Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: S8KEwQucPMHdkrtcrQdc33hUfxr4uD1m3a1GevM7y3E=
Subject key identifier: 39:BA:51:14:F1:BF:5C:3F:FC:8F:C1:14:3C:EB:14:B8:64:DC:7F:71
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019685485D5DFE380D96A9AF7D8D2A58BF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0311
Signing time: Wed 30 Apr 2025 06:00:34 +0000
Manifest this update: Wed 30 Apr 2025 06:00:34 +0000
Manifest next update: Thu 01 May 2025 06:00:34 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: wtpQwdMJtmKpbOfGYGm4yVQSQXlW+3jXgosL6dVWCF0=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:5d:5d:fe:38:0d:96:a9:af:7d:8d:2a:58:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Apr 30 06:00:34 2025 GMT
Not After : May 1 06:00:34 2025 GMT
Subject: CN=39ba5114f1bf5c3ffc8fc1143ceb14b864dc7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:85:c3:44:b1:4e:13:98:e2:99:f4:cd:5b:
55:77:1f:db:ae:41:e1:54:03:7b:c4:e0:f5:5b:d9:
16:a0:51:01:bb:ff:77:14:e2:80:46:f5:93:a5:f4:
87:12:05:a1:ae:42:67:7c:f4:dd:22:21:4a:20:45:
bc:71:ca:73:17:2f:da:12:47:ef:46:4c:97:bb:93:
92:61:cc:fc:7e:b5:3d:2f:15:71:f8:5e:10:bc:93:
92:5c:bf:7b:50:6f:e5:ef:cf:7b:5f:f9:03:5f:91:
94:ee:9f:3c:23:26:fa:4e:ce:70:d7:95:4b:45:09:
37:1f:bd:95:82:7a:a9:a9:d4:62:cf:bf:ed:4f:49:
39:94:d4:4a:56:51:15:fa:61:df:95:40:27:46:c0:
35:5b:e3:6c:25:8f:fd:23:bf:16:c8:52:00:07:e7:
f6:a2:94:8f:6b:3b:b4:23:38:5a:88:cc:39:0d:64:
b0:cd:76:81:74:af:68:02:77:7a:bd:13:e6:2c:d8:
52:dc:10:75:b6:e1:0e:b3:b9:c2:72:00:5e:53:dc:
90:15:e8:6e:a2:07:13:6a:ff:fa:52:fb:a4:d2:ac:
80:38:aa:62:48:f5:37:a3:dc:a8:fb:7e:de:e7:68:
85:28:c5:01:dc:70:4a:f8:50:20:c6:0f:da:27:9c:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:51:14:F1:BF:5C:3F:FC:8F:C1:14:3C:EB:14:B8:64:DC:7F:71
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0f:14:9c:79:ed:a5:67:f7:f5:35:f2:c3:1a:11:31:a6:38:
59:a1:d4:6d:8d:a8:e3:3a:3d:78:09:62:01:16:42:4e:97:a2:
9f:f3:83:77:e8:da:3e:50:a6:b6:b0:d3:8a:18:cf:01:b0:2c:
5a:fe:18:c2:6e:c6:91:5e:a0:cd:e3:2d:2e:73:3e:34:d2:f4:
8e:49:c1:17:b6:2e:46:2d:6d:04:de:7e:06:b6:a5:ea:58:66:
e7:49:33:02:f6:65:ee:77:64:e3:40:a0:46:f8:0b:ab:61:8a:
04:85:c8:d6:97:6f:54:40:23:4a:5e:d1:61:b1:3f:0e:82:3b:
2c:df:73:7a:85:e8:70:81:5e:f9:61:ed:e9:ca:6d:e6:0d:44:
64:9a:ae:df:3c:85:c7:92:75:28:dc:1b:4c:17:fd:57:8b:b3:
57:79:c6:e7:59:e3:ac:f5:8c:ee:99:68:09:22:dc:23:93:89:
94:f8:0a:b7:4d:4f:99:7e:43:27:47:bb:0e:d3:8d:64:df:38:
40:aa:11:ab:96:1c:32:63:d9:4e:af:b5:f5:66:2c:0a:75:2f:
e0:f7:3e:bc:c3:ff:61:dd:10:b0:0b:9f:61:8b:4e:a6:b1:7d:
d3:8b:87:73:1a:dd:28:41:53:78:30:f0:e8:d4:81:4d:48:cd:
44:e0:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:18 2025 by rpki-client