Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 6GlX27P2Ge/BpAEM7HCNdN7NAorLPKG1NQpViJwFyRM=
Subject key identifier: 36:E5:DC:D9:36:89:25:C4:9F:2A:CF:4A:FA:4F:F3:9B:18:C3:53:A5
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01967868D317D0F39781785058535CD39987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:00:57 +0000
Manifest this update: Sun 27 Apr 2025 18:00:57 +0000
Manifest next update: Mon 28 Apr 2025 18:00:57 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: /uHlMtAi2jn9pYiePuJ7wTnAmgqi6KemUaDue3e+T00=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:d3:17:d0:f3:97:81:78:50:58:53:5c:d3:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Apr 27 18:00:57 2025 GMT
Not After : Apr 28 18:00:57 2025 GMT
Subject: CN=36e5dcd9368925c49f2acf4afa4ff39b18c353a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:c9:7b:fe:d4:87:ab:76:cb:61:86:16:59:
15:32:9b:37:4b:21:0b:78:9d:0d:99:47:13:dd:d9:
89:72:bf:d9:74:38:80:31:f4:57:99:68:32:28:33:
52:4f:2b:31:22:f3:72:44:d7:aa:63:9d:56:65:d8:
8e:39:77:70:09:c8:22:72:27:99:50:b8:69:98:88:
f8:fe:60:1b:a8:5d:cb:c2:9d:0e:a7:56:5f:d7:41:
3a:4b:d8:43:aa:fe:c1:eb:33:33:83:51:28:36:a5:
bb:e2:c1:24:cb:89:0e:70:18:d1:5e:bf:d5:d6:94:
60:b4:b7:33:01:b2:e6:8f:d5:68:25:bd:3b:e1:53:
eb:a8:85:de:9c:61:3c:77:e8:a9:1a:51:57:2b:f0:
33:53:d2:10:7d:2c:cf:a7:7e:49:54:b4:61:f1:38:
90:31:15:38:27:b4:00:8f:0b:4b:4f:46:e7:18:fd:
e4:00:ce:28:52:87:49:f6:92:b0:97:48:51:cd:76:
e6:c7:ce:74:6b:ea:59:41:63:51:02:91:60:80:7b:
c4:01:fa:85:c9:c4:44:4a:d1:53:ff:76:5b:e2:a1:
f2:46:36:94:6e:ee:86:34:f4:c9:2a:40:56:17:e1:
40:fb:80:10:04:fb:f1:fb:b9:2d:97:da:11:23:f7:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:DC:D9:36:89:25:C4:9F:2A:CF:4A:FA:4F:F3:9B:18:C3:53:A5
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:c2:88:e0:3f:26:13:f5:63:64:fa:eb:be:68:31:fa:1a:
6a:76:ce:aa:9b:7a:4f:79:e9:81:8f:e5:0e:ff:06:05:6a:db:
19:1c:e7:84:84:20:4a:54:63:4e:92:54:00:fc:f9:5c:ec:4e:
69:93:fc:d8:ea:15:52:da:f5:ba:1a:1d:6e:87:85:bc:5b:e2:
8d:ea:b5:88:e9:57:79:f8:d5:aa:b8:13:f0:5a:ab:44:00:47:
66:8d:a9:4b:85:7f:6e:ef:b5:12:9c:24:d5:9e:2b:8c:99:9a:
58:c3:83:d6:b6:cf:2d:7f:ff:0f:4a:c1:f2:85:15:5a:7d:6f:
76:f0:6d:c7:75:f3:17:0c:bd:4f:13:10:06:c1:4d:ac:af:17:
c4:75:63:a2:dc:6e:e9:83:09:57:62:30:fb:fc:a0:0e:7d:98:
b9:b9:e9:b6:d3:e4:b9:5f:2f:19:d3:b4:b3:01:80:96:6f:55:
89:f1:da:9e:e3:0d:47:96:4b:b1:e7:0d:46:c8:ae:2f:cd:07:
db:b8:8d:67:1d:c6:fb:cd:fb:3e:d2:fb:6a:9b:d9:b6:c0:6b:
79:a0:fa:53:b9:37:87:17:94:30:ed:c9:5b:db:42:15:c2:d5:
67:d5:e5:01:44:67:76:5d:24:7f:1a:a5:ee:57:59:31:e0:65:
69:88:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:18 2025 by rpki-client