Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: Jc7IS+ZiR1+cQFDh1iNIYgZCcU3/YmgBEFOHLx2XpRs=
Subject key identifier: A7:4C:3D:21:57:DA:EF:67:3B:66:CD:3D:EF:50:EB:24:2D:BC:F3:1E
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01968D38C64FF470ECF4DE572872ED2DF1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1522
Signing time: Thu 01 May 2025 19:00:30 +0000
Manifest this update: Thu 01 May 2025 19:00:30 +0000
Manifest next update: Fri 02 May 2025 19:00:30 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: S7wLudaV61uMkQVpyBTJq23XbKeScbVuLX73M3Wpc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:38:c6:4f:f4:70:ec:f4:de:57:28:72:ed:2d:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: May 1 19:00:30 2025 GMT
Not After : May 2 19:00:30 2025 GMT
Subject: CN=a74c3d2157daef673b66cd3def50eb242dbcf31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:37:4a:cf:38:5f:b2:1d:a3:cc:98:86:3d:
24:ad:dd:37:6f:76:cb:15:11:e2:9b:06:1a:e8:0d:
cc:b4:8e:22:f7:f8:5f:c3:f7:3c:16:fb:f0:d6:86:
f4:1a:01:47:e0:8e:0b:72:1a:fd:40:56:3e:fc:99:
a4:2d:03:bd:7b:49:02:2e:a6:9b:90:05:01:ec:b8:
e7:b5:a9:13:07:6b:96:64:b4:89:6a:9b:4f:fa:d2:
d1:89:6b:85:0e:0f:92:d2:88:52:0c:29:3e:fa:98:
a5:bd:2f:17:07:34:45:d9:8c:02:6e:42:27:ad:10:
9f:be:da:5b:79:73:2d:1e:aa:48:76:02:08:a3:3c:
60:36:a9:e6:32:80:7c:b2:f8:c7:2d:d3:aa:5d:eb:
54:76:4d:f6:c2:e4:73:fc:ec:30:98:28:a7:d8:24:
69:02:39:39:3d:5d:55:3a:35:81:95:16:c1:a0:48:
d3:f8:b2:1f:99:07:dc:ed:98:61:03:0a:ab:1c:bf:
d6:49:93:4e:e1:ca:84:ad:8e:c0:69:bf:72:19:4d:
f6:68:47:36:d7:1d:2b:5a:0a:27:78:13:85:b8:56:
47:0d:12:53:2d:d6:d3:60:66:97:64:13:be:50:90:
3c:f8:12:d7:dd:e5:a9:44:70:e7:6f:d7:51:a9:4a:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:3D:21:57:DA:EF:67:3B:66:CD:3D:EF:50:EB:24:2D:BC:F3:1E
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a5:e8:64:63:aa:98:c1:37:0d:72:d1:b5:d5:8a:24:46:90:
18:0d:db:87:e0:c6:61:36:c5:e9:96:9b:a7:c5:3f:54:7a:1a:
ec:c9:f7:0a:43:4d:2d:b3:bd:d3:29:a9:4e:04:ff:9c:28:51:
ba:9f:df:d7:20:af:5c:c0:21:a5:97:88:84:cd:bf:ae:30:a1:
1a:77:b3:f7:96:ad:c9:2b:d4:b9:79:f1:48:90:75:6d:db:1f:
af:f2:17:d5:6d:c4:b1:28:b8:ac:37:14:bf:84:90:32:97:b0:
21:a2:b7:4b:17:75:df:7e:1e:8d:7e:7d:33:41:45:45:f8:25:
c2:3f:ea:5f:97:8d:05:c6:6a:3d:ae:75:af:c7:00:f7:d7:1c:
a9:d0:79:34:6d:bc:b9:a6:cd:04:ee:ef:2d:40:34:f9:d1:06:
c2:87:15:f6:c2:53:05:f7:bc:a4:43:4d:c9:11:e2:05:1d:b9:
35:df:54:00:55:f9:9a:f1:6c:61:dc:6d:c9:14:b2:63:22:bd:
78:58:d9:27:fd:b7:f2:18:b8:c7:76:9a:89:2c:ac:f4:36:81:
b5:11:27:f8:70:b0:2f:8b:1f:0d:aa:39:ad:e5:06:0b:62:e6:
ab:f4:57:43:13:b4:73:e5:95:c3:78:45:9e:9b:99:c6:38:4a:
80:7c:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:10:36 2025 by rpki-client