Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 3OpImK7WHhL2dEzi1DrTcHkK3kPKs3VVEn+Qynxt7RE=
Subject key identifier: BC:52:16:2A:24:8C:E9:50:B2:B3:80:04:31:8A:2B:46:C8:BE:27:4E
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0196B2586082FC85EBF07DD66BA529EF30CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 00:00:58 +0000
Manifest this update: Fri 09 May 2025 00:00:58 +0000
Manifest next update: Sat 10 May 2025 00:00:58 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: yiBua32F3+9YeMjf+asuSnoCkkA2iKjNxb/b6PAGZwQ=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:60:82:fc:85:eb:f0:7d:d6:6b:a5:29:ef:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: May 9 00:00:58 2025 GMT
Not After : May 10 00:00:58 2025 GMT
Subject: CN=bc52162a248ce950b2b38004318a2b46c8be274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:73:58:58:6c:3f:e5:0f:80:b8:87:ba:b9:
e4:47:0d:5d:93:6e:1f:8e:e6:c7:6a:47:22:7f:16:
b7:70:0c:eb:61:5b:22:d7:f9:d1:d1:7e:2a:c1:82:
a5:51:b1:36:02:d0:a0:59:5c:c9:ba:5a:66:53:62:
da:1b:b3:a0:fd:d8:e4:75:04:e2:cf:d9:6b:55:04:
3a:6f:a0:52:16:a4:2a:d6:7c:6a:10:38:42:88:02:
a4:58:a0:41:46:4b:a9:b3:05:b8:66:5f:70:65:63:
3b:27:32:a0:1e:ab:05:dd:1c:07:ad:0c:3a:34:10:
7a:93:e5:bb:09:88:54:bc:b8:48:f6:24:29:99:3d:
e9:33:8d:7c:3f:53:76:19:d5:10:2e:c2:05:d7:72:
a4:dd:66:87:1d:93:8d:3b:c2:cc:1a:37:ed:ce:a1:
a4:40:a4:3e:c0:83:e9:b7:31:f1:89:9b:5e:c6:18:
60:f7:17:3f:79:29:77:de:e3:54:20:13:91:61:91:
86:7f:26:3a:88:f1:d0:69:06:88:07:28:87:34:fc:
72:1f:de:c8:57:f6:7f:72:7e:a5:a9:cd:48:d3:63:
04:5a:fc:1a:85:59:3a:f7:05:2d:96:c8:a4:e3:69:
59:2b:2c:05:fc:34:d3:98:33:77:ef:cc:d8:ad:aa:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:16:2A:24:8C:E9:50:B2:B3:80:04:31:8A:2B:46:C8:BE:27:4E
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b0:59:59:25:04:eb:32:0c:ec:f0:42:f5:43:db:a4:0b:69:
03:4f:31:60:fd:0e:84:bb:c8:40:5c:db:0c:ae:96:87:e3:7f:
db:92:ee:fc:2b:b5:43:70:1e:9f:af:94:7c:e2:83:c8:05:15:
d1:96:fd:bb:89:e5:95:63:15:5a:d9:ba:23:32:05:e2:a1:fc:
5c:9d:31:74:81:26:ef:37:a3:ca:54:53:33:dc:3f:70:2f:7a:
a4:b1:49:0a:a2:36:c1:26:f1:a7:01:d7:ec:49:55:24:2b:31:
63:dc:59:99:98:01:71:c7:3e:00:3b:8d:c3:43:3f:7a:35:bc:
96:df:3c:e2:35:d5:b9:02:5c:ed:cb:86:2b:74:9d:9d:22:75:
69:cf:50:56:9e:7f:d1:df:19:c3:5b:2a:3a:f7:4a:4b:7f:60:
f6:21:17:7f:19:74:ff:58:ff:c4:1a:1c:33:f4:1d:66:3f:ef:
34:ba:3c:8f:6d:e7:81:e2:1c:d9:08:13:01:4c:43:70:60:df:
5a:ac:3c:5a:14:08:23:24:56:b8:59:e1:70:bf:c7:dc:9a:e7:
81:13:23:cb:cd:13:31:59:88:cb:8f:db:1b:82:cd:54:ad:6f:
4d:69:88:42:9d:ee:46:e9:c2:ad:08:e5:3b:33:ab:1b:e8:1c:
97:a1:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:47:02 2025 by rpki-client