Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: FJFDwIkLskJBgdN/1kXowYWptkoHde2DN/NWJ49JHn0=
Subject key identifier: 1A:25:6B:50:B4:01:14:FB:9F:C7:3D:85:54:D1:17:08:7D:C4:1F:2E
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 0196CB057B4F28D28A8731FED27EA6E39D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0C9D
Signing time: Tue 13 May 2025 19:00:56 +0000
Manifest this update: Tue 13 May 2025 19:00:56 +0000
Manifest next update: Wed 14 May 2025 19:00:56 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: l/I/+yhp6Hwmd6dLK1Dt/llPNSJHOQZrnjTgTtCLpus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:7b:4f:28:d2:8a:87:31:fe:d2:7e:a6:e3:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: May 13 19:00:56 2025 GMT
Not After : May 14 19:00:56 2025 GMT
Subject: CN=1a256b50b40114fb9fc73d8554d117087dc41f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:6f:f8:2f:49:62:1b:46:0b:37:a1:5f:5b:
d2:3b:08:48:5d:e5:18:17:5b:46:09:d4:89:d0:df:
a0:f4:da:20:4e:25:d8:05:49:29:29:71:10:19:93:
e0:99:41:93:90:06:7e:9a:ab:72:98:8d:ab:31:00:
f2:2d:22:55:06:4e:8a:6a:05:3e:07:4d:3f:5f:50:
27:5f:38:09:53:4d:48:7d:73:4d:54:63:28:41:d2:
05:5a:52:dc:fc:80:22:e7:c8:e9:40:63:c5:64:72:
ca:2d:f1:b2:9e:ad:ac:57:8e:32:00:f1:cd:a9:c2:
8b:df:ca:c8:62:58:0f:30:d1:57:ec:f5:43:4d:0d:
47:54:7f:b6:e8:d6:4f:0f:2a:d1:9e:3b:d3:1c:b3:
da:0a:2b:54:9d:67:83:22:16:f5:67:8f:5b:87:9d:
1e:4b:0c:c4:f0:7b:1a:8c:a7:fb:4e:fa:6a:e6:7d:
d0:b6:9f:56:e3:1c:15:45:09:98:8b:ab:e6:e0:04:
df:c8:2e:47:02:91:4b:a4:25:52:f8:c1:d6:03:53:
bd:ec:b6:08:65:ef:ec:a7:7a:d0:03:d0:8b:95:3e:
67:62:37:54:22:32:63:8f:9c:14:64:65:57:9f:44:
be:2e:c0:b5:77:c1:be:85:a5:b1:eb:3d:80:72:1f:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:6B:50:B4:01:14:FB:9F:C7:3D:85:54:D1:17:08:7D:C4:1F:2E
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fc:8c:18:64:91:76:9e:fe:bb:8d:3a:a1:94:56:b0:af:75:
7e:9f:83:67:66:0c:9a:67:13:81:a9:d9:4a:2d:7c:1d:d3:34:
0c:fb:d8:13:fa:47:29:87:1c:c0:3a:b9:65:07:ab:4d:a3:80:
fb:c4:94:a2:f8:f2:0e:f2:8b:47:c0:f5:23:8a:e8:d6:b1:3f:
cc:cb:58:64:cf:0b:f5:19:96:03:c9:dc:a5:3a:20:4a:3e:35:
3c:31:34:58:87:08:0b:a8:c4:99:90:2e:a9:4a:35:6b:56:1c:
26:0b:1a:5f:88:1d:a0:49:6f:d4:b8:af:aa:46:43:a0:c8:41:
95:b6:4e:41:b8:45:c5:88:01:a3:4a:75:9d:cc:a8:1e:82:cd:
5b:aa:27:11:4e:4b:9a:5d:8a:b7:9b:b9:21:50:64:a4:01:fb:
38:80:66:9f:a4:e5:8a:65:b5:8a:b9:ca:c9:3f:55:ae:d1:32:
2f:14:39:91:c7:a0:5f:81:47:4a:02:ba:09:f7:75:5d:99:c2:
c3:27:d3:84:66:97:54:b8:bc:36:96:0d:0c:cd:cb:c5:5f:1e:
6b:13:c4:a1:5d:aa:d8:dd:8c:54:95:b5:b1:98:f0:81:58:b4:
b0:ab:03:09:50:2a:e5:54:2e:84:96:42:d3:16:5a:5a:82:fc:
57:fd:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:51:42 2025 by rpki-client