Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: N3NvgJbcs/+HQBEAMA1gttrYh50nzkdZetn3KSHUzXQ=
Subject key identifier: 58:C2:97:2E:81:EA:CE:65:0B:B6:63:07:6C:FD:94:B6:D0:F2:8A:6C
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 0196B2584E57B83A7544C1C54E391FA98BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 088D
Signing time: Fri 09 May 2025 00:00:53 +0000
Manifest this update: Fri 09 May 2025 00:00:53 +0000
Manifest next update: Sat 10 May 2025 00:00:53 +0000
Files and hashes: 1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=)
2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: d7cm/M5XZMNQWxKsIJePvbN3SE7Ti3SVtQ3XnAT6GhE=)
3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=)
4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:4e:57:b8:3a:75:44:c1:c5:4e:39:1f:a9:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: May 9 00:00:53 2025 GMT
Not After : May 10 00:00:53 2025 GMT
Subject: CN=58c2972e81eace650bb663076cfd94b6d0f28a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:42:03:ab:1e:15:86:d0:be:75:1c:52:a8:
68:ef:42:51:1d:5d:97:8d:f6:f7:6f:a3:2c:3c:54:
03:d6:8b:bf:3e:61:08:5d:af:fd:a9:39:8a:c5:6b:
94:d2:48:41:15:d9:25:c0:c1:db:4b:94:6f:bf:73:
95:de:83:e1:60:97:1a:8d:0c:07:94:42:a1:db:30:
61:8f:5e:96:f9:ac:a3:ae:a3:82:4f:00:b3:2a:85:
9b:60:41:4b:f0:27:f7:d9:8c:04:00:ec:c8:19:18:
1f:31:37:83:5b:86:c9:cf:0c:8a:5d:e1:ac:4d:3f:
e7:0d:37:7d:5e:bf:33:07:2d:07:1c:a4:ac:fd:36:
6a:98:50:de:5c:62:18:6f:0a:69:48:4b:c0:15:b9:
3a:5a:bf:01:7b:bc:a0:b4:e6:53:04:9f:af:a5:c9:
5a:d4:08:9a:6d:56:e1:4b:39:cf:89:89:42:8d:5d:
3d:ce:09:c6:b4:c4:8d:9c:7f:e6:b6:8b:a5:89:a4:
cc:e3:f7:03:40:bf:45:30:1c:e0:36:1a:be:ef:33:
da:d7:df:7b:36:1c:7d:b2:f6:ad:44:cb:76:7e:a3:
48:99:21:f4:5c:0e:1e:33:8c:a6:0e:c3:e9:3f:6d:
4b:c4:aa:c0:77:93:69:08:0c:4e:3c:b4:ad:b7:3c:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C2:97:2E:81:EA:CE:65:0B:B6:63:07:6C:FD:94:B6:D0:F2:8A:6C
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:63:f1:95:44:0d:10:85:a8:cc:0c:0c:5a:60:40:c7:8b:
81:29:a7:15:0d:38:7c:69:5b:85:d6:f9:cd:42:7a:d4:80:47:
c5:cb:55:14:17:37:51:84:16:c6:c5:5f:b0:aa:d0:61:22:58:
ba:1a:5f:b8:7f:d2:9e:c3:54:96:8d:0e:d2:b7:d8:0e:b8:4b:
1f:a4:26:45:38:88:84:82:4e:96:3c:db:f3:ee:c7:7a:a9:66:
5f:b1:aa:20:71:db:04:0c:3f:2f:60:69:98:2a:a9:a7:e6:5f:
fc:db:83:05:17:c1:1d:e0:a3:ef:05:f8:6e:75:d3:57:9b:a4:
8a:5e:26:9b:c6:fd:b9:77:3d:dd:2a:5c:d0:b3:b8:02:85:47:
aa:91:d0:b8:48:54:51:10:61:f8:42:a1:83:35:26:d0:31:ea:
2f:e1:44:c5:dc:b1:12:53:68:ed:fb:17:89:3e:82:7c:a3:42:
a5:18:93:59:73:57:71:0d:43:4b:48:0a:5f:49:90:2d:ac:3b:
53:e7:46:f2:d5:d2:2f:73:e2:86:12:b5:2a:20:7e:c7:db:c7:
42:ec:3c:d2:50:ed:e1:83:37:71:c5:7a:26:be:70:15:3a:08:
a6:27:fa:8f:c8:e7:bc:24:a4:7f:fd:73:85:f3:00:49:2e:48:
78:63:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:27 2025 by rpki-client