Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: btZUx2Ui8XwvfteM/e++gZKmihGvIhYIav11DtS3FEw=
Subject key identifier: BF:9D:BF:41:8D:FF:90:05:B6:6C:B6:4C:7F:2E:91:C9:C1:EA:97:2E
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 0197696111F0CC0782C0611AD4B454C4C836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:58 +0000
Manifest this update: Fri 13 Jun 2025 13:00:58 +0000
Manifest next update: Sat 14 Jun 2025 13:00:58 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: lkOqBTf9GsYwhDw8xyUgfQ5QGfEnINS1JSdBujP5Y00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:11:f0:cc:07:82:c0:61:1a:d4:b4:54:c4:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jun 13 13:00:58 2025 GMT
Not After : Jun 14 13:00:58 2025 GMT
Subject: CN=bf9dbf418dff9005b66cb64c7f2e91c9c1ea972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:1b:ba:87:61:90:41:a9:9b:cf:df:4e:25:
36:2c:a8:c1:eb:aa:df:2b:77:7d:e1:36:c8:67:3a:
28:a6:b6:6a:6b:10:45:ec:c0:1f:d7:9e:41:45:77:
4b:73:76:d8:2a:7c:df:3e:9b:4e:18:ed:1b:26:7b:
fa:72:4e:ce:95:c2:2d:75:d9:38:92:8e:72:a3:6c:
25:a0:24:9d:7d:3b:ba:15:0c:e8:75:65:86:9c:70:
21:e6:09:c9:7d:14:8f:e2:dc:bd:c8:1b:c8:c9:c8:
93:2c:30:37:ca:a1:ec:fa:6d:2c:9e:ce:7e:e8:82:
73:7d:b6:a5:e8:9f:be:3f:8f:1d:48:31:86:9a:78:
cf:97:06:fa:2a:6a:0d:47:05:9c:8c:99:87:e2:e6:
3b:db:9d:18:c4:9a:ae:59:fc:6d:4e:c4:85:95:a9:
4d:0f:c7:b8:50:25:d0:84:5d:7e:03:cb:2d:74:d4:
3e:6e:e5:18:6a:5b:e0:0d:17:ff:60:a1:57:a3:48:
a1:cb:f5:20:d8:9f:54:08:e0:24:9c:61:36:01:11:
f2:2d:ed:26:e2:e3:e4:27:9c:6c:55:ab:2a:32:95:
93:74:3c:e9:24:da:e0:17:86:fb:01:65:1e:4c:71:
f1:28:96:3f:6b:0d:83:6b:6d:9a:81:fa:d1:bc:f3:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:BF:41:8D:FF:90:05:B6:6C:B6:4C:7F:2E:91:C9:C1:EA:97:2E
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:15:98:8b:ff:c3:15:00:b2:b2:3a:e7:66:92:67:c5:28:
5e:67:da:e6:3b:0c:c1:d9:1e:01:ba:d5:7c:05:32:fc:3a:cb:
ea:d0:2f:18:13:f0:fb:ec:f0:4c:be:92:bc:e5:cb:5b:2e:b2:
07:bb:cd:5d:71:92:cd:fe:31:c6:44:ee:62:03:48:a3:46:29:
c7:29:cc:80:01:f3:b4:1b:53:84:80:a1:6c:e3:d4:89:6c:a5:
49:4d:f9:17:dc:13:44:ae:fd:ef:44:ad:9e:96:95:9f:fb:1d:
03:6e:67:c3:4b:a3:59:a4:1e:2f:42:8a:fb:fe:ea:a6:ad:a4:
85:dd:cc:e7:11:6e:32:ff:af:e0:1c:9d:4e:20:46:6f:c6:39:
c4:29:35:b0:c1:4d:9b:17:2d:a4:1a:3d:48:0d:c7:f5:e3:74:
dc:f2:31:ca:ff:cd:ca:bf:64:7c:2b:35:ed:6e:83:d3:37:b5:
a7:7e:66:27:71:d4:aa:97:67:5c:b0:89:51:b3:1a:2c:08:1f:
76:25:75:ea:3a:b4:9a:a7:43:1f:0f:a0:10:a2:88:9d:44:aa:
fd:f8:b9:c3:b8:f3:09:e1:27:41:9c:c9:c8:4b:0f:02:fd:fc:
6b:50:64:ee:ab:a1:14:52:da:f8:f9:b3:79:63:fe:a6:1c:0a:
66:92:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:20 2025 by rpki-client