Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: PYL9Dobtj6vJrz49zcvLlzAG8JfabFYmvUcXcjs9Dlo=
Subject key identifier: A1:6C:67:E3:C2:99:AF:22:CE:51:A9:77:E8:A1:02:B0:10:27:2B:E7
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 01968134D440CE0E5C82E6D61E86D7C628BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 0FF9
Signing time: Tue 29 Apr 2025 11:00:45 +0000
Manifest this update: Tue 29 Apr 2025 11:00:45 +0000
Manifest next update: Wed 30 Apr 2025 11:00:45 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: 4ip0PqL9UqThdy9FHoyGI6gdW9GS6EK6zGMzghka4dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:d4:40:ce:0e:5c:82:e6:d6:1e:86:d7:c6:28:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Apr 29 11:00:45 2025 GMT
Not After : Apr 30 11:00:45 2025 GMT
Subject: CN=a16c67e3c299af22ce51a977e8a102b010272be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:7c:c0:b5:70:e1:18:be:90:cf:6d:83:aa:
c4:be:53:80:54:b0:3a:ce:76:d3:c9:64:3d:a1:74:
39:73:46:f1:82:aa:3d:c6:3f:e6:f0:d6:a3:ff:4e:
25:1e:73:cd:c1:49:41:53:6c:8e:54:5b:1c:af:0b:
8d:5b:ce:f1:7f:6c:7b:ef:00:4d:0d:9b:b6:83:fb:
00:6c:10:18:8b:9f:ae:62:39:09:b5:bc:63:66:f3:
de:84:f4:d4:c5:cb:6b:40:72:75:16:7a:c5:72:b6:
b5:4a:3e:bf:93:9d:b3:e1:be:83:c5:e4:f0:a5:36:
af:46:d9:91:ac:ab:bc:9d:45:d8:31:e8:15:ed:56:
67:6d:fa:b4:87:af:b9:5a:0f:0b:a6:c1:2c:22:4d:
63:ae:61:be:ab:0a:fc:13:a4:21:98:0c:ae:85:f5:
fa:a0:71:45:67:0a:37:1e:9c:22:9a:34:c4:4d:04:
ca:71:da:4f:55:bc:47:44:5d:ef:2d:27:dc:7e:ef:
67:21:f3:32:e6:c1:e6:dc:78:11:4c:ec:1e:03:81:
74:20:45:fc:93:7f:d9:0f:57:e9:eb:ef:31:f3:70:
00:d0:e1:01:2c:b0:9f:3e:14:57:22:08:ab:06:c4:
b9:97:ba:10:0a:48:0a:80:8c:8b:b2:b7:5d:2f:1e:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:67:E3:C2:99:AF:22:CE:51:A9:77:E8:A1:02:B0:10:27:2B:E7
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:75:7f:7a:bb:1a:18:1a:e3:b3:4c:83:b0:9b:66:8d:1c:df:
a5:4c:4f:43:16:a0:02:02:72:f4:a2:4b:cd:c9:57:1d:4e:bf:
14:29:a1:22:a4:f0:9c:45:58:01:52:32:fe:e3:4f:54:ee:fa:
a1:83:a4:55:a7:20:f8:ae:c4:41:45:e1:6c:35:ed:4a:81:cc:
46:ab:49:23:65:7a:b8:bb:bb:04:15:ea:23:ce:93:29:23:b5:
2a:a2:2c:d6:a3:d8:32:d3:dc:ce:19:14:3c:4c:d1:9e:ed:b0:
47:e7:a6:e8:c2:3d:92:fa:78:86:01:8f:be:bd:f2:ab:e1:a9:
a8:15:33:67:5a:d4:6f:32:d3:f8:04:00:9e:c5:9d:e2:25:7d:
b1:51:35:ca:bb:f3:6f:64:8a:e2:19:10:f0:95:95:ee:49:6c:
06:85:47:5d:c8:1d:cc:54:c7:75:c9:91:c6:41:54:00:f1:3a:
2d:1e:85:a2:9a:cd:f7:e8:7f:48:f9:34:e3:94:31:17:fd:09:
fc:07:48:ec:e1:82:28:0b:d4:a7:22:cb:a7:79:27:2c:2f:e8:
f4:52:c9:0d:dc:4f:6f:b1:95:78:64:c9:bf:e8:ea:44:df:ce:
90:14:d1:d6:b3:ca:e0:a4:31:0b:bd:93:22:ea:2f:3a:08:b6:
17:48:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:25 2025 by rpki-client