Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: bWTjQAMGKBC8efAkPXstxhuCkSAarXquWyzghjMtdgo=
Subject key identifier: 94:6C:F9:6C:01:75:B8:62:DA:5C:88:13:88:B9:97:F5:61:00:22:9E
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 0197B8214D973148C15E544A446833151069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 109A
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: RyY4H+U3vgJuWjDIRTru75xHKnRfXAUKEjOliygRHys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4d:97:31:48:c1:5e:54:4a:44:68:33:15:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=946cf96c0175b862da5c881388b997f56100229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:f8:12:71:96:3a:7a:72:7a:43:bb:b4:87:
66:5b:19:ff:dc:7f:eb:46:86:6f:cd:1c:81:e5:18:
41:3e:75:5e:da:db:29:80:dd:e6:2e:6a:27:50:f8:
9a:59:4a:76:43:fb:9d:90:56:49:1e:aa:41:10:99:
2a:bb:06:5d:49:89:ba:cf:3a:29:b6:b1:f1:c2:82:
c1:25:65:c8:31:28:fe:35:f1:9f:1d:7f:2a:40:f6:
e3:27:eb:ef:ec:4d:7e:47:7a:4a:71:ca:5d:00:88:
b6:9b:5a:4b:78:66:ef:72:62:44:16:86:0a:fc:96:
8c:01:35:1b:e2:29:a5:27:4e:90:e0:bd:86:d4:f9:
98:23:71:aa:6c:c8:26:14:fc:ad:af:6f:e0:3f:8d:
0e:b6:0e:a5:aa:9a:b4:05:7b:32:56:96:5f:0d:91:
ce:be:e0:09:c3:6f:a0:2c:31:21:49:a4:b9:66:16:
08:2a:71:7f:fb:ea:66:78:12:92:fa:70:25:b0:8a:
69:ac:90:76:27:a0:7e:c7:6d:b3:8f:d5:ae:60:20:
f8:c6:71:f7:8d:14:89:c3:b1:7c:f0:31:30:08:47:
8a:a8:34:dc:26:2c:4c:e5:83:53:72:1e:63:88:08:
25:1a:38:59:81:a2:39:38:02:71:c0:11:49:62:a6:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:F9:6C:01:75:B8:62:DA:5C:88:13:88:B9:97:F5:61:00:22:9E
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f6:c1:bd:05:ba:78:a1:c6:7b:63:3e:de:0d:c4:f5:d5:21:
bf:3d:19:cd:f6:d2:dd:d6:08:3f:80:e9:ca:fd:16:b1:47:95:
67:7f:66:22:66:48:2f:d1:c4:f0:a8:9c:0f:a7:f2:56:e1:fe:
23:fb:e8:fa:3f:ec:a3:42:3d:0c:0b:08:80:e7:a8:80:54:4b:
62:51:cf:fa:ff:f2:f6:2b:a8:a7:b3:82:89:a6:27:60:17:f0:
e3:45:49:23:6d:c4:90:db:0d:ca:34:4f:24:e8:f6:b5:1f:a9:
bc:d8:2f:0f:70:f4:c0:81:4d:7d:a2:f8:c2:99:51:cd:dc:0e:
55:42:2f:4e:cc:56:b9:30:cc:f6:e4:73:05:f0:12:19:88:de:
93:f1:41:f7:e1:f4:8e:fe:27:f5:e9:f7:c6:d1:c7:9a:b2:29:
cb:d2:d5:b6:f3:89:27:9f:a3:de:f2:fa:fc:06:e4:7d:53:31:
54:71:52:8e:63:89:f0:d0:ed:22:3a:b6:1d:03:76:81:ee:f2:
1e:fd:39:a6:dc:97:fd:81:4d:f2:49:1e:e9:49:1a:54:be:51:
82:80:88:9c:dc:f2:ef:7e:67:fb:1f:d9:29:29:24:4e:db:62:
3b:f8:0b:b8:37:e8:06:64:b0:35:63:b8:c0:0b:ae:3a:31:2c:
5e:55:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:16 2025 by rpki-client