Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: 0t8mgJE5BQ5jynpzpYn3xlPH+9eUVRG/UCTf/01bPBY=
Subject key identifier: CF:BE:31:09:B0:EC:09:A6:81:1D:BD:1E:7A:85:30:D2:FC:32:C3:3F
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 0196AF8DEB3DB6CA1EBBC3152E4F7C116E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 11:00:35 +0000
Manifest this update: Thu 08 May 2025 11:00:35 +0000
Manifest next update: Fri 09 May 2025 11:00:35 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: KUMZBnfzhpOayB7Szpyk/xxKdxujtptfLD40Q2a7UM0=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:eb:3d:b6:ca:1e:bb:c3:15:2e:4f:7c:11:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: May 8 11:00:35 2025 GMT
Not After : May 9 11:00:35 2025 GMT
Subject: CN=cfbe3109b0ec09a6811dbd1e7a8530d2fc32c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:40:a4:55:5a:f1:0a:1e:6a:10:35:5e:50:
83:0f:61:6a:30:bf:62:96:fd:1a:25:35:35:ef:45:
0b:b9:4c:3e:a4:8b:33:f3:3e:98:45:7a:6d:0c:50:
b1:a4:b8:77:4b:ef:7a:b6:ab:25:51:46:7d:b6:b9:
93:1a:ae:74:06:07:51:3a:4f:2b:fb:bb:8d:60:56:
b2:d0:57:2a:8c:98:d6:b8:36:15:68:39:23:1a:b9:
00:30:5a:f5:21:92:fc:2c:d4:c4:17:9e:a9:77:5b:
f3:af:dd:37:89:3d:be:2b:c3:06:ff:c5:c5:ca:54:
73:68:d3:e3:57:1d:92:39:52:7c:89:eb:9e:2b:56:
46:9e:6f:46:ea:6a:b8:51:43:be:18:b3:83:81:12:
aa:82:6a:42:07:3f:b1:36:54:18:f1:3c:d5:2f:9b:
c9:34:08:21:cf:67:ae:4c:89:3c:d0:d7:b7:22:6a:
5e:80:2e:ed:4e:39:2d:46:6f:d8:8d:3f:81:ee:ac:
55:b0:c6:1e:04:eb:1e:9f:09:6f:4e:45:c5:7f:1b:
0e:7b:ba:d8:32:1b:5e:a6:e3:b7:0c:1e:77:cd:44:
30:0f:8e:ec:8b:d5:3c:70:43:ad:40:d8:85:5e:62:
2d:5d:ff:a3:b0:43:7d:40:6f:da:f6:0d:d0:4d:c2:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:31:09:B0:EC:09:A6:81:1D:BD:1E:7A:85:30:D2:FC:32:C3:3F
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:53:5f:b1:32:60:07:c9:cf:70:8f:a2:e3:ee:55:f1:4a:37:
f0:2b:39:f0:6f:dd:43:b6:ac:0e:e0:3e:52:ab:19:ff:f8:e5:
71:dc:70:2b:3b:b3:8a:3c:0f:eb:1f:e8:f9:08:b4:49:c3:08:
7d:13:e1:8d:40:1f:b0:31:02:ec:59:ef:9e:50:ab:1e:3e:19:
44:a3:33:40:93:1b:39:75:e2:af:61:d5:30:bf:d8:89:7e:56:
9e:27:d3:4b:57:b1:9b:39:3d:bc:bd:82:e4:93:5b:31:ea:fa:
6c:a5:01:7b:06:63:49:6b:3e:b8:11:db:23:7e:c4:dc:47:64:
6b:37:c7:15:83:0f:2a:ab:b9:16:a4:d0:7b:74:a9:c3:e4:ff:
10:f8:03:8c:1c:e0:f3:68:e2:43:0e:95:52:64:67:47:54:08:
ec:f9:b8:b0:58:56:5b:24:f9:07:35:e9:7c:28:72:ad:7f:ff:
80:de:67:90:5c:eb:38:30:14:15:93:fe:de:d9:ad:6a:f5:3f:
de:92:da:a5:91:a2:61:58:b0:03:04:b0:1b:32:83:7e:46:8f:
8a:32:04:d5:c2:7b:24:aa:d8:78:87:96:b0:d8:b5:94:0d:93:
89:dd:b2:15:d8:08:a7:d3:96:72:25:76:a8:65:33:88:33:ea:
a0:f8:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:28:59 2025 by rpki-client