Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: Z98/zebk2M49/YtnUei402iwEDq9+SNLTVg/Q9PIht4=
Subject key identifier: CF:BF:D8:70:24:94:42:68:D1:37:4C:D4:49:F1:22:63:96:4E:68:0C
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01967944197A13B254F837EFE31CB19F9C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 04D4
Signing time: Sun 27 Apr 2025 22:00:28 +0000
Manifest this update: Sun 27 Apr 2025 22:00:28 +0000
Manifest next update: Mon 28 Apr 2025 22:00:28 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: UoYfSlN23/Fzj9O22+z5DHOlWdHVejFcy+QeFNz0T/w=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:19:7a:13:b2:54:f8:37:ef:e3:1c:b1:9f:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Apr 27 22:00:28 2025 GMT
Not After : Apr 28 22:00:28 2025 GMT
Subject: CN=cfbfd87024944268d1374cd449f12263964e680c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:2f:98:5a:5d:b6:44:ab:75:78:ea:85:c5:
a7:76:2c:0f:50:94:14:20:79:9d:64:55:d5:ff:d1:
4a:ad:29:56:48:68:75:90:b4:3c:87:7e:0b:97:79:
b4:a7:5e:dc:ac:26:c5:44:fc:0c:4d:64:7a:37:46:
d3:1b:d4:bc:53:ae:2d:21:ba:8d:6d:d4:ae:7b:17:
4f:6c:e3:58:1a:d1:6c:dc:e0:da:67:e1:0f:0b:c6:
72:a8:9f:06:21:b3:4a:c1:b2:4b:53:86:81:0b:a1:
fe:0c:42:01:8a:e4:ec:74:53:9d:13:cf:a7:c7:e1:
b7:ed:c4:d3:f2:ee:8e:b1:3f:ec:11:88:c7:a2:17:
db:0b:1a:75:bd:16:f3:8a:30:8a:b7:32:08:7f:71:
af:8d:7b:82:60:ba:5a:ec:5f:ba:60:a7:01:05:d7:
58:e0:45:51:d1:b4:d3:7f:82:4a:c3:34:5a:49:a4:
84:31:93:55:76:73:de:5a:73:16:ca:4e:da:66:40:
17:9c:01:e3:2d:67:c9:a7:7d:46:b4:ae:65:11:99:
ba:ff:53:23:0f:64:bc:ec:12:a2:f4:c4:d0:91:74:
90:1e:4f:d7:95:47:aa:57:ee:8e:1b:db:2c:7e:8f:
5b:2b:78:5b:ed:14:db:02:29:dd:12:d0:4d:b1:c7:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:D8:70:24:94:42:68:D1:37:4C:D4:49:F1:22:63:96:4E:68:0C
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:1e:6d:cf:9c:11:4e:56:62:ff:48:d1:21:43:59:a6:6a:
ba:ca:44:99:02:2a:51:db:a3:d7:b4:cc:52:39:76:40:4f:4d:
50:b7:43:3b:4e:3f:33:6b:1e:12:a5:9f:97:c0:4e:eb:10:2e:
d0:8c:04:fa:2c:54:9e:fc:13:9e:4e:26:f4:a4:88:a0:dc:5e:
25:be:a9:47:d1:49:29:c3:75:68:c6:3c:75:3a:a8:47:32:d5:
72:06:3e:99:5f:33:0b:a2:6c:ef:f5:15:b7:d9:44:c2:ae:44:
48:2a:d5:af:3d:70:64:23:a6:14:c3:c9:21:37:78:2f:e0:1d:
f3:b3:c2:e5:ca:60:cb:e1:36:de:4d:ee:9f:e5:e7:d7:41:0b:
11:f4:f2:bf:3f:b5:aa:37:82:46:dd:cb:d1:d3:ef:0d:b8:b8:
fb:e4:05:97:b7:d8:9c:32:0f:b9:9c:93:51:9d:4b:61:6a:b2:
15:54:ae:ec:06:38:57:11:49:8e:0c:62:9c:78:2e:0c:79:e9:
57:b5:54:5b:c6:a1:13:33:0a:24:61:fa:cb:4a:fa:0a:c3:60:
1b:de:0c:24:a1:1f:0b:fd:7c:31:65:6c:ab:7d:fc:02:e0:a0:
01:34:c2:57:ae:e4:30:ad:2e:93:d2:c5:e0:99:79:2b:0e:8c:
2b:ee:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:51 2025 by rpki-client