Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: 4AEM3XD2/bgAp8P4lec5HIQnnqW9WZSvCFGObE/X3EE=
Subject key identifier: 0E:B2:73:C0:7A:95:2C:56:F6:4B:8D:F8:01:DE:02:6A:F2:C5:0B:CC
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0196729D8CA678F25E4262CB5C9E70516BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0A70
Signing time: Sat 26 Apr 2025 15:00:49 +0000
Manifest this update: Sat 26 Apr 2025 15:00:49 +0000
Manifest next update: Sun 27 Apr 2025 15:00:49 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: vV5KHlHxbi7+b7PsOiKd9zqdovW5OCsLMIPxPlPlVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:8c:a6:78:f2:5e:42:62:cb:5c:9e:70:51:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Apr 26 15:00:49 2025 GMT
Not After : Apr 27 15:00:49 2025 GMT
Subject: CN=0eb273c07a952c56f64b8df801de026af2c50bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:b8:cb:a6:bf:d4:8b:17:79:e4:6b:25:be:
cd:9d:1a:57:4b:ea:b9:91:da:f3:d3:f6:1c:d3:c8:
79:19:63:37:02:96:ba:11:f9:d8:15:56:53:bc:d7:
f7:2b:92:99:a0:4b:7b:25:dc:0a:d3:50:29:fc:6e:
ec:0a:4c:0a:3f:ce:3d:97:d0:ae:62:5d:d0:d3:10:
88:37:17:ce:f7:eb:48:20:ee:3e:ac:62:cb:f8:0e:
5b:15:18:30:ed:c7:ea:11:54:01:c5:28:20:a8:2e:
d3:c0:db:b4:bf:15:a8:9e:c2:76:2e:28:da:66:93:
61:18:11:aa:78:fa:41:fe:c2:ef:29:cc:dd:b6:23:
ef:4b:5d:6c:ef:9b:c2:16:72:72:4f:5f:d8:24:8e:
06:56:78:8b:18:56:b1:82:96:17:5c:fa:ba:78:51:
21:5f:25:a8:41:53:12:7c:26:e9:53:9c:1a:79:be:
3f:33:ba:2a:a3:d3:20:17:e4:0e:ae:67:88:27:2f:
58:77:a5:f7:fb:5b:bc:36:bb:a5:ae:af:21:61:a0:
19:8e:f9:58:92:2e:af:77:c1:f1:0f:1d:29:97:23:
85:74:64:84:67:a9:1f:cd:9f:da:ac:6c:5b:76:f2:
2a:05:f4:89:a0:9f:07:b8:71:3c:1a:f4:a2:b4:27:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:73:C0:7A:95:2C:56:F6:4B:8D:F8:01:DE:02:6A:F2:C5:0B:CC
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:76:be:11:45:90:df:4e:54:b5:d7:a8:c6:37:95:21:2d:
d1:2f:1a:af:63:21:1a:ad:eb:de:dd:16:77:d9:f3:ee:22:ce:
23:85:c3:a9:16:52:2c:f7:94:4f:28:be:d3:2d:cb:bf:22:69:
7e:6f:5c:89:1f:16:ab:1d:f3:1d:85:d3:8b:2b:da:b4:9b:51:
db:18:7f:25:bc:04:9f:bf:7e:e3:6b:6d:18:a9:00:cc:85:c6:
f1:01:6a:0a:4b:dc:53:cb:2f:bb:09:aa:a7:ed:35:7b:7f:21:
7a:b4:47:e8:f2:b3:60:fe:ef:61:8a:ff:e1:13:12:1a:f5:20:
95:10:1f:5f:d7:81:59:a6:19:d9:fb:6f:58:95:bb:23:26:48:
6d:24:fb:7e:93:83:91:17:96:4e:c2:0b:75:d8:ad:26:b1:37:
97:d2:57:5c:7a:68:e9:49:bd:6b:02:e1:37:83:9c:95:72:d7:
5a:f1:cf:72:11:52:fe:7d:c7:c2:d9:41:3d:26:7a:d1:e4:ca:
fa:d8:ae:dd:6c:da:8c:bf:35:ff:7f:f8:98:98:cc:41:e1:57:
60:3f:62:c5:71:41:31:f2:3c:94:ad:b7:61:d6:c0:e7:ac:d0:
a8:8d:6b:d3:0e:71:6d:4c:36:f9:bb:f0:53:41:d9:26:c1:46:
d7:0c:a8:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynYymePJeQmLLXJ5wUWvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz
OGM4YzUwHhcNMjUwNDI2MTUwMDQ5WhcNMjUwNDI3MTUwMDQ5WjAzMTEwLwYDVQQD
EygwZWIyNzNjMDdhOTUyYzU2ZjY0YjhkZjgwMWRlMDI2YWYyYzUwYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwha4y6a/1IsXeeRrJb7NnRpXS+q5
kdrz0/Yc08h5GWM3Apa6EfnYFVZTvNf3K5KZoEt7JdwK01Ap/G7sCkwKP849l9Cu
Yl3Q0xCINxfO9+tIIO4+rGLL+A5bFRgw7cfqEVQBxSggqC7TwNu0vxWonsJ2Lija
ZpNhGBGqePpB/sLvKczdtiPvS11s75vCFnJyT1/YJI4GVniLGFaxgpYXXPq6eFEh
XyWoQVMSfCbpU5waeb4/M7oqo9MgF+QOrmeIJy9Yd6X3+1u8Nrulrq8hYaAZjvlY
ki6vd8HxDx0plyOFdGSEZ6kfzZ/arGxbdvIqBfSJoJ8HuHE8GvSitCfIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6yc8B6lSxW9kuN+AHeAmryxQvMMB8GA1UdIwQY
MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt
NWU1YjhiMjgwNTlhLzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh
LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALg12vhFF
kN9OVLXXqMY3lSEt0S8ar2MhGq3r3t0Wd9nz7iLOI4XDqRZSLPeUTyi+0y3LvyJp
fm9ciR8Wqx3zHYXTiyvatJtR2xh/JbwEn79+42ttGKkAzIXG8QFqCkvcU8svuwmq
p+01e38herRH6PKzYP7vYYr/4RMSGvUglRAfX9eBWaYZ2ftvWJW7IyZIbST7fpOD
kReWTsILdditJrE3l9JXXHpo6Um9awLhN4OclXLXWvHPchFS/n3HwtlBPSZ60eTK
+tiu3WzajL81/3/4mJjMQeFXYD9ixXFBMfI8lK23YdbA56zQqI1r0w5xbUw2+bvw
U0HZJsFG1wyoiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:52 2025 by rpki-client