Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: ZQjWCYNyiY/VutpkeweGHa6lenxEqZnsJ6qR7ARSUls=
Subject key identifier: B4:BD:94:CD:3F:9B:3A:A4:1F:87:DB:C0:1A:63:C7:4C:F3:C3:93:F3
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 01987B9BFF20F3A9BD48A53AF2E5D9A47740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 0471
Signing time: Tue 05 Aug 2025 19:01:17 +0000
Manifest this update: Tue 05 Aug 2025 19:01:17 +0000
Manifest next update: Wed 06 Aug 2025 19:01:17 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: Ezw+khlFXJVXo6HSDEF7kCK9VoJhS/Yxhr3CRD9xchE=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:ff:20:f3:a9:bd:48:a5:3a:f2:e5:d9:a4:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Aug 5 19:01:17 2025 GMT
Not After : Aug 6 19:01:17 2025 GMT
Subject: CN=b4bd94cd3f9b3aa41f87dbc01a63c74cf3c393f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:32:1b:d7:55:60:4d:85:96:18:8e:4a:b8:
5d:75:07:9f:71:c9:cc:b2:ab:01:08:c4:d3:92:f5:
d0:67:5d:e2:6e:f4:31:57:6e:db:fd:57:b3:7a:e6:
4b:93:cf:e6:db:b1:a5:81:19:39:63:2a:a0:5f:db:
00:22:57:de:5f:d9:7b:f5:1f:3a:25:41:95:33:ec:
78:7f:ca:b3:00:f8:f8:85:93:0c:b9:6a:f6:c3:ef:
dc:f0:1e:d2:a2:cc:5e:53:96:a3:28:23:b7:d8:63:
2d:07:57:a5:4b:ee:aa:0e:7f:ef:51:da:6e:03:cc:
7f:86:5e:3c:25:49:a3:b7:d4:c9:32:81:6f:76:98:
d6:23:ec:6c:8d:33:bc:d1:82:6c:50:fb:45:31:fb:
14:7a:ab:17:cf:bc:0c:d0:32:f0:31:3e:9d:29:53:
33:af:24:f0:cd:fd:23:51:0b:3d:c7:8c:51:58:b2:
27:18:27:13:a6:5a:63:39:75:ff:96:f1:d6:9d:3f:
e7:37:49:fb:ff:5a:2a:95:07:78:9b:55:df:65:aa:
40:8f:b6:46:7f:e1:b3:8a:cd:32:e1:7a:bc:84:21:
4e:e8:69:57:60:78:39:c1:98:d7:4d:5b:e6:7b:6c:
7d:32:da:68:0a:3f:da:79:07:19:f3:1d:40:5c:da:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:94:CD:3F:9B:3A:A4:1F:87:DB:C0:1A:63:C7:4C:F3:C3:93:F3
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a5:14:ec:40:27:bd:dc:eb:26:e4:c9:d0:5d:78:c8:fc:63:
d2:d5:bb:43:d7:0b:8c:92:94:0c:05:d5:9f:33:57:b1:8c:73:
12:98:63:57:8f:63:69:fd:23:5b:72:1d:5c:f5:ca:63:ab:8a:
b1:f3:cd:64:68:db:3b:d4:55:1c:7d:b4:85:7d:5d:a9:85:2a:
ef:e7:3b:56:cc:85:21:95:84:13:e8:5a:f4:f9:23:90:f8:42:
e1:e1:10:c7:fd:b8:c4:97:85:7a:fb:8d:db:90:85:c8:f2:bd:
06:23:57:41:6e:80:e9:ae:1d:79:29:59:bb:41:d8:35:17:e3:
24:a5:77:9b:44:98:75:9c:03:ef:f4:b2:2a:10:6f:7f:10:fb:
22:b9:75:f2:08:7b:76:34:75:e2:ed:b8:f4:68:07:54:c2:c9:
16:1d:c4:b9:85:73:42:34:9e:2e:07:18:25:11:15:48:79:10:
7c:40:15:d5:cc:5c:50:82:c9:3a:5b:55:73:04:13:02:cd:93:
d2:4c:a0:c2:39:fe:4d:b1:54:ff:ac:ff:6f:e9:ed:1e:28:27:
67:d1:51:5f:d2:c7:d3:60:81:de:4e:41:45:6b:ca:f7:a8:72:
ff:1a:84:2a:22:76:09:4f:25:a0:cf:b2:80:05:1b:ff:df:a1:
d0:8e:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:30 2025 by rpki-client