Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: zlEtsnmmqgB5zDBD8ktWmBZ0OlWonFqZec/8w9CQzQg=
Subject key identifier: D9:1C:B4:3D:CE:E0:37:20:72:5E:D1:FF:7E:09:C4:5F:9E:F7:45:84
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 0196BF00C844B798845420B1BFD241A10693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 1019
Signing time: Sun 11 May 2025 11:00:21 +0000
Manifest this update: Sun 11 May 2025 11:00:21 +0000
Manifest next update: Mon 12 May 2025 11:00:21 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: vmfod/wsrb7Y7T+Ote+e5S6wGDcIz9mHP9JqR51+VbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:c8:44:b7:98:84:54:20:b1:bf:d2:41:a1:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: May 11 11:00:21 2025 GMT
Not After : May 12 11:00:21 2025 GMT
Subject: CN=d91cb43dcee03720725ed1ff7e09c45f9ef74584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:24:2d:0d:c7:b9:14:04:bb:80:ec:2a:d6:
24:4f:29:79:7a:7a:0a:c7:9a:47:5d:d3:d3:e3:fb:
88:a6:ff:a6:d4:0a:55:4f:d4:c3:d5:f7:70:47:e5:
f0:df:4a:e2:c9:53:b9:68:59:07:42:6e:4c:a7:87:
41:0f:df:63:5a:21:ed:68:a8:11:af:dc:37:30:f3:
4f:aa:98:43:9b:35:ba:e7:4a:94:67:7f:89:48:e7:
39:bd:d1:06:69:cc:51:19:1d:dd:9d:0f:6c:c8:2d:
07:1c:80:1f:2a:43:8d:5c:48:43:8f:79:6d:d9:70:
87:ae:5f:5d:9f:25:17:09:5c:8b:b0:21:4d:23:a4:
0c:83:7c:8b:f5:a3:7d:63:4b:5e:06:e7:cd:e8:a1:
2f:69:82:f2:95:27:b6:e5:4f:77:26:18:2f:7e:e0:
fb:72:c8:34:38:90:e9:e6:9a:1a:92:7f:9f:a2:a3:
67:30:d4:f1:20:fb:4b:c5:1b:42:4e:87:79:02:3b:
d8:ca:08:5b:30:28:f7:c8:b3:87:dc:f9:b2:a7:7f:
3a:fd:1f:0d:f2:48:30:a5:1a:3d:e8:72:87:a3:48:
66:ba:3d:1b:3d:47:e8:84:d9:e1:81:a1:5f:c0:93:
9c:4b:4f:cf:70:b6:1f:9a:05:03:b3:b8:25:bb:74:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:B4:3D:CE:E0:37:20:72:5E:D1:FF:7E:09:C4:5F:9E:F7:45:84
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:8c:1c:57:86:7b:9d:87:cf:03:3b:21:08:e4:9e:44:89:
ef:b7:d0:d4:bb:3c:fa:9f:db:b0:ab:bb:2e:26:08:13:32:48:
cb:84:4e:9b:fb:c5:76:6d:5c:d9:84:f2:4e:b6:62:98:ae:41:
73:82:5c:20:b9:c7:08:6b:4b:d0:f8:c6:70:48:93:f1:88:18:
4b:fd:a4:06:35:6d:69:4e:28:64:74:03:11:d0:3c:ba:4c:8b:
ca:61:cf:5c:b2:0d:33:4d:a2:bf:5f:07:13:87:a6:a4:77:aa:
5f:19:d4:cb:99:29:c6:38:5c:3d:46:1c:d6:f8:ee:49:ab:90:
bd:b4:05:92:ae:3a:7a:a4:df:bf:16:db:7e:1a:7d:b8:01:7a:
b9:45:f9:b9:2a:5c:c7:1e:59:e6:82:80:55:38:c5:9d:b6:bf:
fa:bc:37:ea:34:ae:a6:4b:49:a0:74:d3:00:a3:ca:9a:13:d3:
d7:85:50:c4:ac:90:b8:91:fa:f0:c5:79:bf:fd:4f:30:aa:ca:
41:0c:52:68:51:34:94:46:6f:03:c0:ea:ab:cd:f4:78:56:fa:
3b:39:9a:d2:3f:c7:3e:e0:74:f1:82:a0:e6:c1:2e:9b:78:ac:
bd:97:be:bd:78:6b:03:c9:82:c6:21:b4:d4:36:b2:55:a9:ef:
1d:96:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:51:30 2025 by rpki-client