Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 4lUsnHt5O1VmeNQd2HAxDdbrdSY7POrMqH0aIfS8sgI=
Subject key identifier: 64:7C:EB:65:A2:D5:F1:E4:03:34:22:E5:3C:56:B9:34:3D:19:D1:38
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019873E38D62AAFC1E814BFADBC8762C49BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:29 +0000
Manifest this update: Mon 04 Aug 2025 07:02:29 +0000
Manifest next update: Tue 05 Aug 2025 07:02:29 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: RiEbM0PQJLojuG2hb4zggcWxQKt+AFOtnteDLVB38uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:8d:62:aa:fc:1e:81:4b:fa:db:c8:76:2c:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Aug 4 07:02:29 2025 GMT
Not After : Aug 5 07:02:29 2025 GMT
Subject: CN=647ceb65a2d5f1e4033422e53c56b9343d19d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:da:a0:49:a8:15:da:ff:48:86:b1:10:13:16:
92:93:17:2e:5b:5a:1f:d7:a4:cc:6f:06:c0:27:01:
05:24:4d:31:c8:8f:a1:fa:e5:d4:62:01:53:8d:57:
0a:53:5f:c4:3c:c5:1c:ca:66:60:77:d0:91:ec:6f:
fc:15:82:ed:15:2f:8d:e1:7e:b6:66:16:88:04:6a:
4f:59:47:f3:e5:d1:70:5e:ae:7d:ff:05:79:ec:e3:
61:35:0a:62:94:c7:53:b1:e7:1d:9f:26:c8:92:23:
31:9c:61:70:4c:74:17:5f:13:5d:cb:6f:ee:ea:ef:
e9:11:cb:15:ef:6a:97:0c:5e:75:2b:32:d7:bb:9c:
d8:11:67:f4:7a:45:1f:3c:50:ca:6f:9e:9e:43:74:
6e:56:30:2f:1f:11:e2:b3:0d:d9:57:d7:89:ba:c8:
3e:38:12:bc:e4:38:19:72:47:69:07:b2:c7:37:9c:
ad:0c:26:b1:7d:02:7d:9f:ea:cf:f3:81:9c:f7:ad:
bd:2d:ff:80:7c:4c:b4:41:7c:5d:f1:4d:c9:65:02:
d3:c6:24:4a:ac:bf:bd:aa:ca:a1:2c:93:8a:ab:43:
19:63:d3:8c:1c:59:5a:bf:2e:48:8b:5e:75:45:cd:
ac:3c:90:e0:00:7d:9a:3f:eb:81:36:27:28:f1:12:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:EB:65:A2:D5:F1:E4:03:34:22:E5:3C:56:B9:34:3D:19:D1:38
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:77:34:94:25:34:e4:a3:bd:26:3b:aa:76:96:f6:56:38:f4:
1f:2b:9b:e5:8d:e4:16:de:89:59:71:13:b9:20:46:f5:fd:6e:
8e:e6:04:13:3f:82:dd:a8:ba:87:de:78:01:b0:83:36:c5:7d:
37:7d:12:04:76:a8:57:39:83:ff:7e:ea:0a:47:c6:d3:48:0c:
0d:7f:99:7a:cf:e5:8d:2f:d6:de:47:81:3b:2a:48:8f:07:c5:
81:72:99:46:08:11:15:d5:60:56:54:89:d6:5b:f1:e4:0f:ce:
ed:c4:0f:fa:26:95:83:2a:7a:c2:76:51:0f:ac:cd:2d:d6:c0:
98:3e:bd:ac:05:67:2e:14:3f:a3:dc:1e:02:6d:99:4f:b4:f5:
fe:1e:fd:54:aa:96:d5:fa:ed:a8:cb:b3:f8:33:ed:f9:6c:5f:
83:e7:6a:e1:25:a5:2c:d2:ca:cf:3e:58:56:67:3a:e9:d6:58:
3c:0a:dd:6c:b6:06:7b:22:fd:29:9a:b2:67:ad:a7:88:2e:65:
b9:2a:af:88:a3:80:bd:62:0e:c2:ba:57:b2:e5:5d:c0:f5:fb:
fb:b1:3f:22:f7:5f:df:c1:ad:9e:3b:74:34:d4:9d:d4:f5:75:
f4:84:c1:01:4d:72:98:c4:72:b8:29:d1:84:45:f4:e4:37:52:
58:b3:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:24 2025 by rpki-client