Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: L9A/gw8VtOt5Q37P+OGj/DgS+fHTUpwV6klSrUTz0BM=
Subject key identifier: D0:5A:39:78:F0:64:41:05:42:9F:F4:DA:72:9B:21:EA:FD:A8:48:BF
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 01984966F800274363E55215E94EBEC8325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:02:21 +0000
Manifest this update: Sun 27 Jul 2025 01:02:21 +0000
Manifest next update: Mon 28 Jul 2025 01:02:21 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: tIv6GU+XBpZXCQG4+El5nP9xQOLR76wFrbdscbXnmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f8:00:27:43:63:e5:52:15:e9:4e:be:c8:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jul 27 01:02:21 2025 GMT
Not After : Jul 28 01:02:21 2025 GMT
Subject: CN=d05a3978f0644105429ff4da729b21eafda848bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:99:85:64:e1:46:1d:7b:d8:38:6c:89:e8:
58:f1:ce:21:49:12:b4:e2:47:cb:f2:a3:e0:be:30:
fc:42:63:83:b6:74:46:ff:42:24:09:9b:5d:09:f7:
67:b0:79:00:5e:fe:4d:f0:06:f8:c4:a1:5d:0d:1b:
b2:68:83:bf:79:aa:90:7c:53:ab:79:4f:2d:36:da:
38:4c:7d:66:a9:61:f1:cd:6b:ec:2e:d0:95:9f:67:
29:cf:c6:5f:62:07:a6:27:43:a7:68:5e:93:8d:73:
10:04:87:d9:f6:dc:88:2a:9a:f2:8c:2b:dd:4f:3e:
10:31:d9:3c:9f:46:a7:08:cb:32:0d:93:88:af:e2:
35:52:50:dd:93:2f:6f:a7:b5:b9:c7:bd:13:26:0a:
f0:af:9d:87:c3:0a:d4:eb:58:d9:ab:aa:74:26:1b:
e9:e8:80:bd:05:b2:29:44:e3:a5:1c:e3:e1:99:99:
75:a2:88:7c:69:6b:aa:58:91:59:c8:aa:14:2b:0e:
ae:17:12:5a:65:74:74:db:03:33:8c:c2:a3:04:08:
54:65:af:d0:f2:d9:0c:52:cc:4e:71:d4:94:63:47:
38:a7:06:99:21:62:90:78:20:f9:78:79:f4:fc:0a:
76:26:8e:d1:cf:6c:29:e1:6f:be:62:7e:98:ff:4d:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:39:78:F0:64:41:05:42:9F:F4:DA:72:9B:21:EA:FD:A8:48:BF
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:37:8c:91:d6:f7:a8:7f:dd:d6:b9:92:a1:d7:e5:1d:dd:
98:b0:52:b6:fb:c6:b9:46:ea:d8:e9:a4:01:17:22:5f:68:a9:
1d:78:17:03:5c:dd:0e:bb:73:a1:dc:e9:d0:78:a1:60:db:e7:
3e:d7:e1:8e:11:4f:68:58:a8:ea:b9:b1:9b:41:80:0d:18:3e:
c9:c0:04:27:17:19:5b:72:05:8e:81:6a:12:28:c1:5d:0b:3c:
fa:86:9c:6b:40:1f:95:1a:0b:41:55:c4:81:e6:6a:16:fb:3c:
6e:c3:62:9e:d0:07:7f:df:cc:8b:a8:30:00:7e:6c:8e:8b:17:
b4:03:6b:fc:a9:a1:7b:ad:b8:40:cb:87:1b:18:01:9c:03:22:
5a:67:8b:82:70:1a:ca:2b:14:88:9b:ce:66:37:c6:d1:55:61:
db:bd:28:e6:8d:b4:92:f6:f7:32:54:ae:29:3b:36:b3:b6:16:
1d:e2:20:01:6e:ee:d8:ad:90:68:cb:ee:8b:ec:96:dd:ab:a6:
6c:aa:6c:22:98:cb:38:62:44:cd:38:86:46:8c:ed:f6:7d:f5:
7b:37:72:97:fc:df:4a:63:2d:38:3d:e2:96:2e:4e:15:cb:63:
21:04:fa:3b:a1:2a:1c:86:32:7b:03:6d:bc:f0:b4:f2:88:d3:
9e:24:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:13 2025 by rpki-client