Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: E/lfq2FON1ZZSSMhMsYC1rfx5HbEvy7TW/MjaW30htk=
Subject key identifier: F4:FA:11:33:F9:0E:A2:C4:9F:4E:C9:A0:86:40:E8:A1:D0:E5:F6:F6
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019675D5680D8D04E0EE541EC32174F0B02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 06:00:42 +0000
Manifest this update: Sun 27 Apr 2025 06:00:42 +0000
Manifest next update: Mon 28 Apr 2025 06:00:42 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: GaQARsW8cEHNapArVVVbBVzRMOMFMRDg/Wa45tEy65c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:68:0d:8d:04:e0:ee:54:1e:c3:21:74:f0:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Apr 27 06:00:42 2025 GMT
Not After : Apr 28 06:00:42 2025 GMT
Subject: CN=f4fa1133f90ea2c49f4ec9a08640e8a1d0e5f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:74:80:4c:e3:b8:d9:a7:ef:83:04:5a:17:
df:9f:04:29:49:5f:de:1c:c3:5a:ef:e4:05:85:39:
1c:7d:31:c4:22:d8:09:8c:d8:cb:fa:74:22:27:6f:
b6:20:78:7c:82:2b:1e:33:95:72:34:c8:42:e5:dd:
e6:7d:5e:19:d8:96:50:23:73:35:4f:25:15:a7:aa:
da:aa:97:32:ed:c1:3c:ac:6d:d9:8d:26:49:c6:ac:
32:a0:11:6a:08:65:6c:7a:55:6b:a3:73:da:d9:5d:
2c:b3:9e:5d:28:f8:79:d0:46:63:27:dc:96:e3:ae:
ac:aa:f8:98:25:ca:2e:6b:e7:a4:ff:a2:44:e5:4c:
64:35:cc:12:5c:6f:f9:64:72:89:46:80:98:43:b8:
0c:79:5b:df:19:67:06:cb:07:75:19:36:b5:17:8b:
3f:b1:50:42:8f:72:30:23:60:f4:61:9f:88:d7:4c:
56:1b:5b:9a:d5:f0:a4:6a:44:38:71:c8:a5:08:98:
62:d6:d3:27:5b:e8:47:32:ae:5b:53:53:f6:c2:88:
3d:77:1f:0f:9c:f2:4a:2a:5a:56:e6:d5:39:83:e9:
68:1e:7d:fa:74:cb:ea:a0:dc:b7:dc:ef:cb:cc:07:
a3:f7:55:97:f5:71:c5:d6:21:05:e8:7b:53:8d:34:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:11:33:F9:0E:A2:C4:9F:4E:C9:A0:86:40:E8:A1:D0:E5:F6:F6
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:c6:4f:32:da:de:b5:37:51:ff:17:f0:0a:95:41:38:cc:
32:45:0f:0d:f4:66:df:da:20:de:cd:85:37:2b:27:82:0d:46:
78:66:95:d0:af:e3:23:fb:fe:8a:db:30:98:f5:79:5b:f8:de:
97:4a:0c:a8:59:b4:a6:71:bb:01:d5:17:0b:f5:76:a4:40:e7:
c1:c6:3c:bc:8c:60:ef:3f:59:84:03:20:5b:38:65:46:1e:fd:
49:e3:69:66:10:03:bd:4d:00:90:a5:54:d9:c8:51:d4:44:34:
b9:1c:ef:43:31:b8:a9:5f:2f:ba:11:38:14:8a:5f:e3:4f:e4:
62:c9:64:00:2b:6d:61:7b:6e:2a:56:34:cc:ed:68:b9:13:dc:
cc:8c:96:f3:e4:eb:57:dd:5e:dd:b9:db:d5:5a:6b:2c:8b:df:
43:f8:45:a2:b5:fd:f4:ad:9c:a8:b1:82:a8:d6:bc:fc:b5:f7:
02:1b:a6:b0:ed:e2:40:8a:e3:6e:2a:14:bd:50:48:8f:cb:53:
e9:47:70:37:02:79:95:89:08:54:6a:a1:3f:cc:22:85:f4:a6:
36:0e:bb:ea:37:7d:b0:21:1a:53:42:49:b3:ab:d4:bc:74:98:
96:aa:a9:18:0a:8b:50:9c:b6:d6:e5:23:15:72:72:f6:ce:96:
f3:48:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:00 2025 by rpki-client