Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: uNwVLTESzGPQIZ5boZ6op9ZJm8n765CqcJOrIbaVghg=
Subject key identifier: AB:C5:CD:47:E0:5C:5F:63:9B:D7:DD:CB:F3:88:E6:80:35:4A:6E:B3
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 0196A5780B3BF245F7B75ECC1DF1BAE0E9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: C7
Signing time: Tue 06 May 2025 12:00:29 +0000
Manifest this update: Tue 06 May 2025 12:00:29 +0000
Manifest next update: Wed 07 May 2025 12:00:29 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: C8xsHe7ZqY1KjHxLvvu3870kb9+Lptj6hZc+HhdvlhQ=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:0b:3b:f2:45:f7:b7:5e:cc:1d:f1:ba:e0:e9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: May 6 12:00:29 2025 GMT
Not After : May 7 12:00:29 2025 GMT
Subject: CN=abc5cd47e05c5f639bd7ddcbf388e680354a6eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:dd:83:78:b8:c7:18:02:dc:bb:17:3e:cd:
01:a6:da:d0:13:6c:3f:69:9e:8a:43:d2:26:4e:1d:
54:17:bb:9a:4b:7c:e3:10:2c:dd:ec:0f:0c:8f:1e:
de:ca:b1:b9:09:d1:f8:c7:8b:a8:29:be:6b:08:d2:
2b:a0:5f:cc:9d:11:0c:13:0f:21:f4:56:84:c6:4f:
10:da:77:54:15:fd:08:8e:dc:e9:4a:0f:5a:32:b0:
12:5c:b5:71:77:8b:7a:ff:15:6a:c8:83:15:37:18:
07:8f:9c:8e:0e:1c:d0:ea:3b:26:75:42:23:2e:e8:
17:90:82:87:bb:46:1d:21:f4:a9:13:35:94:19:db:
13:5b:41:7f:9a:82:6c:40:84:91:d3:d5:0c:82:86:
4f:cb:bf:99:ce:24:74:c6:47:c2:c9:8f:65:8f:33:
7e:dd:89:16:44:6a:40:79:83:d4:87:48:c1:a2:04:
4c:67:52:af:1d:7d:65:3d:60:c3:7a:af:54:35:5e:
d7:4f:39:71:da:ce:6e:17:9b:2b:31:bf:68:9b:6f:
7f:a7:ca:a8:10:75:4e:7a:ed:b2:b8:68:8c:4c:8d:
b0:d8:75:50:11:90:9e:14:cb:74:c5:46:02:da:ea:
aa:83:1c:97:01:6e:66:da:57:51:b5:b6:23:3f:36:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:CD:47:E0:5C:5F:63:9B:D7:DD:CB:F3:88:E6:80:35:4A:6E:B3
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fc:26:85:54:f2:e9:11:2d:54:bf:0c:3a:10:ff:f5:81:5a:
8a:8f:9e:8f:22:f9:e9:90:e6:29:3a:a7:30:3d:8c:48:a4:61:
d5:89:15:3a:14:c8:81:a3:f9:fe:5e:c7:4c:28:43:dd:0e:0b:
df:cb:40:40:57:4f:da:4e:5d:81:0d:dd:9c:16:d0:33:85:5a:
bc:d0:ff:02:10:aa:45:a1:a2:15:d6:ec:fc:f9:18:de:e2:3a:
4f:92:5a:90:3e:37:67:3e:d6:26:68:65:76:3b:6b:2a:43:da:
0e:d6:35:91:21:ea:d8:50:5f:42:97:78:fc:1c:2a:39:a8:37:
36:63:05:28:62:3f:5c:a1:9a:17:4f:5d:cd:ba:ae:32:0c:f2:
7e:d2:ab:9f:d7:78:84:24:ce:82:2d:0a:47:ce:4f:3c:9d:8a:
7d:94:1e:5a:28:c3:f1:85:f1:31:9c:0e:62:44:f7:a6:cd:c5:
65:01:e3:ed:21:65:a9:40:d8:c2:20:3a:75:2b:3c:8c:cd:e2:
b8:5d:1c:ee:51:57:da:cf:fb:63:bf:fc:f9:cc:e2:fb:d8:51:
29:f9:6d:8a:65:0b:16:c0:cc:8d:10:28:b9:ee:e1:b9:13:df:
77:c8:06:d4:5e:4c:82:76:a9:9f:14:b7:17:be:a4:98:16:e6:
9c:ec:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:23:57 2025 by rpki-client