Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 1kizaKwFAD2AQeh2LLQKUosV9ruUvVvfyIjP7PR47/A=
Subject key identifier: 00:D9:CB:1A:7E:4E:5E:92:F0:7B:03:67:9F:67:9B:B3:63:1F:BE:14
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 01964D7E3585093108D8972C59D6C82770BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 10:00:38 +0000
Manifest this update: Sat 19 Apr 2025 10:00:38 +0000
Manifest next update: Sun 20 Apr 2025 10:00:38 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: osRHkvFBWm/pvaMUNA8y0MAXxKGHrGJxCNIpordbpwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:35:85:09:31:08:d8:97:2c:59:d6:c8:27:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Apr 19 10:00:38 2025 GMT
Not After : Apr 20 10:00:38 2025 GMT
Subject: CN=00d9cb1a7e4e5e92f07b03679f679bb3631fbe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:eb:51:65:7e:d1:18:c2:0c:e9:c0:01:97:
f5:86:c0:42:3e:16:32:2c:54:52:a1:ad:80:ee:97:
dd:42:0e:bf:51:01:ff:15:a4:e1:33:81:4e:ab:de:
d4:fe:76:b5:aa:76:b1:43:1e:1f:d0:24:c2:f1:fa:
95:df:1e:68:d4:6d:d2:c8:a4:a0:b3:b7:54:39:28:
8e:65:83:45:d1:fc:37:7a:c3:3b:da:f5:fc:50:74:
f9:b7:d7:0f:dd:54:cc:06:17:ad:ee:dc:30:28:b1:
cf:71:b0:d8:b0:da:4d:19:41:dd:df:d7:63:5c:db:
2c:a9:df:0b:79:b7:fb:c2:06:34:23:df:a1:8c:d3:
72:f8:0d:0c:99:0d:c0:ef:50:bb:8f:da:cd:1f:87:
e6:ed:59:c9:b6:fc:c0:01:d7:5b:64:52:8e:ef:b2:
e4:f8:06:3d:0f:d2:0c:25:1b:b1:6a:e6:4d:5f:e0:
96:de:23:59:96:08:02:59:e7:74:06:39:92:69:11:
e7:c0:f6:ad:b5:29:2f:fc:ef:9e:18:42:fb:4a:fc:
72:af:db:19:af:f1:fe:3e:3c:04:f6:7b:81:30:c7:
0b:f8:7d:54:85:f7:b9:ad:68:4e:06:1b:4a:6e:7c:
24:68:2e:6a:90:24:77:90:1c:fc:07:62:63:99:8f:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:CB:1A:7E:4E:5E:92:F0:7B:03:67:9F:67:9B:B3:63:1F:BE:14
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:49:fa:54:19:61:a9:6c:b2:ec:0b:fe:e1:a6:25:ca:20:
2f:f1:ff:05:c2:59:8c:a1:d5:b9:a3:67:b1:77:80:cb:8f:49:
82:64:d9:a7:fe:1f:61:0f:a5:54:66:36:ae:7b:c9:d1:58:89:
a5:75:0e:eb:26:9f:6c:26:cc:70:1a:12:cb:55:3f:23:7a:ac:
3c:6e:a5:fe:ab:4b:bb:c8:dd:de:fc:e3:f9:c9:58:6a:55:42:
11:11:e5:d2:d4:22:51:a7:30:0c:b1:2d:b5:5f:dd:66:08:d5:
8d:85:2b:f2:5f:b7:65:84:e2:29:d3:da:67:2e:d0:b6:a1:9f:
1b:b0:94:80:f6:6c:38:6d:4c:c7:dc:44:36:a3:42:d6:e7:3c:
cf:84:f4:58:b0:31:c0:1d:db:73:af:de:ae:3c:f6:5e:c9:fe:
29:a2:d6:d1:ff:36:04:52:39:46:2b:a3:56:20:d5:fe:df:88:
3d:0f:22:d5:50:34:c6:18:e2:83:7d:c2:d0:b9:33:0a:66:0f:
ca:62:4e:85:03:5c:00:93:8c:0c:fb:f3:0b:ca:ba:dd:46:7e:
bc:28:33:47:dc:07:f6:ea:d1:80:66:43:44:35:87:ee:9a:74:
a2:10:e4:30:22:c4:d8:6f:18:bf:82:a6:8d:2e:6b:8a:02:84:
ca:f4:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:53 2025 by rpki-client