Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: S0Lk0lq/nc+zamjA/p4F6JWrNGPKF0MYsWBF9HmaL3g=
Subject key identifier: 1D:32:B1:DD:95:77:A1:71:E3:ED:BC:C4:69:50:9E:E1:A6:04:39:14
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019678D5FB8E5E12E00DB06D90FBD9B143CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 0379
Signing time: Sun 27 Apr 2025 20:00:11 +0000
Manifest this update: Sun 27 Apr 2025 20:00:11 +0000
Manifest next update: Mon 28 Apr 2025 20:00:11 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: KCCpcQBYbaGLcCRilK0WWE8R4FjL7ZzPZlmpExUknZI=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d5:fb:8e:5e:12:e0:0d:b0:6d:90:fb:d9:b1:43:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Apr 27 20:00:11 2025 GMT
Not After : Apr 28 20:00:11 2025 GMT
Subject: CN=1d32b1dd9577a171e3edbcc469509ee1a6043914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:0c:54:2b:a3:4c:af:01:63:9f:06:ad:82:
9f:4d:9a:87:34:d5:75:39:d9:ba:d4:63:37:d4:5d:
e1:b2:9c:97:38:02:4d:7c:3f:ae:a3:be:5f:76:f2:
d6:c3:9a:5d:cf:ab:ab:de:de:ec:7f:2e:76:af:3a:
a5:c5:1d:c3:ed:fa:0f:fa:81:09:0e:a3:ca:08:32:
a1:3c:45:06:3a:ab:f5:b0:70:6b:2a:ef:68:4a:2e:
6a:a6:3e:a2:66:05:4a:b0:0c:dd:3e:8d:bc:8c:dd:
f9:07:46:8c:0c:a0:30:ea:33:bf:ec:8f:b0:2c:4f:
05:f5:e7:5f:63:97:5b:2b:59:7f:2d:82:92:31:35:
19:b8:29:c7:fd:11:11:f1:a4:70:db:d6:15:d9:3b:
50:b4:96:d6:1e:4d:7b:ca:5b:01:8d:d1:97:94:f9:
a0:0a:55:f9:7f:3e:27:6a:32:b9:51:e3:28:a0:1d:
1d:62:70:b6:13:b2:65:c6:43:0f:a8:94:bf:fb:cb:
90:c1:ea:d7:3b:f6:9c:19:f1:d3:f2:13:2e:23:25:
fa:ea:88:e2:69:c8:22:42:ff:fc:cf:a7:d5:e1:94:
08:9f:64:e2:2e:01:08:4c:c1:00:1c:b4:4f:8c:30:
d8:1c:eb:09:96:d8:c8:bd:e8:e5:77:b8:a9:a8:b0:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:B1:DD:95:77:A1:71:E3:ED:BC:C4:69:50:9E:E1:A6:04:39:14
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:24:3b:72:17:0c:c9:a7:fa:f7:31:da:75:5d:62:8d:ce:
95:2e:c8:5e:42:73:ea:3e:0d:c3:e3:9f:27:27:ed:f5:bc:94:
2d:e6:ae:09:7a:a4:67:f8:67:4e:61:10:5f:22:d8:0f:0f:cb:
24:3a:a4:3e:76:77:96:53:52:7d:88:3b:f8:19:ee:b3:87:bf:
2d:47:dc:d8:f0:29:f9:25:d7:49:90:05:c6:ac:c5:12:a8:da:
ad:8c:a4:3b:c0:6e:0a:64:b7:ad:b1:b0:f7:f4:e8:a1:0a:11:
e7:4d:10:82:1a:46:ce:89:58:de:9d:b0:bc:0c:fa:c3:d6:a1:
6e:b9:6e:2e:24:4d:55:8c:3e:a3:22:8a:c3:8c:d3:73:c9:75:
5f:18:92:31:5b:86:ac:0d:78:f5:01:cf:a9:78:0b:8b:49:90:
08:de:10:e4:b3:98:01:44:79:50:3e:fa:0a:03:af:16:52:c1:
d0:40:ab:dd:3f:13:28:f2:ab:d9:db:74:49:1a:27:e4:c3:20:
4e:eb:58:43:bd:a9:39:2a:c7:b3:92:a1:70:3a:34:0e:cb:52:
3d:8b:fc:22:e7:56:cc:cb:92:e0:84:0b:20:6e:62:39:7e:b7:
01:d8:bf:79:73:55:3b:08:d2:dd:9c:f2:a5:b0:51:e6:5b:3b:
5d:4c:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:51:18 2025 by rpki-client