Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: MHINWiyitf4eQGAFSzwcS1zLHNnE6Ca0RMsfAxsNMZ8=
Subject key identifier: 7C:15:23:B3:45:ED:65:B3:F3:00:29:69:29:64:1C:69:63:72:E7:84
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0196A01AD497943C8BB336A298DBBF99EADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 036C
Signing time: Mon 05 May 2025 11:00:34 +0000
Manifest this update: Mon 05 May 2025 11:00:34 +0000
Manifest next update: Tue 06 May 2025 11:00:34 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: FVpe60qoPvqS3jwaqOvWLmSf4DFQ/tUPiuvANTJURx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:d4:97:94:3c:8b:b3:36:a2:98:db:bf:99:ea:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: May 5 11:00:34 2025 GMT
Not After : May 6 11:00:34 2025 GMT
Subject: CN=7c1523b345ed65b3f300296929641c696372e784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3b:3d:cf:43:64:60:4c:a2:d8:71:85:b0:b1:
ec:72:03:66:e8:b1:0d:b4:62:93:46:5c:5c:af:e9:
3a:f2:38:d1:b4:9c:81:ec:7c:70:49:b7:74:46:70:
9a:ad:3c:54:c8:85:37:cb:20:a7:34:54:e6:e9:6d:
a6:8d:59:75:3d:24:5a:25:5b:8b:48:cf:24:2a:ad:
99:73:a3:5b:e7:22:5a:49:7d:ea:6c:7c:33:4a:13:
7b:be:2d:2e:23:b6:77:5b:86:51:f8:20:0c:89:43:
08:1f:45:8f:63:eb:72:8c:ac:8c:17:52:c8:7c:e5:
16:fd:c7:6b:42:57:a1:8f:b8:b1:22:36:27:38:41:
c8:8c:ed:16:ea:9e:f8:10:6d:8c:bf:7d:f8:fe:30:
16:2c:b0:f8:60:7f:c3:5d:ad:db:41:df:b4:6c:6d:
6a:87:0f:78:7e:3c:9e:34:ba:3d:b7:e4:d2:79:51:
79:6b:63:b8:78:85:a5:fc:5c:4d:52:a1:cd:b7:b6:
23:e9:74:df:5f:02:5c:fa:a6:e9:ee:28:65:6a:4c:
05:38:a3:45:77:e2:df:ba:af:4b:ee:5b:25:50:7c:
30:66:e5:6c:4e:d4:55:5f:d0:4e:46:a4:8b:1c:d3:
46:14:12:b5:fc:96:ce:1f:77:49:98:36:79:aa:55:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:23:B3:45:ED:65:B3:F3:00:29:69:29:64:1C:69:63:72:E7:84
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:5f:e8:83:45:1f:25:5e:03:15:82:40:fd:48:9c:7d:31:
50:66:5e:89:89:14:ea:26:d3:59:56:4b:20:d8:42:55:9f:f2:
e3:3a:a5:5d:af:83:79:fd:33:8f:ca:17:7d:e6:31:78:14:83:
7a:51:32:1b:31:58:f1:77:f2:90:3c:bb:d2:8e:9e:db:7e:17:
8c:bb:b3:1f:8e:2e:e2:b0:d1:59:e0:d9:ec:b3:40:c0:5b:1c:
38:82:e2:50:7d:c9:fc:44:b1:5c:ac:28:b3:9e:ec:a5:14:cf:
c0:3e:f9:90:2c:40:f7:b8:0c:fb:41:0f:7d:0d:80:fa:29:32:
20:11:6c:9d:b4:e3:ed:8a:84:ac:06:b5:b5:00:e4:ad:a1:ae:
97:ff:71:d1:9b:4d:87:56:eb:30:dc:eb:be:fb:29:6d:02:94:
78:0b:37:dc:7c:0e:18:eb:5c:cc:d2:b3:fd:85:99:19:f6:9b:
83:5f:6c:7d:7e:00:2a:61:df:b7:b8:58:ed:7b:53:29:d5:59:
d2:d3:89:f8:3a:36:f3:76:8d:f9:88:ba:c0:b4:5c:ed:af:9b:
87:d4:cd:48:0a:cf:42:b5:21:a8:be:aa:7e:cf:13:b4:d7:9e:
b9:61:50:e0:9e:a3:ec:08:4e:e0:30:69:4c:a7:81:24:01:46:
c9:ed:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:35:02 2025 by rpki-client