Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: xAFfZsIaeCrBVcOb30cUjXcW9+sZKGIty/vKin7bDoc=
Subject key identifier: 60:47:F7:6F:49:61:0E:7D:A9:B0:88:AF:4B:AA:C2:C4:A7:01:C8:99
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 0196824776B1CA391F58C897399700FB7D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 16:00:43 +0000
Manifest this update: Tue 29 Apr 2025 16:00:43 +0000
Manifest next update: Wed 30 Apr 2025 16:00:43 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: lD77A9HrqoX4vgc6OXKsXdPOqvXm4XKIB+32gc213As=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:76:b1:ca:39:1f:58:c8:97:39:97:00:fb:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Apr 29 16:00:43 2025 GMT
Not After : Apr 30 16:00:43 2025 GMT
Subject: CN=6047f76f49610e7da9b088af4baac2c4a701c899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:1f:cf:4e:0a:b7:41:54:13:f4:a9:8d:a3:
f7:89:b1:54:a8:21:0b:dc:84:4d:ec:37:82:94:ee:
3a:ae:31:f3:3a:14:2c:69:87:f8:38:39:3e:df:36:
3a:25:bf:de:07:99:1a:e0:06:1c:3f:89:60:84:e0:
d2:44:72:2a:c7:52:64:d4:c6:60:8e:ce:bc:c8:5c:
42:4c:2a:c9:b3:f2:63:23:bd:04:14:77:e1:62:c2:
9c:7f:3f:27:c4:f7:b4:26:82:d5:08:d4:dc:8d:1a:
e1:09:ed:5c:36:bb:d1:48:0c:8c:13:88:20:0a:9f:
38:fe:d9:3f:8e:07:22:23:b9:5d:c1:6e:91:65:d9:
e2:c6:ac:58:ed:db:9e:88:43:ac:bf:b3:98:38:fa:
75:a6:6e:fc:5c:55:27:bb:6c:b3:49:66:82:11:ba:
bf:ee:34:e5:f3:ec:1e:67:75:23:27:0c:19:59:85:
cb:9a:38:35:a0:8e:94:df:df:99:af:c8:11:75:2a:
1f:8a:55:56:91:60:87:32:1c:0e:e8:bf:54:d6:24:
6a:62:32:29:95:3f:13:1b:21:71:56:52:71:e1:04:
bb:10:da:2b:7b:ae:6a:bc:e8:68:fd:d1:39:71:db:
64:68:93:7e:95:10:2b:7f:33:31:d5:a3:28:cf:bd:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:F7:6F:49:61:0E:7D:A9:B0:88:AF:4B:AA:C2:C4:A7:01:C8:99
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:c5:49:02:fe:60:0e:22:03:55:3d:2c:c6:7d:05:bd:be:
5d:ce:87:32:09:df:8b:d1:a9:71:49:6f:ee:b7:4f:94:3c:22:
31:8f:62:ad:4a:d9:59:c8:09:e5:9d:b4:e3:6c:25:19:dc:8f:
23:95:0c:c7:34:2d:34:60:31:4a:87:b6:b7:9e:bd:10:38:8d:
cf:08:b9:63:16:5b:4f:12:98:aa:09:b1:e8:04:33:26:4c:21:
8d:50:83:1f:50:f6:3d:1a:c9:bb:e5:71:bc:23:eb:99:59:a7:
54:30:67:c4:5c:c7:e8:4e:2c:6b:32:41:47:95:9f:7a:42:55:
b4:0d:9f:41:e8:89:d9:f9:b8:7f:b3:3c:c5:39:d0:a7:5b:f4:
d7:26:f0:d8:e5:39:0f:86:76:d9:98:8c:6a:d2:c7:02:84:d6:
a1:f1:62:73:9c:85:34:cb:0c:ab:2c:4c:d7:c5:1d:fe:d2:bd:
bd:18:7c:9d:6a:c9:8d:25:7c:73:51:b4:cc:8c:f1:89:2f:dc:
51:89:42:e8:37:0e:27:3e:8d:c5:a4:da:6d:7e:e0:2c:c9:e0:
52:83:a6:31:9d:cd:f4:69:22:92:6a:bd:43:fd:9d:4c:ee:33:
6e:18:55:1f:87:84:65:f7:46:84:17:65:0e:28:b7:03:c9:2a:
e6:34:28:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR3axyjkfWMiXOZcA+31kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjUwNDI5MTYwMDQzWhcNMjUwNDMwMTYwMDQzWjAzMTEwLwYDVQQD
Eyg2MDQ3Zjc2ZjQ5NjEwZTdkYTliMDg4YWY0YmFhYzJjNGE3MDFjODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoocfz04Kt0FUE/SpjaP3ibFUqCEL
3IRN7DeClO46rjHzOhQsaYf4ODk+3zY6Jb/eB5ka4AYcP4lghODSRHIqx1Jk1MZg
js68yFxCTCrJs/JjI70EFHfhYsKcfz8nxPe0JoLVCNTcjRrhCe1cNrvRSAyME4gg
Cp84/tk/jgciI7ldwW6RZdnixqxY7dueiEOsv7OYOPp1pm78XFUnu2yzSWaCEbq/
7jTl8+weZ3UjJwwZWYXLmjg1oI6U39+Zr8gRdSofilVWkWCHMhwO6L9U1iRqYjIp
lT8TGyFxVlJx4QS7ENore65qvOho/dE5cdtkaJN+lRArfzMx1aMoz707LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBH929JYQ59qbCIr0uqwsSnAciZMB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyPFSQL+
YA4iA1U9LMZ9Bb2+Xc6HMgnfi9GpcUlv7rdPlDwiMY9irUrZWcgJ5Z2042wlGdyP
I5UMxzQtNGAxSoe2t569EDiNzwi5YxZbTxKYqgmx6AQzJkwhjVCDH1D2PRrJu+Vx
vCPrmVmnVDBnxFzH6E4sazJBR5WfekJVtA2fQeiJ2fm4f7M8xTnQp1v01ybw2OU5
D4Z22ZiMatLHAoTWofFic5yFNMsMqyxM18Ud/tK9vRh8nWrJjSV8c1G0zIzxiS/c
UYlC6DcOJz6NxaTabX7gLMngUoOmMZ3N9Gkikmq9Q/2dTO4zbhhVH4eEZfdGhBdl
Dii3A8kq5jQoUg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:33:07 2025 by rpki-client