Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier: UZgpqYuqP4c4JzytJvWy/Zr0gwoI+xlHLTFNoJKCANk=
Subject key identifier: 17:9A:6B:5D:60:F0:FF:9A:87:51:43:74:8A:50:E1:44:47:93:19:7C
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 01968EF049909ECFB1ADD1D8AEEB8D2CF2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number: 125B
Signing time: Fri 02 May 2025 03:00:34 +0000
Manifest this update: Fri 02 May 2025 03:00:34 +0000
Manifest next update: Sat 03 May 2025 03:00:34 +0000
Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: XCayJoMMQZKLaHneChzKaWyAsjvocFAVZYMH5v5xzmk=)
2: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (hash: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:49:90:9e:cf:b1:ad:d1:d8:ae:eb:8d:2c:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: May 2 03:00:34 2025 GMT
Not After : May 3 03:00:34 2025 GMT
Subject: CN=179a6b5d60f0ff9a875143748a50e1444793197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:0d:60:aa:a8:70:4c:27:70:95:38:f8:02:
c0:44:9a:b3:05:11:9c:70:7f:80:44:fd:e0:b2:b3:
91:ab:34:ab:85:77:44:38:2d:f2:85:6d:1d:65:78:
33:be:68:a2:5a:74:55:0e:05:a0:eb:50:c4:a8:48:
e4:f9:b0:11:3e:6a:e5:e1:e9:85:06:df:9e:c2:39:
d1:0f:49:85:28:51:0f:4d:ce:33:d7:d5:ed:0c:4b:
93:2e:61:79:38:89:e5:1f:19:59:6b:fd:34:ec:c0:
71:eb:06:64:62:43:85:3d:33:5f:a0:3c:d6:12:4d:
37:10:f3:a1:43:a7:30:11:bc:00:b5:3f:9e:b0:e9:
9e:c1:4a:85:b2:8b:8c:2d:6b:b1:4e:5c:b7:d7:a8:
2d:5b:55:fc:60:c3:7e:e5:58:a5:37:39:7b:f7:d2:
cf:8d:09:3a:cf:0c:d8:fc:c6:3b:40:c2:48:4e:9a:
c5:2b:0a:8c:ab:b5:78:e1:98:09:44:b3:37:cd:2d:
fd:1b:7d:64:d0:b7:d0:fb:ce:27:c5:59:be:5c:07:
c9:77:ea:9a:97:f8:82:f4:3b:f8:0c:73:ff:d4:77:
2b:5d:04:9e:b8:f4:dc:68:45:d6:2f:19:a7:7d:ad:
5f:df:2a:f4:c7:9c:b5:ee:a3:3e:37:20:98:cc:c9:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:6B:5D:60:F0:FF:9A:87:51:43:74:8A:50:E1:44:47:93:19:7C
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fc:09:ed:63:32:f9:bc:49:11:e3:7f:5d:cf:8a:ef:a1:f8:
f0:70:33:05:04:87:9d:73:c7:93:ec:02:56:bc:93:6d:3d:25:
00:03:68:a3:73:35:b3:33:79:9c:c0:00:d4:cf:e8:f1:80:de:
4d:65:3b:47:ba:da:37:0f:6d:4e:0a:02:fe:55:1c:b4:07:c6:
af:2d:a3:83:a3:28:b6:45:d3:21:be:86:84:cd:02:de:1b:a2:
46:f5:40:f1:64:08:4e:33:f8:79:20:7d:a2:1d:8e:7c:75:26:
48:ca:dd:79:76:18:1b:98:46:e3:1d:7b:74:83:e6:bb:31:d6:
a7:b0:6e:83:80:d6:1f:44:03:73:3d:f5:df:f4:62:d0:06:d3:
80:43:c4:4f:3d:36:8d:30:32:94:51:51:c1:6a:2d:c6:6f:f9:
d6:56:78:c9:21:21:cc:bc:05:f2:ec:d1:7d:cd:cc:02:98:da:
7e:b5:1c:11:7e:21:e5:b9:94:bd:ea:7b:21:5d:63:b8:9b:cc:
30:af:84:f3:64:41:86:10:3a:dd:d3:b8:e3:ce:5a:4c:a7:4f:
80:df:f2:94:a8:bc:e7:6b:9a:37:4c:7b:1e:c2:db:b2:4d:f4:
5b:8d:af:59:7c:e1:0f:b2:8a:d0:c5:47:e6:0c:34:ee:28:8c:
f2:32:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:29:18 2025 by rpki-client