Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: USMmRBel37zuNbHdx6mi5G3uHhLN3j242RORz8bxDwI=
Subject key identifier: A5:D8:EB:E4:A9:7B:88:08:B1:0D:4F:42:85:E8:29:63:34:E1:75:7C
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01961EB75C478712CF4453D33C7ED1312F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 14F9
Signing time: Thu 10 Apr 2025 08:00:55 +0000
Manifest this update: Thu 10 Apr 2025 08:00:55 +0000
Manifest next update: Fri 11 Apr 2025 08:00:55 +0000
Files and hashes: 1: R6yATBC1h2EwfcIFc5v1iDgvxFM.roa (hash: yD0WGrDN2aIkfiLMbi9+H79aakfF+k15A8P07RP+7CI=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: cb+Ib1+1F8XZdNpLBsFmSFxEnt+JHy1QY6sfRIJ7FgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:b7:5c:47:87:12:cf:44:53:d3:3c:7e:d1:31:2f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Apr 10 08:00:55 2025 GMT
Not After : Apr 11 08:00:55 2025 GMT
Subject: CN=a5d8ebe4a97b8808b10d4f4285e8296334e1757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:f2:93:d6:da:b5:e1:76:31:fb:8a:f5:b1:
d5:1e:da:df:c6:56:0c:80:a6:d9:02:da:0b:cf:73:
78:ab:74:8b:b3:c2:8d:88:af:ad:30:75:e5:12:5b:
01:70:7b:0d:f2:94:0c:b6:7e:d4:f9:43:37:61:fc:
ee:66:d6:b7:c7:1b:e9:a7:c7:23:15:38:0e:45:39:
69:d3:df:ae:60:89:1d:a9:49:92:01:16:c1:0c:3e:
5b:44:4f:f1:03:9c:83:c0:85:e9:54:a7:4d:68:f5:
82:08:19:dc:49:b4:be:91:d2:8c:36:ee:65:c0:f2:
56:d2:fb:fc:40:b8:ab:5f:b2:a0:4b:38:43:ae:d5:
ed:ba:f2:ce:b6:bc:a3:03:28:49:35:a4:40:d7:8e:
1a:8d:ff:ab:91:de:21:31:f9:be:a3:b2:06:76:e2:
79:f1:fb:f5:0a:30:12:3a:4d:01:1c:4a:ff:9d:2b:
b8:04:bc:d6:a7:bd:f0:82:56:d6:6d:03:3e:22:c4:
3a:93:cf:35:72:57:bf:d4:53:cc:36:c9:99:14:b6:
8c:08:f6:71:fa:a7:2c:35:f1:2a:b6:5c:f0:ed:ab:
3d:6b:e2:74:4b:63:42:4d:7d:7f:c1:7b:b8:e8:ef:
b8:50:50:2c:75:df:f9:fe:50:7d:6e:53:07:a7:b9:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:EB:E4:A9:7B:88:08:B1:0D:4F:42:85:E8:29:63:34:E1:75:7C
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:7f:38:a3:0e:14:2b:e4:a1:10:23:53:76:a5:18:68:74:
4b:31:74:19:f2:ca:f9:d9:ea:05:46:42:f4:c1:2a:68:da:e6:
6a:22:f9:3b:43:f3:6c:9c:0d:34:d1:84:b2:6c:d9:a3:cc:76:
3a:a8:b8:95:81:09:83:a1:7a:cf:da:6e:a4:fc:75:eb:20:13:
53:0d:1c:14:9a:59:22:24:4a:e6:ad:55:8c:67:5b:10:8a:c8:
4e:23:d8:53:bd:28:b0:77:5b:88:68:4b:66:c9:d1:b6:bf:7c:
7c:b1:2e:86:42:b8:a1:7b:15:0b:9d:5d:07:1b:26:c6:9a:84:
e4:cd:4c:7b:c6:4d:f0:a4:16:b0:11:88:e3:57:7d:83:79:f1:
9b:04:16:5b:4d:7a:22:8f:ae:50:25:e7:32:13:94:d3:42:c8:
11:33:90:73:7f:38:1d:d0:49:f0:9d:95:d9:84:c6:8f:db:68:
cd:9c:c2:94:6a:b6:7f:b8:55:fc:51:62:cb:d0:27:86:88:28:
6e:41:22:82:2a:79:f2:3b:12:1d:66:86:c4:5b:a8:cf:53:3c:
1a:f3:47:30:b6:2a:4e:ef:f4:2a:97:3a:98:59:a0:87:e3:54:
a5:23:0f:59:4c:53:c8:b0:2a:39:52:7c:aa:3e:dd:9c:3f:7f:
3e:b2:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:51:48 2025 by rpki-client