Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: 42ycb7UW81eG2SwRQ71f2YvaFKfkpgo8X1v6CwwhmMc=
Subject key identifier: 05:6E:38:51:49:A9:FB:A1:DA:C5:5A:8D:1D:12:23:20:79:A4:F5:9D
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01974F6A1F3ACDF148AC8A11C029D34B2503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 011F
Signing time: Sun 08 Jun 2025 12:00:44 +0000
Manifest this update: Sun 08 Jun 2025 12:00:44 +0000
Manifest next update: Mon 09 Jun 2025 12:00:44 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 4cHYVYzP/svGQCplwNAjvMxGobuqdcEGmCuo3InpJSs=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:1f:3a:cd:f1:48:ac:8a:11:c0:29:d3:4b:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jun 8 12:00:44 2025 GMT
Not After : Jun 9 12:00:44 2025 GMT
Subject: CN=056e385149a9fba1dac55a8d1d12232079a4f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:67:4d:a3:83:be:7d:33:0a:f6:ba:d2:72:
59:31:12:35:bf:2d:f4:c1:a4:4c:3d:37:71:0a:57:
ca:eb:a2:24:21:77:39:89:33:69:20:41:72:54:ef:
cd:13:a5:76:be:fb:4e:ac:bf:a3:2e:ec:e3:b4:1a:
d0:b8:6a:66:37:ca:52:bc:a5:ff:42:58:e4:bc:74:
74:a9:76:a2:5f:96:e5:d1:a8:31:7e:e0:61:95:e1:
2a:ed:f1:02:09:9d:23:33:21:a7:c4:9f:be:fe:d8:
99:9e:f4:d0:cd:ec:06:85:b0:25:3e:31:03:9e:96:
bd:4c:37:c5:e7:74:02:ba:33:b3:5f:61:70:01:ef:
db:7e:d6:c6:a1:4c:c9:e1:1b:a0:20:6a:38:eb:9f:
44:29:1a:e1:31:33:c2:b8:90:4e:36:2e:75:5b:80:
bf:ad:71:57:87:85:2b:1e:d2:c3:0a:63:53:09:24:
f9:56:df:f6:ae:15:99:21:b9:82:32:d4:35:c9:24:
c0:90:3d:63:2e:5c:c6:09:32:27:b3:8d:10:f1:88:
51:bb:51:df:08:51:59:fc:c1:53:0d:e3:01:dd:c6:
39:eb:3d:dc:fa:44:8f:cb:af:98:db:72:d7:36:55:
b3:2e:a5:c8:dd:c7:b1:9c:2d:57:ed:43:70:e7:b8:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:38:51:49:A9:FB:A1:DA:C5:5A:8D:1D:12:23:20:79:A4:F5:9D
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:48:5b:69:72:d6:a9:88:e3:9e:dc:00:95:d1:7e:78:79:
b2:44:9b:1b:32:4f:bb:9e:92:54:aa:0c:79:28:42:55:80:5b:
28:ad:42:cf:ba:52:2d:1d:52:8e:8d:00:dc:ad:af:66:6d:f4:
37:93:3f:87:a1:e8:7b:ca:11:3a:d2:5d:c1:d7:65:1f:a5:9f:
de:d0:6a:fc:9e:39:87:71:7d:49:15:04:6e:5f:90:a4:1d:6a:
ad:f9:48:69:b5:3a:6a:af:27:2a:a0:7c:0d:40:9c:91:f4:f4:
05:b5:19:7f:eb:57:fb:6e:13:af:11:71:90:de:3f:41:b5:7a:
07:59:9a:3f:02:2d:b6:8d:98:53:c8:fa:4a:16:40:d5:6a:34:
b4:13:23:18:cc:03:37:a6:2a:3a:42:cc:2d:35:38:b1:5a:ca:
46:90:18:8a:7e:c4:dd:2f:ad:40:f7:b7:69:5d:00:c3:b4:70:
35:40:fb:8c:a5:92:a2:b8:82:7e:73:68:f9:33:e3:a4:8d:37:
9c:1d:21:df:eb:0b:5e:74:ca:bc:9a:7b:81:a1:37:57:2c:f9:
64:32:1d:cc:73:dc:e0:13:78:60:92:9d:4f:a1:b4:9e:52:bf:
cd:50:7e:31:28:bc:7b:67:7f:e2:f7:ef:03:0e:36:e8:5a:1a:
22:96:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:13 2025 by rpki-client