Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 0eoKMvtrd7UcTzAel1s0MBhsRCtIIUfQpFS6RixS5sE=
Subject key identifier: AE:24:C3:BC:44:E9:B6:A9:12:EE:D0:13:47:7B:2A:F0:4C:FB:C4:9A
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 01968B810AA9987AC1128648E2E6C012054B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 11:00:11 +0000
Manifest this update: Thu 01 May 2025 11:00:11 +0000
Manifest next update: Fri 02 May 2025 11:00:11 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: MipXRXnvd5dAhF9nSMVOLuEigSMZIbrOVB7OMLLCsrw=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:0a:a9:98:7a:c1:12:86:48:e2:e6:c0:12:05:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: May 1 11:00:11 2025 GMT
Not After : May 2 11:00:11 2025 GMT
Subject: CN=ae24c3bc44e9b6a912eed013477b2af04cfbc49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:2a:a3:0e:5c:6b:02:18:01:9d:bc:4c:b4:
2a:6b:d6:87:84:f1:8f:35:38:ca:42:a6:10:03:62:
2e:63:d2:ec:97:65:e4:16:dd:23:3a:dc:2a:96:45:
79:86:6f:c6:9f:85:03:52:7d:57:fb:d8:c1:98:79:
16:e4:58:ba:3a:00:ba:81:51:d5:26:a1:66:d5:8a:
85:d8:2d:b7:f8:03:79:a0:a0:a6:82:11:04:2c:1f:
0e:38:a7:16:8b:7a:df:49:f7:2a:b5:55:22:a6:53:
18:6d:6f:82:4d:ef:6d:8e:92:5e:f3:9f:d1:02:85:
20:d7:bf:40:01:8f:2c:2d:9f:ee:cd:7d:65:42:1a:
f8:9f:6b:aa:89:99:01:b8:ec:7b:0e:06:5c:c3:d6:
5d:2d:fd:6d:02:cc:e5:73:bc:a8:6f:5f:b7:bb:02:
eb:90:6d:8d:c6:ec:a6:fd:b8:84:fb:30:31:1b:5f:
7a:dc:ac:5e:e5:97:10:8d:99:b8:fd:77:fb:81:79:
da:a2:7a:87:ea:2d:de:00:48:bd:77:7f:1a:ed:d8:
e7:25:29:2c:08:78:7a:14:e7:1d:dc:7e:0f:db:38:
62:b6:25:4f:e3:5f:a5:95:36:e0:df:23:11:aa:39:
5a:88:d2:d6:ca:2a:33:92:d9:1a:b2:4e:22:2a:d3:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:C3:BC:44:E9:B6:A9:12:EE:D0:13:47:7B:2A:F0:4C:FB:C4:9A
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:bc:a4:06:4a:f1:94:c0:19:09:9c:0f:6b:10:6b:65:ca:
9e:76:3b:4c:a6:26:13:9a:09:65:da:32:8a:4e:05:56:70:40:
f5:d4:69:5c:98:b4:03:29:39:2e:2e:d9:45:21:49:fa:d8:03:
de:69:71:a5:4f:69:ca:6f:ac:7f:d7:dd:a2:a4:78:13:c9:3a:
8a:62:75:3c:92:0d:88:8d:da:3f:b5:bd:63:0a:4b:0c:11:67:
7f:79:2f:52:19:8d:70:a0:5c:e4:f2:2e:3b:4a:87:66:f0:93:
2e:6a:bc:c7:88:cf:3c:ec:f8:b9:39:90:96:cb:ff:ac:f8:a6:
03:32:c9:22:be:f7:a0:d3:22:c5:5b:7b:25:c4:5d:3c:dd:ad:
77:3e:e9:2b:57:f1:d2:4f:41:97:a1:e1:f9:f7:99:6d:ad:fc:
d5:93:d0:5d:4f:d1:91:b2:5b:62:d5:c9:05:13:ce:fc:70:82:
50:68:35:0c:4b:51:4b:15:3b:10:ba:b0:3c:f6:50:87:32:d4:
e1:2e:9d:56:df:b3:d8:a0:80:fb:28:ae:bf:cd:44:8c:6d:36:
20:fa:21:c3:14:0c:be:fb:58:f5:1d:d9:03:ba:cd:6d:69:7d:
87:05:d6:64:5c:6c:6e:01:d4:3c:ae:d9:d2:fb:d2:50:92:63:
57:29:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:57:05 2025 by rpki-client