Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: pbH4c7Aap5RTRIZQ+e3lOPxgICVJ+80NWXkTIjsljFQ=
Subject key identifier: AD:25:44:86:AD:29:C6:45:97:3E:79:4F:2F:F9:DB:C0:E9:8D:BF:ED
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 01968058EBC9839190187A500E13F8242EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 125C
Signing time: Tue 29 Apr 2025 07:00:33 +0000
Manifest this update: Tue 29 Apr 2025 07:00:33 +0000
Manifest next update: Wed 30 Apr 2025 07:00:33 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: ycWdxfCShxFHIu+zdMlsJSCJqKYE5EPSZuUhzaO1Zbk=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:eb:c9:83:91:90:18:7a:50:0e:13:f8:24:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Apr 29 07:00:33 2025 GMT
Not After : Apr 30 07:00:33 2025 GMT
Subject: CN=ad254486ad29c645973e794f2ff9dbc0e98dbfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:59:bf:39:c7:c0:ff:7f:2b:1f:21:97:90:
08:0e:3a:fd:e2:c3:1c:b2:57:96:cd:76:41:be:9e:
4c:60:19:41:3c:3c:1c:7d:e6:4a:e2:6f:98:5a:8a:
40:fb:d3:56:36:00:f2:5b:ef:27:bc:bf:20:3a:30:
8b:63:f3:e1:9e:45:e9:83:bf:b5:97:d2:70:13:15:
de:e5:04:0d:77:b6:4e:a4:4e:f5:a0:c0:6a:65:c1:
7f:e4:7d:64:33:f3:85:6e:78:ee:1d:b2:06:7e:09:
9d:81:2e:d3:83:6b:52:9f:6a:a5:f3:bd:75:02:a0:
9f:91:1d:4d:39:de:13:d8:cd:91:03:91:9f:0a:78:
4d:1d:c4:c4:03:3f:ea:9f:70:3d:53:c7:3b:c4:fc:
85:97:3b:50:b5:6e:8d:5e:1c:38:0d:dc:5c:96:40:
72:33:83:39:14:f1:dc:29:5a:a4:84:02:b9:99:03:
18:ef:c7:af:73:1d:a9:be:63:49:99:ce:48:7b:02:
d9:b5:47:9d:4b:9a:91:8b:5b:57:bb:86:50:39:1e:
29:ac:ba:16:eb:55:99:a6:c8:cb:ec:07:b8:5f:16:
30:74:46:95:07:64:c9:b8:72:b1:ac:62:fc:43:0e:
e6:43:53:d8:91:ff:57:ea:3b:e3:3d:77:27:c4:a4:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:44:86:AD:29:C6:45:97:3E:79:4F:2F:F9:DB:C0:E9:8D:BF:ED
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5a:f3:ea:b1:86:aa:a1:84:ed:58:94:28:cf:52:a1:32:18:
54:dc:7c:44:3d:5a:49:8b:ea:59:f6:66:95:a0:47:cf:60:75:
a2:fd:b4:7f:91:f9:3f:86:8b:17:3c:f3:62:7b:a7:13:10:db:
9f:7c:46:50:3b:8e:ea:0e:70:6a:75:c5:e3:63:29:d9:66:96:
84:06:fb:ac:12:03:2c:80:4c:2c:68:9e:ba:99:6d:30:38:08:
4a:3d:be:60:bf:3d:b5:ed:8a:27:0d:60:7f:9f:70:a3:f2:7a:
17:ea:60:bd:74:f1:9e:7c:90:a6:a5:99:84:5f:b4:11:b4:c0:
65:02:1d:6a:f5:74:15:ca:5c:41:ba:89:6f:f1:f0:6e:ba:40:
27:43:da:2d:c5:96:74:23:4d:dc:1c:70:8e:c0:23:6d:f1:7c:
38:23:65:f9:09:b7:06:55:cb:a8:b2:bb:6a:e7:45:1c:d9:20:
4a:ef:cf:71:73:1e:39:70:b4:8d:3b:9c:13:df:94:09:df:a5:
a7:cd:c3:92:6d:36:49:32:06:1f:16:44:10:49:12:a9:f6:0c:
09:c6:8f:73:5b:8a:d1:b6:4e:a4:d2:27:1a:9e:f1:4c:5f:2a:
f7:1b:86:7e:1c:e4:a4:67:d5:dd:1e:89:a0:8c:cb:ac:74:81:
e6:46:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:49 2025 by rpki-client