Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
File: 80Cbg9EUyAkhERbKLI2zjc4WgPk.mft (raw, json)
Hash identifier: wgO6A34CgZTZI9ONWUewqMITzybKCLm9CTeXS6TRQxw=
Subject key identifier: 2D:D1:DB:CF:13:90:F0:80:1D:42:5B:41:37:60:D9:8D:EC:19:26:64
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Certificate issuer: /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial: 019675303011DB85B67CA1053468CFEE6EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
Manifest number: 072F
Signing time: Sun 27 Apr 2025 03:00:14 +0000
Manifest this update: Sun 27 Apr 2025 03:00:14 +0000
Manifest next update: Mon 28 Apr 2025 03:00:14 +0000
Files and hashes: 1: 80Cbg9EUyAkhERbKLI2zjc4WgPk.crl (hash: ZAQ1Cl81anwCAHEJYXLJ1JCTy1hseoZ7+QHB8odQAiE=)
2: SIpXBuF5J8M21Gywmn86E22uiyU.roa (hash: 0/HkiIDr1xidzVLyjio2x3kYkY2H4uzUst02FaBMwU4=)
3: cfMo45Jv9A1WGKpmxu905UcUbY4.roa (hash: U6aEuljm9L9MfkEprrOph8zxNUxsNX0jhdgLZVW2e8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:30:11:db:85:b6:7c:a1:05:34:68:cf:ee:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Validity
Not Before: Apr 27 03:00:14 2025 GMT
Not After : Apr 28 03:00:14 2025 GMT
Subject: CN=2dd1dbcf1390f0801d425b413760d98dec192664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:51:d7:30:aa:c9:02:cf:41:21:a5:91:ef:
1f:09:cf:a8:e9:dd:28:af:4d:12:5d:17:25:56:a3:
76:bf:51:98:6c:b4:5d:73:eb:87:fe:ab:41:c3:fd:
a8:3d:da:c8:6c:3d:8a:b9:6e:b4:ce:62:9e:2d:99:
1c:36:3b:9c:41:dd:0a:6f:47:e5:14:5a:3b:a8:01:
25:e6:20:54:dc:6a:a5:33:e3:53:02:94:18:25:a5:
59:d4:f4:ec:97:92:1c:70:3b:bd:42:fb:e1:c3:9d:
0e:89:88:6c:70:0d:4b:02:6d:78:76:1e:92:af:5c:
25:0b:6f:64:df:8e:eb:ab:c0:ff:83:c2:d5:e3:bd:
9a:30:37:a6:5a:25:cb:fa:c0:c1:e9:20:d3:e1:64:
68:d1:e1:15:64:80:f0:ae:33:a3:00:1b:2d:a1:ae:
c6:65:06:f1:99:9b:48:83:ed:76:e4:1b:b9:ae:e6:
8a:59:92:6f:fa:af:fd:89:76:9d:b4:2e:8a:d7:b2:
8a:c2:80:ae:97:a4:c1:04:27:9f:7f:88:37:27:2d:
a3:a6:3b:d2:24:ed:98:68:6f:65:bc:11:95:15:72:
7d:df:88:a6:7d:0b:74:64:6d:64:30:b3:5e:59:81:
cf:c4:b0:6b:39:69:b3:3d:55:94:af:21:8e:95:38:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:DB:CF:13:90:F0:80:1D:42:5B:41:37:60:D9:8D:EC:19:26:64
X509v3 Authority Key Identifier:
keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:8e:6b:60:5b:6d:fb:a0:54:85:7b:30:d6:81:38:67:12:
c0:0f:4b:d8:0a:d9:76:00:f4:49:52:6a:59:66:61:c3:51:7c:
e5:a4:58:2c:13:27:34:5a:59:c7:8d:fa:3d:2f:83:18:12:f7:
6a:2f:2a:61:2e:22:a2:9c:ee:ec:17:e5:e8:6c:f2:76:21:8c:
4c:fb:65:ef:87:5b:16:e8:cf:09:e3:d3:12:2d:98:82:b5:84:
06:43:df:a5:fd:d3:07:88:e5:55:0b:7f:68:dd:3d:b7:c5:ca:
87:e5:08:24:fc:e8:31:f6:dd:9f:11:ca:ac:46:f3:ad:46:13:
4f:2c:3f:90:d0:75:6d:2a:8c:39:38:96:c1:24:bc:99:34:d7:
85:b1:e6:18:70:01:bf:9e:cc:02:41:58:0a:12:90:91:ec:9a:
a0:27:95:0b:13:99:8b:2b:78:9f:f2:e4:0c:0d:e6:6b:08:46:
47:8d:69:ff:77:91:38:3c:00:df:a3:3a:20:89:90:3a:d8:87:
8c:b3:2d:24:5a:8e:55:27:4f:37:47:18:de:64:bf:56:f8:3b:
08:fc:e3:02:3b:54:52:f8:17:ba:61:5a:6e:72:82:90:0c:b3:
f2:78:3b:ca:5d:21:ed:45:51:a9:1e:4b:7f:82:c9:6e:52:e5:
9f:09:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:27:15 2025 by rpki-client