Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: MVREdPFp1SNZqugzUH0reD2R+Z7fU07qOANft8KTLIk=
Subject key identifier: 63:9E:29:9F:01:A1:4C:E6:39:8F:20:8E:46:9C:EB:54:2D:17:F5:87
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 01965500EC2137DC3F26FDC992B8A6AE535C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:45 +0000
Manifest this update: Sun 20 Apr 2025 21:00:45 +0000
Manifest next update: Mon 21 Apr 2025 21:00:45 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: 1V8yjNz51I4TT0Y0arPzCeBE3GpOskQ2Rz3YGUYjtf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ec:21:37:dc:3f:26:fd:c9:92:b8:a6:ae:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Apr 20 21:00:45 2025 GMT
Not After : Apr 21 21:00:45 2025 GMT
Subject: CN=639e299f01a14ce6398f208e469ceb542d17f587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:0d:96:95:dc:1f:e4:98:16:d8:b5:3b:83:
42:0f:81:47:b9:2a:9c:6e:f4:22:df:82:25:7c:4b:
17:2a:f8:0c:93:c9:aa:06:b4:79:c4:61:2f:ce:60:
0a:ca:86:ee:d6:f3:cf:00:5d:20:4a:be:b1:06:58:
f4:12:c5:d1:2b:93:ca:5f:55:ed:06:a7:82:6e:db:
0d:0a:61:6f:14:aa:90:0c:d7:70:dd:af:95:76:3e:
de:33:25:2c:df:f7:4b:fb:5a:cc:98:03:ce:a0:68:
fa:e4:e8:b1:22:45:33:5f:4a:c4:88:97:08:f5:54:
cb:12:04:6e:b8:78:86:45:0d:5e:3a:8f:cf:e7:0d:
c8:79:be:79:d2:4d:ed:4e:2b:f5:9c:9f:f6:b0:2b:
11:3f:26:d0:c0:a9:f7:69:36:8c:99:01:23:77:d4:
a7:ba:a2:5c:a0:a4:4b:78:c9:02:63:f8:9b:d8:13:
1f:75:6b:63:90:d1:5e:05:bf:b8:8c:89:fb:92:b1:
0e:85:d3:ed:4f:04:50:2c:32:24:47:d3:49:06:6e:
ae:0b:5d:f6:8e:04:06:9d:87:64:31:d7:8b:e7:44:
26:57:b0:b3:dc:d5:cd:a1:de:cc:f4:5e:c6:d9:21:
8b:0c:af:a4:40:6b:8d:fa:5b:60:33:02:fa:69:b8:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:29:9F:01:A1:4C:E6:39:8F:20:8E:46:9C:EB:54:2D:17:F5:87
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6a:f0:7e:56:a9:6d:87:50:df:20:c0:94:a7:2a:49:52:34:
c9:1d:cc:70:1c:fa:a6:c2:79:89:66:40:93:7c:82:2f:e0:b5:
d3:ea:de:b9:23:ce:22:9d:d7:3d:ea:37:41:a5:fe:10:a7:55:
66:11:e6:a1:c3:5b:6a:c7:b8:34:bd:ff:c0:7c:d7:89:a3:f4:
c4:de:1c:33:04:e6:91:96:17:ea:46:01:d1:c7:b8:ca:0a:c6:
3c:17:3c:ba:d7:68:9c:dc:ae:a7:da:6a:f1:de:b9:c4:f5:89:
aa:61:75:86:e9:90:5b:86:6d:8e:5b:11:a2:56:1f:80:d6:63:
36:1c:ce:9e:4c:a9:f4:f9:c9:71:e7:f0:dd:9e:fa:63:61:1c:
15:dd:64:8f:56:28:ea:1b:89:82:9d:fb:ee:d5:6d:93:13:78:
64:ab:1a:9c:9a:cd:78:e9:f3:4b:2f:90:ad:f2:6f:52:8b:fa:
7a:af:33:b8:8b:03:2c:e5:fb:f6:2b:d2:b8:3c:91:0d:80:f3:
86:a2:f5:b5:5a:f9:0e:30:30:38:0a:0c:33:95:4a:dc:72:12:
29:c5:fd:da:7b:eb:75:4e:03:3b:82:15:73:96:6e:79:cf:6a:
12:f0:b8:9d:aa:90:6d:92:50:6e:2d:4d:3c:c2:b8:94:33:4c:
80:d0:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:19:27 2025 by rpki-client