Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: DB527v1IXqlQufpdyLz9q78NOjm7corHIpLoADeFnEE=
Subject key identifier: 90:5E:CE:C0:4D:B2:0A:91:68:C0:49:E0:4E:96:52:C3:29:03:9F:57
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 0196876D57EB558E0DBD98501F8D954F102F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0B80
Signing time: Wed 30 Apr 2025 16:00:12 +0000
Manifest this update: Wed 30 Apr 2025 16:00:12 +0000
Manifest next update: Thu 01 May 2025 16:00:12 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: 4kfuueTKsD7U54zThe+lG7tIpmyYtHJz3Dh0CM5xOp8=)
2: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (hash: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:57:eb:55:8e:0d:bd:98:50:1f:8d:95:4f:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Apr 30 16:00:12 2025 GMT
Not After : May 1 16:00:12 2025 GMT
Subject: CN=905ecec04db20a9168c049e04e9652c329039f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:f7:ff:cc:c5:b4:ab:66:24:d6:32:9b:da:
8a:82:7c:5c:99:23:69:da:db:0f:61:33:7a:b7:4d:
f5:a9:db:91:5f:f3:b7:40:db:09:35:ae:f4:4e:32:
79:a3:c4:5b:29:61:64:73:c9:32:70:a7:36:79:d0:
d3:8f:43:29:61:17:19:bd:f6:68:9a:21:ae:c9:5e:
74:fc:cc:45:10:27:5d:3a:9b:1f:c5:a3:94:c1:9b:
a1:b1:06:4c:6a:13:7a:fd:6b:df:a3:cd:a2:60:96:
9f:02:3a:03:d8:f8:95:a5:c0:5a:dd:02:2c:57:ae:
b0:a5:7e:5a:9e:51:8b:7c:f4:54:8d:47:c3:90:ab:
2e:af:c3:0c:bf:48:11:b8:e9:32:ee:9f:93:50:8c:
b8:80:90:5b:13:fc:66:9e:fc:4b:67:e3:f3:da:1a:
cc:79:b5:46:df:96:d1:d5:88:ae:91:13:62:af:a2:
d9:78:19:1d:a6:38:56:57:ec:27:7d:68:81:d1:45:
7e:9e:44:33:2a:a8:3c:4e:e9:68:27:92:29:f5:c7:
ea:ef:be:10:d8:2c:aa:b9:c1:e9:67:06:d7:89:21:
3c:57:38:2c:c1:cf:49:1b:8a:af:80:40:9e:b4:48:
06:be:59:e3:6a:e8:a5:6c:08:88:a5:fb:ec:8d:73:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:CE:C0:4D:B2:0A:91:68:C0:49:E0:4E:96:52:C3:29:03:9F:57
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:a2:b6:63:38:05:22:a5:ea:ed:d8:96:73:18:d5:be:cb:
87:33:cf:38:53:cc:34:6a:9a:ed:34:55:36:a0:72:ba:27:12:
ac:74:a6:1b:c7:70:8c:3d:da:dd:e9:44:8f:b0:dc:f4:a6:65:
23:1f:82:04:7e:33:ca:71:da:a6:10:7b:76:67:10:c9:31:a5:
44:13:02:82:5e:00:b6:d2:26:46:d6:ab:fb:43:a3:4f:39:68:
2b:59:f6:4e:41:e9:ea:23:b3:f0:cd:91:14:85:cb:f2:c1:62:
d7:c9:3b:6b:a0:39:5b:bf:8c:a4:1f:5b:d1:bf:d8:97:07:ab:
0e:b1:72:74:5c:59:fa:ba:80:93:c9:31:c6:c0:c7:c0:6e:70:
62:cb:de:df:26:ff:cf:8b:55:72:29:e2:d4:15:ec:53:1c:89:
0d:92:4b:0c:d6:f6:c3:1e:7f:54:c3:90:4a:0b:08:e0:dd:0f:
8b:4e:55:76:aa:5b:11:d0:f4:95:1f:6b:df:95:4a:ad:de:71:
e3:70:06:b7:00:05:7e:87:ba:4d:e5:fc:00:fe:f6:4b:00:de:
be:10:fe:b0:47:8f:b2:68:f6:df:ff:1f:d7:a9:70:9a:f4:4c:
23:23:ea:d1:be:ae:be:40:dc:e1:88:75:03:f3:da:a3:1c:1e:
67:8d:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:09 2025 by rpki-client