Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: +hs5ix9cy5rGzTPQa0WvWpEP5FQacNYhxqKO9pkmb0s=
Subject key identifier: 70:F8:FA:0E:49:BF:D1:8A:46:83:1E:C7:9E:85:5F:23:81:7B:20:9F
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 0196741E53CAD9340EA17576501F71113308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 047E
Signing time: Sat 26 Apr 2025 22:01:06 +0000
Manifest this update: Sat 26 Apr 2025 22:01:06 +0000
Manifest next update: Sun 27 Apr 2025 22:01:06 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: 5gD9kQMWMVeTzL9F3COAKdhLGfFmYXSWjzWPI/loBJE=)
2: IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (hash: 1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:53:ca:d9:34:0e:a1:75:76:50:1f:71:11:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Apr 26 22:01:06 2025 GMT
Not After : Apr 27 22:01:06 2025 GMT
Subject: CN=70f8fa0e49bfd18a46831ec79e855f23817b209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:a9:aa:34:4f:57:aa:78:25:d7:93:9d:ba:
38:7d:b6:a0:c2:49:55:7b:ea:8f:74:9c:be:7b:1f:
a2:61:52:f3:ff:7c:c1:60:e1:2d:1b:e0:c6:b8:da:
6b:07:7a:be:69:6d:b5:00:d8:3b:71:0e:84:a0:26:
5c:1e:1e:3f:a1:8f:52:bc:e1:b6:1c:e2:09:38:2e:
34:8e:f9:a8:79:88:7a:89:8e:88:4b:e2:44:c3:5e:
36:58:2a:da:99:49:5c:8b:45:e8:c6:10:ef:f5:a6:
dd:1b:ca:b5:69:a3:89:7b:26:fc:49:35:bf:1a:61:
13:05:fe:b8:68:5e:1b:c2:7b:f8:60:6a:9c:a7:e9:
69:02:c9:43:d8:3d:4e:29:3c:09:52:4a:67:72:c4:
f6:7a:5d:59:b6:79:21:83:4e:bf:28:87:22:41:7f:
44:da:f0:78:43:31:20:ed:85:67:c4:65:a8:e1:42:
ab:6c:a7:b2:08:2c:d2:0b:40:2d:ed:03:d3:f9:b4:
85:6c:7d:3b:5b:c3:19:92:59:00:9e:23:07:89:fc:
37:45:ec:f3:a0:8b:57:86:9b:43:97:86:af:00:90:
37:19:dc:3c:03:f0:19:b1:8c:d3:f2:f5:73:a0:6f:
f3:47:94:12:07:35:79:8b:c0:a9:46:51:a1:eb:74:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:FA:0E:49:BF:D1:8A:46:83:1E:C7:9E:85:5F:23:81:7B:20:9F
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e6:e0:6e:39:88:68:97:8a:9e:f8:3e:6e:10:df:44:61:a4:
40:18:26:8d:04:e8:d2:26:bf:28:4b:1a:ae:3e:33:94:bb:e6:
bb:b8:94:bd:3d:92:89:8c:21:bf:de:c6:be:16:a7:24:bb:f1:
7a:b1:ae:df:4f:fc:8a:d0:f8:ed:1e:84:5b:20:a7:50:03:f0:
b0:6d:e8:b4:26:b0:c9:2a:d4:65:c3:ea:d2:74:e6:db:e8:ce:
d5:ae:1e:ac:62:0e:b0:31:d9:ed:98:d4:b7:76:f4:93:e9:12:
15:2f:bb:7a:ba:ab:ea:cd:35:80:dd:d0:0e:23:35:5c:82:c9:
7d:f9:fb:76:b3:ed:4b:73:45:c2:f4:c7:0a:48:98:3d:14:5d:
8d:fc:d1:cc:81:54:06:88:21:f2:07:fc:14:73:6d:57:d8:01:
7c:a2:02:3f:68:5c:4c:2a:1f:b5:a3:8d:ba:de:bb:01:24:64:
35:8a:8c:2a:76:6d:42:aa:d8:62:01:79:e8:98:ec:11:88:8f:
ee:17:00:8d:95:0e:bd:f5:4d:ea:6d:62:d6:68:37:36:31:34:
24:e4:2d:7a:0f:8a:c4:2b:36:bf:de:96:3b:0b:16:d7:a9:d3:
9f:8e:48:ed:a1:92:ff:6e:bb:f2:12:23:32:91:0e:49:b5:24:
6f:4b:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:07 2025 by rpki-client