Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: +d7+w+S+GGttucFwF06vseDunRwQCZ7cDv4Mf5xuDyg=
Subject key identifier: A2:97:D3:64:B2:06:2A:B0:B0:41:48:67:E6:74:E3:B2:70:64:66:33
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 0196A27807A84BD1DEFCA77B96013522233D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 22:01:37 +0000
Manifest this update: Mon 05 May 2025 22:01:37 +0000
Manifest next update: Tue 06 May 2025 22:01:37 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: RbtQfkw81Emlaw6CL4Rn/O1jT1+2vVrDmsTZL2bdqdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:78:07:a8:4b:d1:de:fc:a7:7b:96:01:35:22:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: May 5 22:01:37 2025 GMT
Not After : May 6 22:01:37 2025 GMT
Subject: CN=a297d364b2062ab0b0414867e674e3b270646633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:6c:ce:03:d0:4c:72:b8:37:11:4f:9c:39:
46:26:e1:cb:a2:1a:28:10:6c:f9:b8:5c:55:90:43:
27:52:7c:49:19:88:74:5a:fc:9d:6a:7a:49:e7:e4:
d7:4c:1a:49:12:63:62:cd:c1:f3:b2:25:31:af:73:
76:63:37:fe:ce:7f:71:e9:68:c6:22:5f:de:97:58:
9a:83:6d:42:d1:e4:51:8b:dd:40:41:af:24:0f:4f:
c4:14:76:d4:27:62:72:b1:6f:00:ed:8e:1b:c9:b3:
42:50:59:e5:ca:77:85:aa:98:ef:7f:a5:f1:be:a5:
01:e5:5b:f3:ea:aa:f8:c4:0b:e7:77:1b:d5:8a:f5:
e9:27:28:fa:04:8d:76:98:15:2b:07:c1:d3:12:da:
0b:bf:d3:4e:81:fa:e2:8f:27:62:1b:50:22:88:b9:
67:bc:39:9a:57:a4:4a:00:3e:2d:c0:d5:69:31:c9:
91:ee:6d:2b:5c:5e:1a:fc:f9:61:c0:e2:4e:7b:48:
79:0f:bf:37:09:1f:e1:1e:5f:28:60:51:fa:bd:79:
37:87:d5:04:49:90:23:6c:70:7d:bb:52:9d:70:27:
19:43:55:72:f9:52:1a:7a:c4:35:51:fb:f7:28:b9:
7e:5b:e5:56:40:13:be:8c:19:43:b8:76:92:cf:9e:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:D3:64:B2:06:2A:B0:B0:41:48:67:E6:74:E3:B2:70:64:66:33
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cd:55:14:3b:1e:79:bf:4e:ac:38:d2:cd:8c:e8:e6:45:e6:
84:7b:6d:fa:50:dc:5a:57:2a:6e:64:46:9e:5a:1b:e7:5a:88:
29:2c:4f:e9:55:14:b2:77:cf:6b:7f:c3:c3:42:db:e9:a6:85:
d4:32:9a:81:ed:71:a8:f9:1d:94:c0:df:ee:4b:ca:92:16:55:
bc:ed:88:be:1f:02:d4:60:1a:33:02:24:10:09:36:62:e9:16:
6c:fc:6d:0c:2a:11:0c:1b:53:15:2e:9f:29:97:5b:67:84:6c:
46:84:a0:d9:86:ce:17:0f:36:44:71:61:a9:5c:fa:60:a0:31:
f4:0a:ac:d1:b0:92:b6:92:e9:eb:0f:97:7b:b4:87:b8:6b:36:
dc:d2:c0:65:6c:58:eb:04:46:dc:8d:e9:82:88:73:c4:6c:35:
9e:ae:a3:50:a4:51:60:9c:50:fb:51:ec:da:d2:54:47:b1:45:
46:dc:23:b0:7b:ea:b1:80:35:c5:fa:40:3d:42:1f:a1:b0:b9:
01:2a:ea:20:ec:64:fa:fb:22:cd:46:97:10:1f:3f:b2:96:ee:
6b:a2:4c:d5:89:a0:82:14:a3:ef:e7:75:16:23:c1:5b:02:a2:
7b:23:67:5e:f2:1a:92:28:8b:84:26:01:54:11:3c:c9:a4:78:
16:8f:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:50:40 2025 by rpki-client