Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier: 9qXZAmKyX1EcLJJ2EvezaaPxd4MiuZW2ZKWW7pMm69Y=
Subject key identifier: 54:28:12:A9:78:C1:7D:50:54:29:9F:FB:52:2E:70:13:9F:38:3D:82
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial: 01964EC81DE4B44D24B0C5DA8B5B66B58161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 16:00:59 +0000
Manifest this update: Sat 19 Apr 2025 16:00:59 +0000
Manifest next update: Sun 20 Apr 2025 16:00:59 +0000
Files and hashes: 1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: 3O/lWqulniNTrU4m0OxcRZ2Zj83kKMtq+OOzcY9BeEQ=)
2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:1d:e4:b4:4d:24:b0:c5:da:8b:5b:66:b5:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Validity
Not Before: Apr 19 16:00:59 2025 GMT
Not After : Apr 20 16:00:59 2025 GMT
Subject: CN=542812a978c17d5054299ffb522e70139f383d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:32:03:c8:0b:51:7f:c3:89:ad:78:b3:15:
eb:e8:80:55:86:c3:3e:31:f8:84:e3:6c:5f:3b:f8:
9a:3d:e2:ba:b0:b8:25:ca:4a:03:71:37:6f:bf:0f:
94:91:14:80:c8:6f:51:3b:37:82:79:48:26:8f:6e:
65:2d:c9:09:3b:ff:63:e1:3f:17:74:74:d6:ba:1d:
72:cd:d2:0a:a9:72:9c:6f:1c:e2:7a:65:9d:a1:9d:
82:57:71:59:f1:a5:bd:83:55:46:23:f7:9b:0e:78:
7c:55:af:56:78:f4:d1:09:37:12:3b:e9:84:9d:b0:
ca:11:a7:6b:03:41:eb:1f:b2:5c:f7:14:39:09:3f:
fd:86:0f:4f:e9:c3:26:9a:e7:be:7a:20:dd:5c:86:
ce:5a:c2:ca:61:46:e3:fc:bd:af:37:12:bd:3c:59:
bd:8b:a9:1f:c3:a3:c8:73:ad:91:71:e3:d9:6c:fc:
b4:a9:5c:12:bd:06:fb:b3:dd:f6:ed:bd:d8:ee:41:
fb:da:51:01:df:97:75:1a:0c:97:a5:01:cf:3a:a3:
f5:9a:34:5c:bc:f8:ea:fc:d8:dd:b5:a1:2a:84:1a:
71:16:6f:8a:44:e6:27:7c:dd:50:94:61:5b:60:57:
39:6a:11:f8:1a:35:91:2b:43:90:01:9c:a1:1c:14:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:12:A9:78:C1:7D:50:54:29:9F:FB:52:2E:70:13:9F:38:3D:82
X509v3 Authority Key Identifier:
keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:60:c4:2f:87:ec:dc:01:71:88:21:c7:a3:e4:6b:84:2e:93:
44:0a:03:cb:38:5b:31:58:54:dc:fc:06:75:5a:da:d0:4f:97:
b9:06:1b:43:9f:dd:86:d3:27:96:f0:fb:8d:d6:62:32:b9:6b:
9f:c5:d5:03:f7:4f:d3:60:5c:71:fe:31:21:d9:8b:0c:46:b1:
3f:cc:a9:5b:e4:97:87:03:fb:d0:82:67:02:5c:e3:73:2e:92:
f2:8c:6c:9d:5d:c5:af:55:37:aa:71:fc:05:51:5e:79:87:ec:
0e:2d:c7:2d:b5:cc:67:21:ca:2d:b7:d5:04:75:d4:61:40:1a:
37:8f:ca:b2:69:c5:b3:4e:dd:4f:41:b3:98:47:04:d7:cf:00:
4b:ac:a3:be:9b:97:5d:43:ab:a5:f2:5c:c1:a4:ec:aa:68:67:
b3:c9:52:41:8e:66:a1:d6:ac:a5:e9:7a:2d:ac:11:6d:cf:1d:
43:8a:e1:ca:f4:50:ad:f6:b3:24:02:3c:e4:51:fc:4d:d6:77:
27:a7:00:9b:f2:0f:dc:59:89:7a:2c:bb:3d:d3:87:87:66:84:
b9:ae:9d:7e:86:7a:1d:18:b6:d3:8b:82:14:62:fa:2e:b0:d0:
fb:e2:a7:b8:cd:64:25:3c:c2:ec:2b:f6:31:40:09:02:8e:05:
84:76:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:33 2025 by rpki-client