Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: ciLiS8jOCSrzwpttO0Mx/7dMyvH/GreJnlekgqb+WTc=
Subject key identifier: DC:B5:E1:B5:8B:93:F1:87:CD:FE:75:0C:6B:37:25:0E:34:A5:19:90
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01967A56A36F3484FC944F73E0E3316E35C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 10D2
Signing time: Mon 28 Apr 2025 03:00:20 +0000
Manifest this update: Mon 28 Apr 2025 03:00:20 +0000
Manifest next update: Tue 29 Apr 2025 03:00:20 +0000
Files and hashes: 1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: bRn6Lyx7OqjWamJzYqF2gP6dTu+Z6AJ3/KPLU6neTMw=)
5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:a3:6f:34:84:fc:94:4f:73:e0:e3:31:6e:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Apr 28 03:00:20 2025 GMT
Not After : Apr 29 03:00:20 2025 GMT
Subject: CN=dcb5e1b58b93f187cdfe750c6b37250e34a51990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:9c:dc:eb:11:13:a0:6c:51:c7:48:a3:67:
52:49:18:be:10:6c:6c:29:17:b9:73:5f:f5:e8:3a:
de:c4:0a:a2:72:12:f7:80:b2:b7:fc:b3:0d:30:35:
f9:d1:26:52:3a:31:ee:38:05:d2:74:18:d9:07:71:
d3:04:5e:12:41:72:c2:ac:45:6e:d5:84:ff:a7:51:
d0:64:b7:ac:1e:63:a4:0c:7a:32:61:c8:ee:b1:3b:
5e:79:f5:90:f0:d6:93:69:c9:2a:1f:7f:7e:e4:6b:
95:a5:a6:f4:3a:d8:f4:4b:b3:42:7c:ed:36:d3:85:
88:65:35:63:8f:ff:fe:28:b5:a8:5e:db:83:88:4d:
50:4a:a7:96:3c:4a:ed:bb:1f:39:0b:2b:ed:9b:e0:
de:70:17:a0:5c:79:7c:26:a0:ef:7f:f8:e1:d3:df:
5b:17:ca:85:bf:7d:01:54:d7:1c:e8:a9:e8:1d:b6:
fe:42:b0:b9:3c:d4:d1:39:8f:1f:bb:4e:9c:b8:1e:
fb:92:98:e9:bd:56:bb:23:22:44:8e:61:dd:6d:2a:
67:eb:83:77:59:11:02:d5:c2:91:e8:42:3c:44:97:
5c:fc:2d:fc:f2:f5:a7:bd:ab:90:15:b9:2e:71:8d:
8a:bb:46:60:92:6d:d3:b2:87:e9:37:8b:62:56:9f:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B5:E1:B5:8B:93:F1:87:CD:FE:75:0C:6B:37:25:0E:34:A5:19:90
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8a:00:84:b6:f9:24:03:a1:a7:81:d2:69:0c:62:6d:c8:26:
54:ff:88:1d:bb:6a:d6:77:f7:fa:cb:55:8e:d0:99:26:85:ce:
89:47:d0:a3:24:08:6f:5c:09:51:72:b3:95:2c:09:3b:4b:f2:
96:a1:ed:cd:8c:d9:58:0f:40:ff:f3:5e:05:84:ae:44:d8:7f:
67:30:f3:2f:37:b2:64:05:9c:a6:72:27:4e:1a:88:f4:dc:f0:
c3:d1:ef:83:88:88:1a:8a:8a:47:aa:de:cc:68:5e:d8:7d:8b:
2a:a5:c5:1d:37:a7:81:ca:a8:77:be:4c:16:71:ab:db:e7:5a:
95:07:6c:d6:dd:1c:4d:09:2a:20:03:0b:0e:61:f3:ed:36:df:
6a:0b:05:2f:28:e0:ca:3f:20:10:5c:49:1b:17:46:57:33:b4:
a3:fb:48:d4:8a:33:df:ae:fb:14:26:fc:cc:81:dd:f7:c3:d5:
fa:50:cb:e9:de:5a:70:2a:dc:d6:b4:39:ca:9c:be:50:aa:97:
b0:0e:74:cb:4f:cd:41:2a:02:fb:e9:e3:3a:6e:c4:9f:75:cd:
01:2c:0c:d1:28:27:5d:92:37:84:ed:fa:ff:83:05:c4:0c:0e:
a4:d9:70:03:f6:78:5f:c4:9b:c1:33:8f:1f:2d:a2:17:ec:34:
2e:84:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:20 2025 by rpki-client