Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: bSyQszl3krblPv+c+YbCzpU+CU3g3yeVRud3/DZdHyg=
Subject key identifier: 80:9E:49:8D:17:33:6C:C0:A4:D3:EA:89:26:C4:12:D3:B5:51:88:09
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 0197B6A0F9EB0CBBCC2D9E1BD812D3E5B41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 040B
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: ErzWp8vmdxhzOmzr/QURYIv1lJUo7mupVV789j4jpV4=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f9:eb:0c:bb:cc:2d:9e:1b:d8:12:d3:e5:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=809e498d17336cc0a4d3ea8926c412d3b5518809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:51:f9:db:59:71:11:ab:c2:aa:e1:b7:59:
fd:a7:1c:df:e0:83:f3:e6:16:02:f4:c9:25:b5:e1:
0a:5f:79:fa:af:ba:ff:f2:9d:3d:82:e4:1a:49:58:
a3:a6:4f:dd:33:f0:06:6e:b9:2b:4b:ad:e2:5d:46:
3d:43:5e:1c:48:8d:a8:f2:a6:1b:4c:c3:bf:fd:6f:
5e:b6:32:09:5a:8c:43:7e:3e:d1:30:3d:8b:e3:00:
61:e2:21:bd:ad:a8:53:18:4b:46:c8:06:eb:94:0b:
b8:be:40:dd:75:eb:96:7f:e8:9e:b4:ae:8a:a1:8e:
75:44:b6:84:71:5f:76:de:d1:3e:f9:3f:92:9b:82:
d5:8f:31:45:ff:77:34:9a:11:88:42:1e:cd:81:10:
4a:08:d8:c0:ea:85:84:e4:5a:a7:0e:5d:61:2d:bb:
ed:ec:56:8c:24:6f:c9:72:b4:57:bc:41:3d:78:09:
50:7c:ec:b0:9a:ad:19:f3:f3:e7:27:ff:0b:0b:89:
13:ea:a8:9d:06:28:57:74:cb:67:0e:7d:e8:d3:b2:
81:04:68:76:e5:b5:71:29:8e:29:fe:1b:54:ce:a4:
ca:67:78:56:97:87:30:13:b7:8f:0d:c9:89:41:f3:
e3:13:c0:62:26:ff:b2:46:e2:67:9e:37:af:a0:b9:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9E:49:8D:17:33:6C:C0:A4:D3:EA:89:26:C4:12:D3:B5:51:88:09
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:53:4f:55:99:55:0b:59:48:29:35:2b:0d:d8:c6:33:16:70:
1b:62:31:be:78:d4:1e:e8:f9:f0:73:a5:6f:07:3d:05:1c:a4:
db:7e:41:07:a6:c0:b0:13:26:1d:ae:a1:8c:bd:9e:e3:b7:63:
93:e8:1e:32:7a:0b:c7:50:eb:ef:0a:60:4f:b8:e7:f9:72:05:
61:df:12:71:d9:20:48:ff:d4:36:69:fa:6c:3f:0f:49:96:85:
f9:6c:22:9d:be:52:77:0d:1d:6a:4b:98:98:f7:35:a3:a3:53:
7d:fb:2d:03:6c:51:cb:f7:bd:07:5b:7c:9a:20:2c:f4:9f:c8:
fe:45:52:ed:c8:d5:db:8a:a5:39:08:b9:0a:a8:e5:00:67:a4:
43:b5:e3:1b:63:05:ea:93:05:a4:5b:2a:50:2a:5a:b5:15:65:
de:c9:a0:60:1b:78:94:d6:cc:44:a2:47:72:4e:71:9a:94:4f:
f3:cd:0e:e2:40:01:29:b8:5c:d4:a1:84:1e:c2:dc:5f:91:fe:
1b:4e:6b:c3:9b:9c:bf:b2:07:f4:b1:76:c2:02:98:17:e2:5d:
cf:c7:18:12:10:a4:d3:c9:30:3c:17:ff:86:34:12:7d:7e:b3:
65:26:05:32:3e:c3:b0:4b:47:17:b0:e8:32:0c:16:67:19:e7:
01:5d:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:25 2025 by rpki-client