Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: ZXutB928xH8CIFGG4GN9ibglcwtfrrfz8UUwA3X/MNM=
Subject key identifier: E3:AD:D7:1B:6F:05:02:68:FF:D1:36:5C:1D:50:9B:6B:3B:B1:0D:90
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 01969E9A37B8CD2C2D32F4C39D055A9941EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 037A
Signing time: Mon 05 May 2025 04:00:28 +0000
Manifest this update: Mon 05 May 2025 04:00:28 +0000
Manifest next update: Tue 06 May 2025 04:00:28 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: eMBbRedj+V8xKwwR1XO/fFuHrNc3/gloA6ye+yTpc80=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:37:b8:cd:2c:2d:32:f4:c3:9d:05:5a:99:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: May 5 04:00:28 2025 GMT
Not After : May 6 04:00:28 2025 GMT
Subject: CN=e3add71b6f050268ffd1365c1d509b6b3bb10d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:af:22:d0:da:ed:3b:06:6d:e2:87:9e:94:
78:ed:5b:4f:69:39:e6:88:7f:67:16:14:20:d2:14:
d7:7a:b1:3d:72:d3:84:ac:7e:c7:23:0a:39:4a:d8:
ca:65:91:97:32:e3:44:3a:40:98:7b:f6:5a:01:05:
58:08:55:f3:0a:83:da:21:81:c9:7b:22:a0:31:ea:
6e:d7:2e:ca:5f:73:ca:05:2f:3a:ee:e8:67:ba:d6:
3c:0e:fe:e3:83:c0:b1:65:de:b9:06:87:36:0e:e6:
47:9b:6f:fa:c5:5b:33:e3:f8:8a:ed:1c:71:8b:1a:
79:cf:10:05:63:f3:43:30:fc:f2:d1:76:a2:19:9a:
59:75:c3:9f:aa:22:bc:2a:75:f3:cf:a2:61:07:38:
77:3b:6f:4a:6e:2b:91:eb:a3:7c:54:ae:62:3c:12:
5a:b0:52:18:c6:7b:bc:5a:1a:b8:61:73:9d:81:6f:
33:3f:2f:b5:13:d6:ea:5b:6d:91:f1:34:cd:9c:57:
93:3a:be:94:a5:51:37:fc:62:82:83:cf:b6:5a:5d:
29:ed:60:b8:4e:01:a0:32:d9:2d:84:8c:cb:1a:83:
92:ea:15:f3:a2:2b:0d:eb:28:f1:24:ab:a3:e5:f2:
3e:05:63:32:ae:db:bc:15:1d:15:0f:4e:5b:8c:b6:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:D7:1B:6F:05:02:68:FF:D1:36:5C:1D:50:9B:6B:3B:B1:0D:90
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:08:86:14:e2:3e:8a:fc:35:3a:0b:b4:47:76:52:16:b2:
49:21:29:13:2d:ba:f4:4c:24:c5:3a:15:13:1e:46:92:3d:e3:
08:a9:7a:82:5e:ff:b1:70:38:20:f4:a4:cf:30:95:03:8b:57:
ee:7d:3b:a4:8a:bd:8b:8c:db:07:cb:b8:df:b9:01:d2:6f:69:
7b:4e:2b:50:a5:68:79:b9:68:f2:3d:28:ef:1a:cc:77:7c:13:
d7:4f:95:49:09:35:a6:ef:a8:cf:c6:85:99:ab:9d:25:54:76:
21:0b:1b:1b:62:ed:e9:43:a9:52:46:25:a4:3b:e4:0e:ba:46:
cc:9c:dc:38:fa:63:d4:48:e0:a8:9e:74:93:31:30:42:4a:ac:
89:53:4a:c1:84:19:3a:39:db:bf:d4:53:28:ea:db:69:71:1e:
36:ab:ee:3f:9c:66:11:6c:a1:f1:26:78:b0:ff:d5:ae:72:03:
71:4a:bf:d0:90:eb:c5:6d:44:bd:78:ac:79:51:78:1b:55:d9:
30:1e:d9:1a:a8:06:17:08:b2:f3:87:4c:08:2d:38:84:f8:4b:
f5:48:e0:20:aa:43:32:bf:54:5d:55:3d:4f:bd:cc:69:3f:cb:
df:e3:85:56:a1:50:7b:68:94:5c:69:f4:c6:02:30:1f:bf:9c:
35:fc:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:11:50 2025 by rpki-client