Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: z3hkvi4PDPJRxxTJlPqOkZDsWhbu2iRdozFrRL3WzQU=
Subject key identifier: 1E:2C:56:10:6A:E2:AD:E3:3D:12:58:85:EB:9D:66:7E:1D:D4:82:37
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 01974A7B3F2ED25DEA201000BE9F47793E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 03D3
Signing time: Sat 07 Jun 2025 13:01:20 +0000
Manifest this update: Sat 07 Jun 2025 13:01:20 +0000
Manifest next update: Sun 08 Jun 2025 13:01:20 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: XQx/5yGc0dTAommqJTy347kWaqRsnbEEA0bffMedfmw=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:3f:2e:d2:5d:ea:20:10:00:be:9f:47:79:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Jun 7 13:01:20 2025 GMT
Not After : Jun 8 13:01:20 2025 GMT
Subject: CN=1e2c56106ae2ade33d125885eb9d667e1dd48237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:e6:f7:02:18:09:68:18:37:52:cc:2d:8a:
eb:71:75:ac:bd:18:d5:54:59:ee:c2:36:38:6f:ca:
26:03:29:97:d4:fa:e1:a7:09:eb:df:9a:b2:54:55:
5b:19:7c:af:f3:0d:02:e2:a5:ca:61:f8:01:f4:00:
82:2b:b9:71:c3:98:b9:09:8b:36:01:ff:be:50:55:
f9:16:aa:26:f5:18:11:ff:b7:60:84:1d:31:df:9b:
0b:7c:61:ff:e7:c3:6e:6f:8a:b6:d1:31:2c:0f:28:
58:49:42:79:ff:ee:7d:b0:ca:02:41:d2:7a:3c:e1:
c9:ef:b3:a0:a7:c8:3f:cd:fd:80:96:5a:20:1e:80:
8b:85:c0:27:2f:b8:73:49:54:01:c5:cf:97:ab:56:
3d:3f:cf:16:b2:2b:55:86:08:78:11:eb:0d:c4:27:
99:e7:6b:c5:e1:72:d4:5c:84:07:99:09:13:07:8a:
e8:23:6c:bc:d5:e2:a4:54:78:6e:c1:a4:38:4a:a2:
f1:ed:c7:e1:85:2b:5f:4e:72:af:a8:59:6d:c4:99:
b9:f7:29:7c:20:8f:f5:8c:41:ec:59:a6:48:48:fc:
89:7a:d4:66:a6:f3:56:4d:7b:f2:c0:13:28:09:92:
95:04:0f:0b:87:5c:04:a0:66:d4:9d:e8:25:26:6a:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:56:10:6A:E2:AD:E3:3D:12:58:85:EB:9D:66:7E:1D:D4:82:37
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8d:c5:84:9b:4a:b7:01:b4:db:98:79:61:32:c5:0b:00:d7:
3a:af:e4:a1:ac:2d:58:6e:1c:60:ae:ab:0f:21:8a:24:a1:ba:
b6:1c:f3:de:4c:2b:d4:fb:35:df:2a:cd:32:e6:64:b8:bb:57:
e2:a5:01:45:38:ab:f8:c9:2b:6f:a4:b6:97:b0:12:65:20:13:
a9:2c:b1:fb:b8:32:ed:36:08:c5:e1:81:a2:d0:e6:f2:8b:ac:
92:ad:80:bc:68:98:6f:f7:86:f8:d3:25:6e:0b:1c:a1:3a:b5:
e1:09:bf:8e:a4:7c:d6:f7:80:92:cf:92:bd:cc:3e:55:2a:e1:
7d:a1:c3:e4:7e:ad:80:0a:05:a2:b8:05:3d:bf:0a:75:41:d2:
6d:a7:4a:ee:3d:a9:ff:ea:8b:7c:f6:f4:76:26:d1:9b:a7:1e:
27:8f:45:a0:7f:b9:b6:3b:fc:0e:76:33:32:72:d5:8a:0f:a7:
16:db:8e:80:96:66:95:80:08:91:a9:6e:c6:34:97:30:a5:13:
94:06:91:52:32:20:9a:cc:b2:aa:ad:0e:97:26:99:ca:b2:08:
7c:8d:d7:60:06:91:a8:f0:e3:ba:d9:11:74:fb:6c:32:b2:59:
59:83:6f:fd:a1:52:b2:4f:51:1b:dd:70:4c:44:55:75:44:0b:
76:a2:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:13:33 2025 by rpki-client