Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: W8wmNQXx92GTwIYWhA+MrNPgT3IsOwAkFxTwmirsAsE=
Subject key identifier: BC:8E:33:A4:C3:1E:87:82:ED:9E:4D:1B:39:BD:32:1B:81:6E:58:E6
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01968623C6DD2A8ECB3BE50FB41014C35FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 10:00:13 +0000
Manifest this update: Wed 30 Apr 2025 10:00:13 +0000
Manifest next update: Thu 01 May 2025 10:00:13 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: k5UwT8j21JiKwwtlgVTX+kXs+yJ2fqIauwipWk8A24c=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:c6:dd:2a:8e:cb:3b:e5:0f:b4:10:14:c3:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Apr 30 10:00:13 2025 GMT
Not After : May 1 10:00:13 2025 GMT
Subject: CN=bc8e33a4c31e8782ed9e4d1b39bd321b816e58e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:e9:13:f6:33:24:dc:1b:1a:9a:27:fc:d7:
13:b7:82:b3:2d:57:8c:2c:2e:cf:b7:28:16:1a:3f:
7e:5f:bb:7c:72:1f:cf:a1:55:90:19:e0:84:b1:76:
b3:37:24:ca:94:81:c3:d3:5b:ab:b7:7d:fd:24:8a:
77:d2:8a:34:6f:dd:52:10:64:88:fc:ba:e6:04:f2:
9d:6c:13:bb:4e:62:17:86:84:60:75:f6:68:71:c8:
5a:23:b9:66:06:6e:08:b4:3f:65:56:13:2a:78:07:
10:4a:7a:57:b7:bd:1f:01:f8:81:ac:ad:dc:46:f7:
ff:18:78:7d:03:96:13:99:0b:cd:a2:9f:02:3a:1c:
e7:11:5c:a8:db:23:34:69:83:97:19:7f:fe:70:d0:
da:4b:eb:e8:82:24:2a:cc:67:a2:35:44:47:50:7e:
fd:9e:6a:f2:12:9f:ca:f1:c4:80:66:01:6a:0b:4a:
0f:53:8d:d2:2e:00:34:2e:68:52:88:e5:ac:dc:f1:
fb:90:24:a8:98:0e:24:60:02:4a:08:ad:ef:ce:d8:
5b:eb:c6:74:60:5c:34:8c:7b:92:05:31:94:14:df:
ff:72:53:34:8b:2b:e6:89:f9:4a:05:91:9d:dc:d3:
55:3e:ef:3d:3d:b6:dc:57:da:4f:f4:f6:91:aa:11:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:33:A4:C3:1E:87:82:ED:9E:4D:1B:39:BD:32:1B:81:6E:58:E6
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:33:6d:cb:e8:9c:b1:1a:f2:6a:d7:01:86:52:fe:d1:d4:10:
0d:79:70:5a:aa:54:1b:e9:16:f9:66:be:5e:b3:44:47:b8:df:
de:67:41:a5:04:b4:5e:e3:b2:91:17:fe:72:04:f5:69:3a:59:
a5:33:ca:af:3e:7b:22:0b:29:bb:75:04:d3:ca:14:ee:e5:dd:
dc:54:ff:4e:e7:c7:59:d0:92:bf:fe:a9:cf:81:54:dc:32:32:
f3:42:10:b0:08:1e:ff:35:02:b1:4e:ea:ed:2f:d0:59:ad:6c:
f9:6d:3b:90:3a:cf:3e:33:74:43:8a:42:f2:d8:83:ae:3f:93:
9a:f6:c3:bd:a3:3c:cd:a8:d6:dc:ac:d0:0e:bb:95:8d:30:be:
36:de:7b:1a:f6:a3:0d:48:cc:48:ee:00:90:4a:d9:86:97:bb:
95:54:ea:6c:20:7d:83:50:e7:eb:df:8f:c6:66:2d:f3:4c:dc:
75:52:c6:c9:21:f4:6e:4a:8b:5f:df:40:5e:a5:cb:20:95:2c:
ce:86:a6:af:a1:bf:cc:a7:27:8a:04:88:76:17:e7:ea:cd:dd:
49:39:7b:fe:67:d4:a4:ab:ca:99:7b:64:fd:05:d9:34:52:3b:
9f:85:a7:76:2e:82:69:11:7b:46:70:ab:08:61:c9:09:d9:b0:
40:db:09:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGI8bdKo7LO+UPtBAUw1/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjUwNDMwMTAwMDEzWhcNMjUwNTAxMTAwMDEzWjAzMTEwLwYDVQQD
EyhiYzhlMzNhNGMzMWU4NzgyZWQ5ZTRkMWIzOWJkMzIxYjgxNmU1OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GzpE/YzJNwbGpon/NcTt4KzLVeM
LC7PtygWGj9+X7t8ch/PoVWQGeCEsXazNyTKlIHD01urt339JIp30oo0b91SEGSI
/LrmBPKdbBO7TmIXhoRgdfZocchaI7lmBm4ItD9lVhMqeAcQSnpXt70fAfiBrK3c
Rvf/GHh9A5YTmQvNop8COhznEVyo2yM0aYOXGX/+cNDaS+vogiQqzGeiNURHUH79
nmryEp/K8cSAZgFqC0oPU43SLgA0LmhSiOWs3PH7kCSomA4kYAJKCK3vzthb68Z0
YFw0jHuSBTGUFN//clM0iyvmiflKBZGd3NNVPu89PbbcV9pP9PaRqhEhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyOM6TDHoeC7Z5NGzm9MhuBbljmMB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1DNty+ic
sRryatcBhlL+0dQQDXlwWqpUG+kW+Wa+XrNER7jf3mdBpQS0XuOykRf+cgT1aTpZ
pTPKrz57Igspu3UE08oU7uXd3FT/TufHWdCSv/6pz4FU3DIy80IQsAge/zUCsU7q
7S/QWa1s+W07kDrPPjN0Q4pC8tiDrj+TmvbDvaM8zajW3KzQDruVjTC+Nt57Gvaj
DUjMSO4AkErZhpe7lVTqbCB9g1Dn69+PxmYt80zcdVLGySH0bkqLX99AXqXLIJUs
zoamr6G/zKcnigSIdhfn6s3dSTl7/mfUpKvKmXtk/QXZNFI7n4Wndi6CaRF7RnCr
CGHJCdmwQNsJnw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:29 2025 by rpki-client