Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: GxCBJ7BbBql0HQ1gUDUUjHFTdzhHIZ3mDk92R0D6RZw=
Subject key identifier: 1E:1A:E3:D1:5A:D6:2E:59:5F:85:A4:53:C1:48:B3:BD:E4:20:E5:36
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 0197B6A1EDAD23274A2368EB5530C7DFE381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: HxOpawkQHQbzra+YZZCgEc2B87rvG61yyC+z7NLtVP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:ad:23:27:4a:23:68:eb:55:30:c7:df:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=1e1ae3d15ad62e595f85a453c148b3bde420e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:b3:fe:d0:cb:aa:d5:3f:db:02:e1:97:9d:
d0:ad:ff:6c:59:06:65:07:2a:e7:11:eb:a4:5b:8c:
2f:c7:4c:88:1c:7c:e8:c6:cf:0f:1f:a4:84:03:76:
93:61:94:d1:d3:17:09:f8:e3:ff:f4:e7:0a:3e:b1:
cf:2d:e5:68:9e:15:62:ee:39:06:ef:be:f9:59:73:
45:ea:52:e7:6a:0a:e1:52:70:9b:cf:49:06:ae:0f:
0a:dd:63:ac:c1:6f:56:cb:f2:25:03:0b:9b:94:bf:
d0:17:ce:e9:65:69:90:ea:bd:8a:e4:0a:b6:0f:83:
09:65:3e:68:0e:d6:17:4e:47:d9:63:fe:a2:6a:e9:
f0:ec:5b:70:98:19:64:89:03:b1:14:de:2d:54:ee:
4a:f5:22:df:60:ff:17:d3:9d:d8:ee:12:63:06:79:
dc:31:d9:1e:58:0f:26:f1:f3:95:87:55:a9:8c:41:
14:2b:ac:5b:c8:9e:b9:bf:69:80:f2:f0:25:1c:34:
fd:38:79:f7:86:50:95:76:e6:ac:0e:3b:df:5e:1d:
23:a9:3d:2b:92:49:93:00:73:3b:86:c5:d6:32:d8:
41:93:1f:80:8e:15:1f:0d:f7:61:47:71:e4:ee:e2:
31:ac:60:2a:f9:e0:84:b2:f3:59:1e:e7:22:c1:76:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:E3:D1:5A:D6:2E:59:5F:85:A4:53:C1:48:B3:BD:E4:20:E5:36
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d5:df:b1:2f:2e:1f:63:f3:10:b2:a1:7b:44:de:25:13:ef:
e2:aa:3a:60:7d:16:e0:ba:d9:05:a1:8b:86:20:17:f5:13:93:
ab:49:ab:e2:5a:fc:18:13:b5:d9:54:d2:99:6f:36:eb:38:47:
c1:8e:a8:1b:08:15:81:7e:77:6f:f5:29:18:7e:b7:d1:13:f7:
58:13:ca:c8:7b:2e:dc:0b:3d:fd:c1:d3:b4:63:d5:4d:48:85:
1a:58:97:f4:34:cf:a1:e2:d2:e9:89:1b:50:c8:fd:fe:93:24:
ff:0c:b7:97:99:09:ec:87:f3:19:1a:7c:c2:bc:e8:2e:37:5b:
91:ee:b2:9d:e6:3c:14:14:68:36:50:5d:7d:2f:ae:e4:74:53:
35:77:c2:cf:6d:c0:c4:8d:52:e1:54:16:f9:28:79:cf:d9:04:
0c:c2:b0:73:d3:60:02:58:cd:5c:3a:95:43:84:f8:38:db:fd:
f2:88:b5:c2:ba:11:65:e9:68:7b:42:48:a7:b2:94:3f:c3:be:
2c:6e:10:7c:18:31:e8:9b:60:fd:cb:b0:7a:bf:52:ea:43:6a:
aa:ed:a7:82:50:c7:0c:b7:8a:c1:e4:fc:55:c2:48:5e:05:c1:
90:32:50:38:94:4d:be:32:eb:d6:a0:46:19:d7:09:5c:16:b7:
44:a4:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:20 2025 by rpki-client