Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: k08i6rypyVhZKGKx3FzJVcJcuw44AosNsNmZsDd0imM=
Subject key identifier: 88:82:CF:A3:7D:F2:23:96:1A:58:20:40:66:FB:83:CE:1A:1D:17:AE
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0196B7EC8D6C88DA6BE7D474DD9E1777A273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 02:00:55 +0000
Manifest this update: Sat 10 May 2025 02:00:55 +0000
Manifest next update: Sun 11 May 2025 02:00:55 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: RSPQcRDUthPhYX2vNzPVCog6oWxltEJIcbPFyHnBEDk=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:8d:6c:88:da:6b:e7:d4:74:dd:9e:17:77:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: May 10 02:00:55 2025 GMT
Not After : May 11 02:00:55 2025 GMT
Subject: CN=8882cfa37df223961a58204066fb83ce1a1d17ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:56:f7:29:98:f1:3d:5b:f9:25:66:eb:c1:
68:6e:dd:0f:66:91:8d:a6:53:ec:c4:81:20:d3:04:
8d:9e:5f:5d:46:3c:43:a6:c0:d0:53:86:6f:84:5d:
79:c5:c0:63:55:0e:42:2d:1c:5b:2c:cf:90:48:87:
48:0e:23:18:82:5e:10:f6:ed:bf:e9:e4:77:52:ec:
28:52:88:96:8b:e9:09:c5:fc:a8:25:c0:46:50:10:
e3:dc:7f:81:89:b1:4a:23:95:cc:2b:17:14:4e:68:
07:21:58:e8:74:f2:f7:38:95:7a:f3:91:51:69:77:
a8:7d:0f:6f:ad:08:35:1c:75:73:bd:a5:0d:39:48:
07:e7:72:a1:cf:11:ae:51:c5:a2:ca:89:2d:17:47:
fe:fc:f4:51:8e:bf:58:37:1c:75:6d:45:77:49:d3:
4f:dd:8b:8a:e4:52:09:3b:66:a6:45:8d:b2:00:82:
c4:d9:dc:54:21:e8:25:00:5b:42:35:e4:f2:18:7d:
83:63:4a:ec:93:90:4d:b0:58:2e:5b:88:40:fa:71:
a3:ec:80:73:34:c6:0d:13:9d:33:d9:e9:fb:da:93:
7c:8d:f8:be:08:23:7b:65:f6:ba:a0:2f:af:8c:ae:
25:50:47:6c:63:5a:2f:09:52:8c:ad:a3:32:57:ad:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:CF:A3:7D:F2:23:96:1A:58:20:40:66:FB:83:CE:1A:1D:17:AE
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e0:9e:26:9c:0f:f4:70:32:aa:bf:e0:1a:a7:a0:80:73:ab:
59:cf:a6:c7:36:8f:57:45:50:59:fa:d1:76:83:18:5e:82:ef:
c5:1e:21:62:1f:bb:c4:72:24:cf:3e:01:14:d7:90:24:12:ce:
32:ab:d5:b3:a8:58:d8:3b:14:4d:be:43:db:96:7e:09:31:fb:
7f:30:7c:e2:dd:bf:06:0c:3a:9c:71:e1:8d:2f:28:7b:c2:df:
89:bb:dd:d8:aa:19:51:ce:bd:59:8a:59:37:60:bd:ec:be:68:
3f:15:3f:ed:ee:cd:9d:a7:2b:76:fa:5f:35:33:ae:e3:4d:e2:
b5:76:cb:08:4d:17:a9:7b:9d:1d:38:53:35:45:16:dc:85:3e:
ac:05:31:bf:40:ed:56:b4:fd:b6:19:42:40:fc:b9:20:83:ec:
23:30:b4:c9:cc:05:41:05:46:bf:90:e3:cd:5f:f2:7a:8b:bd:
f7:30:f7:ef:a8:c2:00:92:d9:42:43:d4:b0:bd:84:8b:0b:38:
50:83:6d:8e:8c:d6:e6:37:0b:be:5e:e7:ae:97:70:be:57:d1:
c0:a3:93:e2:e7:c1:70:96:07:21:16:99:4b:f9:12:15:3a:ff:
b1:56:b0:91:83:99:82:27:09:03:08:c7:ac:a0:62:29:ca:7f:
6a:d3:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:24:04 2025 by rpki-client