Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: LTkZmfJ+THiAM+5W5vmgsqlx6Ap5WOf/kFN5SHlB9/o=
Subject key identifier: 26:D0:70:88:74:E1:1B:56:81:73:04:C8:B2:F3:03:63:E4:83:E4:BF
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 019658A6B2F72649EE7AC6F7D0098789603D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 0FE4
Signing time: Mon 21 Apr 2025 14:00:41 +0000
Manifest this update: Mon 21 Apr 2025 14:00:41 +0000
Manifest next update: Tue 22 Apr 2025 14:00:41 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: GJ/BT1Yh+d+JtKVL2bT3bMdtBnHncb9MZmO0+BU5RxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b2:f7:26:49:ee:7a:c6:f7:d0:09:87:89:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Apr 21 14:00:41 2025 GMT
Not After : Apr 22 14:00:41 2025 GMT
Subject: CN=26d0708874e11b56817304c8b2f30363e483e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:22:4e:3b:64:e4:cb:9d:15:23:88:6e:a9:
88:fc:c8:b7:a1:b5:8a:d0:c7:14:e7:c0:20:8d:09:
0c:ba:a8:ae:d9:9f:5e:89:fc:75:2f:8f:61:39:57:
34:78:3f:dc:55:a3:a4:39:69:1e:2b:60:b1:c4:62:
ae:7e:c1:86:ae:e3:65:da:df:cd:01:b3:42:9d:47:
4b:d3:5c:6f:cb:ea:e3:91:4c:48:8e:1f:c8:bf:49:
1f:3e:a1:c9:93:c3:6d:49:a0:1a:bc:a9:a2:76:46:
78:b1:95:d2:ba:30:11:a1:35:b0:27:dd:ae:f2:45:
5d:70:c5:ab:4f:e2:af:15:54:ee:fd:db:aa:3f:5e:
c5:3e:c6:fd:8d:b6:6b:45:46:13:0a:1d:1d:b4:83:
a1:1d:94:4f:87:9e:b8:39:82:e3:c2:29:76:29:8a:
59:2b:46:ff:4d:0f:46:a5:31:7c:84:75:7c:63:55:
2e:ec:d0:ff:ba:52:7f:28:cf:73:a4:33:7a:85:05:
90:ea:d7:91:5b:13:f3:a6:82:01:3a:11:84:b6:a9:
88:dc:32:57:fd:8c:04:86:27:84:94:a3:19:89:a1:
7f:94:4c:e8:2e:77:4d:67:3d:f7:cd:12:a6:73:24:
90:03:f0:95:fe:c9:3d:3c:35:79:08:5c:1e:6c:1e:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:70:88:74:E1:1B:56:81:73:04:C8:B2:F3:03:63:E4:83:E4:BF
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:0f:1c:a1:4e:17:a6:e6:fd:96:c9:26:ac:ab:e8:b7:8b:
5d:a8:b5:51:75:86:45:80:10:86:18:1a:c8:53:f1:64:20:75:
c8:cb:bf:73:86:c9:7d:1c:05:f6:38:28:2d:bd:36:a1:e6:6e:
8c:b9:d0:73:0a:22:b4:11:29:b4:d5:5b:37:52:15:bf:41:7f:
4e:d6:7d:a2:1a:77:6d:9a:c3:49:65:d7:33:8f:6f:53:8a:e2:
21:47:09:17:e3:bc:51:57:b3:5d:63:1b:20:88:f1:ba:72:44:
b0:6f:a0:c2:9e:ae:fc:f4:dd:f4:bc:68:fe:e1:a8:9b:9a:9d:
29:ee:f5:37:5c:4f:8b:bb:ab:0c:67:ed:e7:3b:bc:d2:f5:c3:
03:c8:e6:4a:cf:ec:0f:68:8f:e3:61:fc:e1:f7:45:4a:bb:19:
d3:e9:60:14:23:28:34:a6:12:b6:93:17:cf:da:d1:82:1a:6e:
b0:9d:64:af:6e:ae:69:f6:1c:43:18:88:a4:10:0f:30:49:07:
c9:20:6a:5f:3e:cb:23:81:bc:a4:b6:48:f1:52:be:b4:14:b4:
e7:38:ac:f1:c9:08:99:7e:03:9d:8e:7c:00:df:d3:f4:dc:07:
5a:04:76:8b:fe:39:72:d4:e8:0e:bd:05:01:f0:5c:2e:b9:b0:
06:fe:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:20:42 2025 by rpki-client