Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: 98LVruj3VNG4+4K9aSJQy7CIuY3TMqxZ/cuN++LnSes=
Subject key identifier: 6E:ED:8A:49:E1:C2:D4:66:DB:A6:1E:41:4B:19:14:C5:4B:C8:47:9D
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0196C1263F216202E9FC8441679C6D341FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 21:00:31 +0000
Manifest this update: Sun 11 May 2025 21:00:31 +0000
Manifest next update: Mon 12 May 2025 21:00:31 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: hBKp6Fbkkn/vuoPL777vGCwmRCTWuftiZLx49vEBqxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:3f:21:62:02:e9:fc:84:41:67:9c:6d:34:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: May 11 21:00:31 2025 GMT
Not After : May 12 21:00:31 2025 GMT
Subject: CN=6eed8a49e1c2d466dba61e414b1914c54bc8479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:85:2d:3f:95:07:e2:8a:b2:30:f3:66:4d:
1b:ca:44:b9:b6:04:b7:8a:0e:04:2d:db:e9:63:d4:
5b:f2:a3:4b:c2:2c:5b:7d:34:c2:2e:e2:09:2a:a4:
0b:01:2e:41:30:ff:3c:d7:a7:64:5c:64:0b:45:23:
41:d5:25:cf:4d:d7:c0:95:99:7e:e7:92:1e:ac:26:
96:24:b6:a8:5b:70:21:11:f0:2e:12:f3:f0:fe:c9:
01:76:18:a3:03:a0:0c:2e:97:ee:2a:49:30:72:41:
1c:9c:68:e0:8e:5e:58:9a:bf:3e:67:f6:b0:71:e5:
43:e0:5f:7c:14:58:2e:b9:6f:cd:a0:d5:df:0b:a6:
8a:f9:37:0d:63:ac:0b:71:77:67:07:4d:78:a8:85:
c8:e2:60:1e:72:3d:c9:bc:0f:52:bb:8f:e8:11:be:
c4:4b:14:9c:e4:52:e0:b1:09:92:f8:3a:8f:a1:0d:
47:9a:1f:0c:68:14:b8:21:98:76:1a:d9:f3:cf:b5:
15:5e:3d:ee:84:f3:3a:c0:64:1c:22:40:77:7a:2b:
04:bc:19:77:48:28:b7:b5:42:d0:c4:0b:9e:ab:86:
f0:4a:27:e4:27:6d:e7:51:4e:2f:7f:80:14:46:c3:
5e:86:6d:99:1b:b3:12:fd:02:0d:14:94:36:f9:ac:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:8A:49:E1:C2:D4:66:DB:A6:1E:41:4B:19:14:C5:4B:C8:47:9D
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9b:3b:cc:35:97:7a:70:15:e3:68:2c:93:14:77:27:20:38:
b6:bd:8e:19:f7:03:41:91:33:9c:da:b1:37:f2:52:7b:26:32:
f3:90:56:5d:00:ab:52:66:a9:0c:d4:17:09:f4:67:eb:82:c6:
22:81:5e:1e:8e:3a:8d:cb:06:49:69:0b:b2:9e:e9:c2:84:2d:
c7:47:7c:45:02:ee:cb:e9:89:97:68:28:e2:aa:7a:ad:73:08:
9a:6f:64:89:f9:9d:ef:1d:60:c6:2a:af:56:67:df:c9:29:f1:
0b:c0:69:2e:3a:24:01:4b:22:f3:71:ad:e9:88:2c:16:e9:6e:
80:af:bb:79:d5:60:69:59:98:82:7c:e9:e6:48:c2:2e:bb:e4:
74:f0:f4:47:5c:9b:d4:9a:31:71:a1:95:e5:38:20:63:00:53:
f1:f2:95:d1:d1:9e:86:3f:a4:cc:13:16:98:0a:aa:1c:45:a9:
c0:9d:b9:4e:80:21:39:58:64:18:73:73:7c:b3:39:63:d0:90:
a3:ce:fb:88:56:9e:7d:4c:75:92:fa:bd:67:d5:ac:0e:61:42:
d5:72:02:34:7f:07:9b:ca:06:ad:1d:1a:13:42:ef:09:ba:06:
c6:72:d2:ef:3b:6c:b0:c2:4c:46:8e:13:46:60:80:b8:9b:59:
4d:85:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:40:13 2025 by rpki-client