
ba:4c:8f:38:d9:f7:96:76:ed:bb:5c:f0:3d:e1:bb:74:0f:14:
4a:3c:22:0e:00:c1:87:15:97:22:b5:b4:72:89:58:5c:7a:01:
35:d8:61:6a:4f:f1:d8:43:27:0e:5f:6d:f8:4c:e4:5f:6d:e7:
c7:b1:1b:76:00:93:9d:1b:2d:80:15:19:cd:ef:71:55:af:12:
ff:51:80:53:ed:63:22:63:c0:ad:bb:b4:31:4f:2b:57:70:c4:
b6:fa:79:50:b3:89:73:85:0e:66:f8:39:3f:0c:60:0a:a4:9c:
57:6f:e5:e5:38:3c:60:ee:e5:b4:28:42:ec:cb:6d:6d:5e:41:
8d:4d:42:96:52:c1:86:f4:60:27:65:f0:be:a3:b3:fe:e3:e7:
10:cd:21:2b:db:68:6f:da:81:70:b9:c3:bb:95:3f:02:18:60:
5f:91:fa:7b:62:f6:d8:7d:e8:56:ad:d5:5f:44:62:39:38:d7:
e8:b9:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:55:31 2025 by rpki-client