Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: XOMsp6e39/OiFbpSR0nfdtMGOnts4F402GV/0XHn/SY=
Subject key identifier: 25:2F:D3:80:62:42:AA:AD:97:EB:56:A1:06:9D:21:87:E4:2D:85:28
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019671C1C5EFC54402EA54F4A33F6B8BDDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 1355
Signing time: Sat 26 Apr 2025 11:00:46 +0000
Manifest this update: Sat 26 Apr 2025 11:00:46 +0000
Manifest next update: Sun 27 Apr 2025 11:00:46 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: N5nWDFQjgNv7Ei6bxbs5vZIIRMAMumMriYFmWz9SEn0=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:c5:ef:c5:44:02:ea:54:f4:a3:3f:6b:8b:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Apr 26 11:00:46 2025 GMT
Not After : Apr 27 11:00:46 2025 GMT
Subject: CN=252fd3806242aaad97eb56a1069d2187e42d8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:33:2e:fb:56:52:87:10:de:27:e0:91:b7:
e0:83:45:45:b6:b6:b2:18:83:dc:44:c8:a4:9e:16:
f8:b0:64:c1:67:c8:67:a9:54:87:c0:f9:ad:50:a5:
e2:72:6b:98:3a:c7:d9:6c:42:a7:43:95:fa:e4:cb:
bf:0f:db:c2:cc:03:bd:83:f1:ec:fe:5d:9f:20:25:
2c:0e:ee:67:66:f4:e5:ab:c2:1b:42:33:0d:6f:d3:
0c:2c:8f:27:f1:28:b5:0f:91:0f:e0:57:13:a5:e5:
25:07:e8:a7:57:53:06:53:1c:87:29:51:90:6f:60:
c3:bc:13:2e:2e:1f:9d:d6:92:36:5c:b8:b8:73:ee:
b9:90:52:42:fe:fd:95:e8:30:3b:cb:29:f7:4c:47:
7e:77:60:f0:42:5f:7a:a4:43:55:18:73:2c:bf:e3:
7a:fa:00:8c:cd:b9:ed:57:26:98:4f:52:40:6f:f7:
06:f7:9e:dc:00:3a:96:5c:57:4a:4a:82:3d:33:d8:
d5:b8:32:bb:e6:5d:31:3d:44:7e:c9:b0:da:b8:1d:
f8:9d:9a:ef:d9:ac:83:d9:3c:a8:e6:0e:15:44:2a:
2e:94:8d:41:46:35:da:86:63:11:36:61:9b:f9:77:
65:da:0c:ab:51:0f:de:c2:e4:3a:8c:89:64:fc:1d:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:D3:80:62:42:AA:AD:97:EB:56:A1:06:9D:21:87:E4:2D:85:28
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:2b:d1:c0:4c:44:da:25:4d:9c:77:bf:07:7b:24:a7:ce:
aa:04:e9:b3:a1:15:90:39:95:56:56:93:23:55:dc:fe:76:21:
c3:fe:31:2f:39:31:68:e0:3d:aa:db:ac:82:c3:be:02:18:d6:
f8:73:c4:2b:8d:e0:99:7c:02:24:0b:ad:10:e0:b4:56:bf:87:
e0:05:9b:34:65:df:c5:ff:47:37:25:34:4a:c0:7f:c8:6a:1f:
97:28:a5:13:57:99:ed:c8:ff:30:28:5c:88:10:33:a8:e8:52:
2a:f7:05:32:21:90:16:60:ec:f3:a9:a9:98:73:53:bb:2e:b5:
52:d8:77:86:1d:99:ff:b3:a6:ca:a8:ed:2a:07:70:a2:ad:cc:
23:95:8d:b7:7b:7a:c1:f1:aa:84:f8:7c:e4:a6:61:22:a1:34:
71:06:dc:73:dc:fa:f5:6d:ed:af:ae:53:38:71:db:7e:b5:da:
0a:fe:cd:e7:08:88:ab:aa:73:80:bc:92:79:12:9c:de:02:14:
e4:d2:11:e9:8e:c8:a2:97:d6:3d:12:55:49:4f:94:2e:e4:54:
73:1f:d4:d0:b8:6d:cf:cd:62:0e:a1:56:1a:a6:d5:b5:39:24:
00:c4:78:27:15:a1:87:e3:85:a0:31:ce:22:53:ee:ae:90:5a:
d4:ac:d6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwcXvxUQC6lT0oz9ri93WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2
Zjg1NzMwHhcNMjUwNDI2MTEwMDQ2WhcNMjUwNDI3MTEwMDQ2WjAzMTEwLwYDVQQD
EygyNTJmZDM4MDYyNDJhYWFkOTdlYjU2YTEwNjlkMjE4N2U0MmQ4NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGYzLvtWUocQ3ifgkbfgg0VFtray
GIPcRMiknhb4sGTBZ8hnqVSHwPmtUKXicmuYOsfZbEKnQ5X65Mu/D9vCzAO9g/Hs
/l2fICUsDu5nZvTlq8IbQjMNb9MMLI8n8Si1D5EP4FcTpeUlB+inV1MGUxyHKVGQ
b2DDvBMuLh+d1pI2XLi4c+65kFJC/v2V6DA7yyn3TEd+d2DwQl96pENVGHMsv+N6
+gCMzbntVyaYT1JAb/cG957cADqWXFdKSoI9M9jVuDK75l0xPUR+ybDauB34nZrv
2ayD2Tyo5g4VRCoulI1BRjXahmMRNmGb+Xdl2gyrUQ/ewuQ6jIlk/B0U4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUv04BiQqqtl+tWoQadIYfkLYUoMB8GA1UdIwQY
MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt
YmYzNGQwMWY4YjBhLzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh
LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMkr0cBM
RNolTZx3vwd7JKfOqgTps6EVkDmVVlaTI1Xc/nYhw/4xLzkxaOA9qtusgsO+AhjW
+HPEK43gmXwCJAutEOC0Vr+H4AWbNGXfxf9HNyU0SsB/yGoflyilE1eZ7cj/MChc
iBAzqOhSKvcFMiGQFmDs86mpmHNTuy61Uth3hh2Z/7OmyqjtKgdwoq3MI5WNt3t6
wfGqhPh85KZhIqE0cQbcc9z69W3tr65TOHHbfrXaCv7N5wiIq6pzgLySeRKc3gIU
5NIR6Y7IopfWPRJVSU+ULuRUcx/U0Lhtz81iDqFWGqbVtTkkAMR4JxWhh+OFoDHO
IlPurpBa1KzW/g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:16 2025 by rpki-client