Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: +J1BGzeZ4I4ivfCkOO2Z8rHD52D3PMnzp5nilP2Gsu8=
Subject key identifier: 28:C2:9C:DD:01:69:51:EE:D0:71:F3:A2:CD:DC:BE:44:63:0D:D3:88
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 01978661028DF4C1E095D5B6B48CC19C15D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0CFE
Signing time: Thu 19 Jun 2025 04:09:53 +0000
Manifest this update: Thu 19 Jun 2025 04:09:53 +0000
Manifest next update: Fri 20 Jun 2025 04:09:53 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: hax5WPtXP9kqyE5t4WhJgu/nDEfW7OhK4I5CwrnFQYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:02:8d:f4:c1:e0:95:d5:b6:b4:8c:c1:9c:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Jun 19 04:09:53 2025 GMT
Not After : Jun 20 04:09:53 2025 GMT
Subject: CN=28c29cdd016951eed071f3a2cddcbe44630dd388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:4b:d6:be:b0:44:ba:10:6b:9f:91:b4:d4:
d3:3d:58:68:a3:90:21:29:28:cf:19:6a:56:b1:26:
71:07:0e:9d:08:27:b5:ee:3a:03:84:2d:ff:97:7a:
6c:dd:b6:e2:a8:78:a0:fe:5a:2a:71:f2:f1:39:0b:
93:ac:35:e5:e9:a3:34:f4:43:d8:88:45:ee:12:9f:
e7:03:4a:01:fa:9a:68:1f:f8:fd:1a:fe:f9:a5:01:
d0:08:ab:bb:dd:5f:31:fd:07:b9:49:e2:48:34:b1:
04:66:dd:71:09:e9:d0:96:8b:cc:58:b9:3e:fe:ff:
6f:ca:de:ab:aa:03:c1:8b:68:ce:f0:f7:3b:45:02:
c4:60:d5:8e:58:7b:4b:21:e2:f1:87:5c:c8:c2:e0:
64:9e:75:0d:90:4a:ab:c4:9e:a8:46:6c:d7:6e:3a:
c3:69:e9:f5:e5:d0:83:5c:5b:ac:e4:e9:36:23:bd:
a3:a3:25:7f:88:62:0e:79:43:29:c3:a5:9d:e9:6e:
2f:ae:b3:ce:54:e1:58:b1:03:38:a5:b7:cf:c1:6a:
60:d2:d1:49:d9:63:2e:b0:e8:a4:e7:ce:a4:7c:b0:
63:eb:b8:f0:22:1e:46:37:ad:08:4d:bf:a2:45:18:
24:a4:fd:c9:7a:81:b4:75:71:e8:be:b5:b1:6d:29:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:9C:DD:01:69:51:EE:D0:71:F3:A2:CD:DC:BE:44:63:0D:D3:88
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:63:cd:48:e6:88:8d:c7:0d:ef:a1:46:b6:aa:3e:5c:8c:
30:8f:66:ba:44:d0:e7:af:96:30:a7:d9:ed:3d:67:1d:61:91:
47:9e:67:aa:02:1e:2d:ec:4d:5a:f7:98:f4:72:5b:78:c5:f9:
f4:93:22:38:b0:26:34:41:0e:c9:3d:e4:7e:49:9e:82:3a:e9:
68:94:6d:78:7c:45:e7:95:3d:b3:8e:84:db:b7:77:e4:61:1f:
97:d6:a0:84:50:e4:2a:45:d3:21:f4:91:06:e4:5d:9a:3d:be:
0d:ec:fd:89:0d:f5:09:11:fa:96:e0:6d:62:af:ab:9c:0b:6f:
e9:89:05:33:00:c8:c1:0b:a0:22:f7:9e:e3:e8:e6:c2:10:98:
34:7e:06:d7:7b:a4:d7:75:f4:78:de:d4:e0:5b:17:01:96:0d:
fb:51:bd:fc:c3:c8:c4:e8:c3:60:5c:07:21:07:76:a8:5f:a6:
66:82:0c:3a:8e:b0:cd:1b:68:de:67:c2:1d:c9:2a:56:9e:dc:
d9:3b:a0:0f:0f:71:9c:3a:c8:01:2b:a5:6b:4b:68:4e:c4:7e:
99:1b:ac:e4:3f:a3:15:e4:85:ad:57:ad:9a:fc:9a:3e:9c:ce:
af:3e:eb:64:fb:86:ab:40:f6:0d:5c:97:14:1b:ed:6a:ca:a3:
ef:88:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:02:09 2025 by rpki-client