Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json)
Hash identifier: bZAt1pz05zt8hZyl/LIRJIJqc9nOjMQmKjU4AAyAKWo=
Subject key identifier: B0:E1:2F:40:02:67:76:C1:64:E2:88:93:59:92:E3:18:45:3B:44:4B
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 019675D53709D19C8B32E2E6A11DCB04A9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
Manifest number: 073C
Signing time: Sun 27 Apr 2025 06:00:29 +0000
Manifest this update: Sun 27 Apr 2025 06:00:29 +0000
Manifest next update: Mon 28 Apr 2025 06:00:29 +0000
Files and hashes: 1: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: FOc6C5QdmnYT0XnpThcBeHhThcYRH7XLNqt2qQoiSRQ=)
2: khFY4LCzs_C_2FKxTxDOR-38KnY.roa (hash: XM0c5kYBwYH9YLOtd32YXHex7zgvtOBEgciRDVMSUbU=)
3: qvPm57YEBA1Gnl47iz-cQbRx7UY.roa (hash: tBKdpc8P9meJArJGr//IYbXNDI8iochN8kxy5UtDRE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:37:09:d1:9c:8b:32:e2:e6:a1:1d:cb:04:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Apr 27 06:00:29 2025 GMT
Not After : Apr 28 06:00:29 2025 GMT
Subject: CN=b0e12f40026776c164e288935992e318453b444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:d7:44:6b:c7:5f:8e:ba:b7:ea:8d:46:0c:
f5:2f:24:a8:32:29:2e:8d:95:dc:da:7f:1b:bd:50:
aa:d3:8c:b2:81:ec:c6:fc:35:30:44:ac:a3:0a:e3:
a4:8e:be:82:e5:91:76:87:c1:11:b7:26:06:79:da:
ab:18:cd:8d:33:91:67:5f:7e:76:01:15:58:3f:73:
88:47:9a:45:56:30:c7:4b:eb:1a:a4:66:b9:d6:c5:
8a:49:f5:2d:42:e3:ef:d8:2e:ab:ec:5a:0e:a9:ca:
d4:4a:75:55:90:43:10:3a:b6:7a:69:70:f4:77:ea:
88:8d:06:02:0e:3d:ea:4a:d0:36:eb:a1:15:73:7c:
69:fa:fb:1d:6d:ae:51:01:02:63:bb:a8:2b:44:14:
fe:f6:51:9f:2f:ac:e4:82:cd:57:cd:88:01:e2:20:
32:3d:8f:50:e5:95:9d:11:14:38:ac:fa:56:02:10:
41:63:0a:18:a8:48:d3:5b:df:90:98:96:5c:83:57:
8d:ef:1e:85:b6:d1:52:b9:28:c4:46:8e:f0:10:28:
10:67:df:c7:30:91:c9:a6:65:03:6a:76:24:b2:52:
3c:f5:d6:04:10:80:33:79:7e:2f:c8:93:50:fc:ea:
df:19:ef:bb:67:f5:93:af:04:5d:df:05:cd:26:b6:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:2F:40:02:67:76:C1:64:E2:88:93:59:92:E3:18:45:3B:44:4B
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:56:16:17:bf:c0:b9:5f:47:d4:01:b9:71:86:69:34:51:1f:
8b:c1:50:2e:7f:d4:87:1f:20:13:e4:d1:00:fd:bf:f8:00:d8:
b5:4b:7f:7c:59:59:89:3f:7e:6c:ed:d3:25:bf:49:60:f0:3b:
1c:bf:a2:45:6c:dd:d5:24:89:a8:55:b0:da:f9:f3:b5:8b:ad:
3e:d2:9b:a7:5b:26:c3:c5:69:9b:11:e5:27:56:07:3b:9d:8d:
c7:60:c8:37:f2:72:8a:36:2f:1a:14:fe:e4:17:45:e9:97:e0:
45:86:e3:09:7b:49:ba:b9:ed:0a:74:eb:91:40:74:cd:81:6b:
1e:80:d8:e0:c3:db:fb:47:be:65:17:eb:44:05:d4:1a:ad:ed:
91:7e:55:6d:2f:61:62:91:13:f4:7e:b5:e6:26:a6:55:d9:e7:
bd:44:b4:2d:e4:b4:f1:76:4e:b9:b6:4d:b8:0f:72:27:c2:dc:
0d:55:2c:e0:d7:3b:22:a1:6f:2e:8e:4c:92:3b:18:6f:33:8c:
cb:3d:9d:37:00:ef:6b:7a:61:01:54:57:50:1d:15:f7:18:f1:
90:c5:29:23:54:80:d8:bb:ef:85:d2:a8:2d:40:18:1a:6d:6f:
0f:c0:45:56:fc:99:4f:47:21:b7:8e:2b:09:03:8d:9c:5b:6a:
02:61:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:27:30 2025 by rpki-client