Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: kl+GVdB6D9dXYdJ7dUBJu3BuojUMNQMs9kYsWyC8f/o=
Subject key identifier: 74:F7:57:01:DB:86:FD:AD:1C:2A:D9:48:F0:26:CD:2B:57:B6:8A:69
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 01968D393652E5855F9973D1111E91DE23EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0C7D
Signing time: Thu 01 May 2025 19:00:58 +0000
Manifest this update: Thu 01 May 2025 19:00:58 +0000
Manifest next update: Fri 02 May 2025 19:00:58 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: X9bHv9qkmmhYgB7+MCPDT5QUD8QPDdPhB7AZZk94g4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:36:52:e5:85:5f:99:73:d1:11:1e:91:de:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: May 1 19:00:58 2025 GMT
Not After : May 2 19:00:58 2025 GMT
Subject: CN=74f75701db86fdad1c2ad948f026cd2b57b68a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:7a:4e:c0:b1:45:d6:21:78:c0:d4:3f:60:
d3:d5:a9:84:03:c2:f2:64:d2:e8:70:47:1b:51:dc:
33:48:41:0e:1f:f9:59:2b:4b:2b:0a:fc:54:08:99:
29:7a:f9:e5:16:24:b8:c8:a8:68:d5:ec:53:ef:1e:
e9:d8:37:9d:d1:07:4b:57:f2:e0:7e:e1:b2:8f:e0:
15:80:04:77:e3:9f:64:1c:08:53:39:e7:da:9c:c6:
9b:ad:9f:0e:e3:c3:00:98:9b:c9:e0:8b:8c:45:b3:
4a:06:73:a9:a0:82:48:8c:26:91:77:2c:da:99:76:
e8:7b:b3:f9:45:63:98:53:f2:60:46:fe:d2:cc:12:
42:2e:9e:b4:ce:c6:19:ce:81:84:57:fd:9b:aa:12:
0d:a4:a4:08:3b:41:b6:92:d5:00:e6:5e:ca:ba:0b:
14:b3:54:6a:5c:9e:4e:a0:8b:48:dc:ff:fb:20:1f:
ca:61:6b:34:f4:65:cc:07:13:cd:b0:f2:3d:d8:1d:
06:93:03:7a:cd:5d:1c:fd:95:fa:70:0b:8c:21:c8:
14:60:a8:f3:6c:b0:50:4e:2c:b8:7c:db:6f:bc:bf:
fb:58:1e:46:73:d8:2e:87:ba:e3:4b:f3:f6:f4:22:
eb:73:52:7c:b2:c0:3f:20:0b:6c:ce:e5:7f:7c:fa:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:57:01:DB:86:FD:AD:1C:2A:D9:48:F0:26:CD:2B:57:B6:8A:69
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:8e:2a:cc:f7:ff:72:cb:c9:98:8a:4f:7a:a9:cc:01:38:
9f:ff:cd:40:88:01:90:76:02:a5:64:4c:56:87:f7:87:91:59:
ef:08:6a:6a:bd:01:84:d2:6d:4c:66:33:3e:06:f6:93:6f:98:
80:76:be:30:8b:f2:ad:ee:fd:10:a3:ab:64:b4:7f:11:1e:da:
8b:f0:71:63:8d:b2:d2:e0:70:37:42:69:8e:68:a4:e0:ed:6b:
9e:0c:ec:62:07:35:8d:1d:44:d1:46:21:03:19:5b:13:6b:07:
5c:89:12:ba:15:b9:89:e9:02:c7:8a:c6:3d:4d:f3:58:13:fe:
f3:1c:77:c0:a2:0d:d8:98:2d:21:c6:b6:f6:18:8d:85:7b:08:
d4:02:81:7f:32:5c:14:dc:c5:ca:a9:b6:54:94:98:82:c7:07:
17:2f:08:f9:a7:e5:27:de:04:11:dc:c0:6b:ac:3b:b1:a7:38:
2c:75:5c:87:20:cb:d3:cc:48:11:ae:c2:0f:79:11:6f:65:5e:
d0:e7:2f:2a:9e:0d:28:fd:9a:6e:be:ed:c0:bd:97:bc:93:ef:
31:db:da:5c:5e:10:e6:8b:b0:9c:d0:17:62:e6:7d:0e:be:22:
ab:45:4b:a7:40:27:26:fc:39:3e:21:1e:39:ec:90:80:57:6f:
1f:dc:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:18:21 2025 by rpki-client