Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: ejvBfBQp56RHZsYXZw3vbzFiN4wKWZFJtqK146GIsIQ=
Subject key identifier: 25:E6:73:DB:7C:1A:D0:39:C5:5A:D3:F7:3A:EE:2E:ED:4A:A4:BE:A5
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019644E88972FC049D9C186067AAD35306D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 95
Signing time: Thu 17 Apr 2025 18:00:12 +0000
Manifest this update: Thu 17 Apr 2025 18:00:12 +0000
Manifest next update: Fri 18 Apr 2025 18:00:12 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: geTCF/YM7UvG5X/G7jTbmSQ1ZuJfed0aT+rU2ZR3XzQ=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:89:72:fc:04:9d:9c:18:60:67:aa:d3:53:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Apr 17 18:00:12 2025 GMT
Not After : Apr 18 18:00:12 2025 GMT
Subject: CN=25e673db7c1ad039c55ad3f73aee2eed4aa4bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:4c:72:9a:79:e1:d0:ce:4e:15:8c:b1:cc:
74:64:dc:7e:55:cd:78:7f:8f:44:bc:9a:dc:4c:5c:
75:9d:60:c1:68:35:37:c2:01:bf:2d:9a:74:74:b7:
ff:cf:e6:75:a4:9c:15:e1:9e:93:dc:ff:20:10:2b:
22:d3:eb:00:9a:82:0f:d4:3a:5e:4e:b6:08:5a:ab:
c9:f9:fb:74:8b:12:00:3a:5e:59:b8:61:7e:23:3a:
46:a9:3e:f6:28:59:bc:c7:8b:9a:c0:5e:69:03:1f:
18:66:2f:b1:e9:93:aa:9f:bc:df:c2:f2:cf:21:62:
39:0d:e4:be:61:df:88:07:cf:7a:0b:66:dc:70:25:
25:a3:84:1d:a4:12:78:e0:83:60:3f:60:c3:31:4f:
49:3d:2d:52:76:9c:dd:82:5a:3d:ed:9d:1a:b1:e2:
87:db:98:d2:d0:7a:7f:5e:52:7f:f3:81:2a:92:43:
4b:8e:a1:18:da:42:13:6b:08:2e:1e:57:96:69:52:
c4:81:bb:47:4d:6c:e7:77:62:ef:e0:63:d1:1c:4c:
f5:f3:7b:5e:47:f4:d2:55:8a:a7:61:15:8b:6d:3d:
1d:9a:96:e9:f7:20:08:1f:3a:f2:5d:34:d0:41:d7:
78:ca:5a:4b:6c:6d:63:7e:a5:a9:0a:98:69:ea:b0:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:73:DB:7C:1A:D0:39:C5:5A:D3:F7:3A:EE:2E:ED:4A:A4:BE:A5
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:76:30:92:1d:77:99:03:e0:f9:2b:83:3a:76:9c:c6:e7:08:
bd:58:fe:a8:ab:1c:28:38:b8:61:d8:fb:e5:9e:59:16:68:aa:
c7:db:f3:36:37:3e:78:7e:d1:c0:52:d4:d2:81:49:93:45:b4:
06:43:de:a7:43:f9:71:9c:32:07:18:ed:11:0a:0a:ca:e1:00:
ee:d2:1b:1c:01:e0:80:40:2f:1a:a1:e6:de:cc:a8:42:5d:41:
a9:64:95:f3:87:bc:12:94:36:05:94:75:8e:22:6b:ff:e4:c6:
ab:eb:0d:3d:90:9a:6a:48:f4:52:ed:05:13:df:7d:ea:4e:59:
bf:ea:6c:8a:be:d7:53:3a:c2:32:82:f8:4c:13:41:41:ee:53:
fc:df:e6:8c:07:9b:17:c5:ce:1f:61:08:83:cb:14:e0:6f:07:
95:cb:41:e9:35:00:90:a0:07:9e:00:f7:97:a8:39:bc:d9:bc:
2c:8e:ac:15:5c:31:1f:e6:50:20:ab:dd:32:17:87:73:a9:9e:
90:9f:cc:8d:85:70:f5:e9:f7:bb:ea:72:b8:35:ac:eb:fe:41:
2d:9a:71:b5:cb:cc:26:8c:3b:71:21:20:2a:07:c3:1a:0e:a6:
1d:29:81:c0:82:36:11:73:1f:dc:dd:6b:c6:16:7a:61:81:ec:
f1:de:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:50 2025 by rpki-client