Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: yezBkcg9COedJ56pUGHAKorhL4pB85OFSgt1jb4RYBA=
Subject key identifier: 2F:93:2C:2A:17:E2:6A:FC:91:25:28:4B:8C:CF:57:71:65:9F:AF:9E
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019677C37B3AD39324BE552E91B73D6C31DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 043A
Signing time: Sun 27 Apr 2025 15:00:21 +0000
Manifest this update: Sun 27 Apr 2025 15:00:21 +0000
Manifest next update: Mon 28 Apr 2025 15:00:21 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: KMu6Ck5t98uxwju9ulbkTFrc3zySdSogwo+6wTV9zbs=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:7b:3a:d3:93:24:be:55:2e:91:b7:3d:6c:31:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Apr 27 15:00:21 2025 GMT
Not After : Apr 28 15:00:21 2025 GMT
Subject: CN=2f932c2a17e26afc9125284b8ccf5771659faf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:51:1d:a9:20:c7:0c:5c:15:33:1f:5a:ac:
92:f6:a3:16:d1:38:1f:73:05:80:77:5d:5d:1f:41:
0b:0f:27:84:10:a9:a8:a6:46:21:44:4c:4b:b6:d2:
61:c2:eb:74:bf:bb:df:08:ef:b9:56:c1:00:0f:25:
cc:2d:ae:fe:6e:7d:10:bd:b9:52:2d:97:b9:5b:bc:
49:37:34:32:1c:d0:0a:32:6c:7f:37:3f:ba:23:ac:
bf:31:2c:c6:f3:9d:ca:4b:e2:2e:aa:6c:c2:8c:d6:
34:67:89:e5:22:e3:45:03:7e:95:30:45:c4:9f:a6:
d2:1d:4e:59:75:e0:34:8a:0b:3b:c1:6f:1f:6d:00:
64:60:c8:1b:7a:41:52:85:b5:64:b3:34:1d:c3:69:
c2:ea:5a:f6:f5:6f:19:57:5a:d7:08:57:b9:25:bb:
08:90:a3:80:ce:c1:5a:74:03:fb:1f:7b:d3:e2:97:
04:10:01:84:95:12:95:3f:ca:bf:61:8e:14:cd:67:
b2:bd:b3:dd:01:4e:d7:0d:68:2d:c7:9f:0c:1f:92:
dd:4b:ee:3e:de:96:c2:40:92:72:af:cb:11:34:32:
40:5e:af:17:8c:86:35:7a:c9:15:8d:a4:06:ba:70:
0c:9c:63:a6:c6:8a:78:48:81:ca:c4:48:34:a1:0b:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:2C:2A:17:E2:6A:FC:91:25:28:4B:8C:CF:57:71:65:9F:AF:9E
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3c:29:29:51:7c:25:b4:b2:3f:3a:d4:ed:36:f9:11:aa:31:
3f:d8:0d:4c:05:4a:34:21:bf:cc:9c:a3:3f:eb:36:62:b0:66:
2c:7f:6d:2c:7a:bc:22:32:3a:58:ea:8e:4b:3f:26:0d:7c:f2:
03:15:40:04:d4:2f:44:86:c7:b1:53:04:d2:93:de:c2:b4:0c:
e9:f6:54:56:bc:19:c0:4e:aa:89:99:8d:8f:ba:70:ac:99:02:
e5:e9:5d:78:69:68:4d:79:e3:17:9d:58:9d:d8:97:bd:88:1e:
a7:de:53:4e:49:7b:8e:aa:f3:f7:e1:b0:7d:b1:2e:57:33:10:
88:f0:33:fd:83:84:e4:dd:ef:5d:46:ee:65:87:10:0e:d0:c1:
b7:8b:e9:69:90:ca:ed:c9:99:9b:cd:57:d6:0d:77:28:70:54:
6a:26:a0:83:74:52:63:ee:8f:15:9f:ca:01:33:d2:bc:1a:9d:
21:40:4c:5d:39:76:bc:5c:07:7f:4a:ef:b6:c7:11:a6:5d:7e:
26:36:29:74:5a:3e:d6:98:12:0c:3c:cc:84:21:d5:bb:be:68:
72:7e:4c:ae:bf:54:e8:b8:e9:bd:2f:f4:fb:b0:22:b7:e3:06:
d4:71:34:87:78:ee:19:04:82:ff:ff:36:42:bd:90:b6:2f:43:
d6:89:94:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:15 2025 by rpki-client