Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: TALjbEBBCGwl9BQjbPtY3XZie3u9vx6BD0w1DsqCP7o=
Subject key identifier: FA:68:70:C2:2A:AA:48:7E:B9:0A:16:9C:8B:FF:E4:CC:B1:B5:D0:5F
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019673422689F87123D5A1C44C83711C8B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 11A0
Signing time: Sat 26 Apr 2025 18:00:37 +0000
Manifest this update: Sat 26 Apr 2025 18:00:37 +0000
Manifest next update: Sun 27 Apr 2025 18:00:37 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: 80IUSOTJ7dXDft4IuzYsp0Ore1miZn+v/DWl82gEzr8=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:26:89:f8:71:23:d5:a1:c4:4c:83:71:1c:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Apr 26 18:00:37 2025 GMT
Not After : Apr 27 18:00:37 2025 GMT
Subject: CN=fa6870c22aaa487eb90a169c8bffe4ccb1b5d05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:20:9a:2c:00:de:cc:6f:1f:73:77:3e:23:
ca:59:d7:33:da:60:6c:3d:70:ff:06:5b:d5:18:b7:
1a:40:5d:c4:76:56:4d:51:3c:88:4c:b5:54:f7:d2:
6a:b8:e8:d9:dd:e3:a3:37:5d:90:a9:74:be:e1:f6:
98:54:9d:16:ca:1d:e6:ad:90:df:2d:4c:19:72:c3:
3f:29:fb:4e:b5:e9:a6:cb:c9:73:7a:fe:d5:c3:18:
c5:f3:e9:4a:3c:86:7f:51:52:2c:31:68:a5:97:c5:
d6:ae:df:9a:f3:72:b0:57:f0:5c:78:a8:8c:25:bf:
e5:31:eb:a1:d4:af:a4:a7:58:f0:9e:ec:29:6f:b4:
9b:3d:47:85:19:17:21:8a:f4:70:61:30:71:98:81:
12:d3:25:5a:cb:35:f8:34:63:13:90:42:6f:40:30:
26:9c:b3:30:e6:29:31:0b:b6:ef:b3:4e:d7:95:1e:
12:26:01:f7:18:7e:cc:82:46:39:21:ea:fb:f0:29:
39:e4:76:96:74:0d:e5:4e:83:ea:c1:27:db:44:57:
4d:52:19:d5:55:ff:7b:3e:06:9d:b6:03:99:44:b6:
dc:b5:3b:4c:d9:3c:7a:f7:28:98:88:d2:56:70:ab:
21:6e:6e:9c:a7:27:80:44:ec:e3:b3:bb:77:82:35:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:70:C2:2A:AA:48:7E:B9:0A:16:9C:8B:FF:E4:CC:B1:B5:D0:5F
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f5:40:2c:ff:b5:b1:24:cd:60:ae:6c:cf:66:92:aa:a0:32:
aa:75:eb:ae:ef:cc:fa:23:ab:8e:fa:b6:96:53:57:e1:29:c0:
30:f5:93:2e:bd:26:de:8b:d2:58:0f:ba:9c:cd:4e:c0:07:65:
fd:bf:0f:af:4e:92:f6:36:cf:4d:fc:c5:e5:83:dc:f9:c3:0b:
78:71:c6:1d:f7:74:e2:63:3a:be:0e:36:4b:65:fd:77:1f:9b:
36:35:0c:e2:78:c8:bc:65:5f:b4:e9:04:fd:cd:86:4c:64:f7:
0a:f9:b6:c1:d4:dc:d5:d6:d7:85:ee:1d:9d:6f:f4:0f:66:5c:
d8:ed:12:fa:ba:52:60:3f:5e:08:3a:78:87:d8:0e:e0:08:66:
4a:f3:62:60:b1:3c:f5:94:2d:0c:11:92:16:2a:9f:19:6c:31:
12:5c:21:1e:c9:4e:44:0b:b0:76:db:5d:0b:99:57:70:f9:78:
28:db:a6:32:43:0c:24:a2:f2:3d:82:cd:e1:dc:22:e0:a5:2b:
57:d8:3c:5a:36:a8:f6:36:bc:0c:a2:ae:42:99:81:41:8d:9d:
c3:38:ae:4d:e4:c5:21:d6:ba:14:00:d0:d8:9a:03:96:db:1e:
d5:14:cb:22:d3:63:54:c2:a7:f7:a6:f7:cf:9f:27:e0:af:8c:
4e:ab:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:45 2025 by rpki-client