Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: yrQnWdbe1oCwyedjp9NkzbqfdnDgu2K2TMAYisuGRoc=
Subject key identifier: E5:EA:F5:B1:8B:AA:23:5E:BE:F2:03:38:49:94:07:E2:06:E2:D1:00
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 01960FB2AE6F75B7854EC80EEDE69702A058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 0330
Signing time: Mon 07 Apr 2025 10:01:30 +0000
Manifest this update: Mon 07 Apr 2025 10:01:30 +0000
Manifest next update: Tue 08 Apr 2025 10:01:30 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: GvQR4Xazi6NkrKgcmTBViOGe9liwa2TL6A6UzQ6bEWg=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:ae:6f:75:b7:85:4e:c8:0e:ed:e6:97:02:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Apr 7 10:01:30 2025 GMT
Not After : Apr 8 10:01:30 2025 GMT
Subject: CN=e5eaf5b18baa235ebef20338499407e206e2d100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:12:f7:b5:d3:ee:05:ea:b2:00:10:80:c0:
85:65:b7:f6:48:bd:74:8a:b2:9b:5e:83:c3:8c:6d:
83:be:aa:50:43:2c:ff:64:02:0c:df:ac:6e:e8:4a:
33:c6:54:03:39:26:68:e0:d4:5e:58:b4:a0:88:fc:
ec:be:18:97:08:6c:08:d1:01:9a:37:3a:ce:4f:a1:
23:c5:f6:8b:71:e9:27:e6:ca:f9:0e:d7:3c:50:91:
87:4f:c3:cd:c3:fb:38:32:9f:67:f1:73:b1:a6:97:
a0:63:b0:04:b7:54:f4:eb:33:ab:cf:5c:bf:10:d5:
b2:84:25:a0:c9:28:0e:13:be:01:4b:dd:88:fa:8f:
b8:93:89:0b:64:08:00:14:40:b4:ca:ec:c8:8e:06:
39:3e:24:ac:4b:09:ce:d5:ac:d5:22:4d:d5:2e:a7:
39:99:39:82:26:ef:72:47:a6:65:8c:6a:6e:b1:ef:
fc:cc:31:01:dc:65:12:83:3e:63:83:89:4f:01:a2:
b0:bb:54:ce:4c:d0:3b:8a:ad:38:90:7c:4c:c5:c0:
27:ea:66:00:ed:df:46:89:83:7a:40:75:0f:57:6b:
d4:b4:27:7a:bf:fe:f6:33:aa:d3:f4:45:fa:f2:69:
20:33:51:b4:89:18:ee:98:15:f5:25:7f:7a:7d:e5:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:F5:B1:8B:AA:23:5E:BE:F2:03:38:49:94:07:E2:06:E2:D1:00
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:d8:3d:75:9e:85:07:e0:0d:4d:38:a7:f9:cc:55:26:8c:
9a:8b:21:d8:0a:57:9c:03:01:51:bf:66:1c:5d:89:73:e1:3b:
f7:ec:c4:5c:45:5b:f7:a4:66:a4:c5:5d:6d:bb:fc:c3:d2:93:
6b:8f:dc:41:49:6c:ef:39:43:8c:52:89:59:48:f5:3c:d6:cc:
57:03:a9:8f:3d:d2:54:3e:17:0c:77:91:18:01:8d:24:2b:fb:
cc:af:07:ea:03:f2:cc:02:01:20:09:3a:7b:db:00:07:28:56:
b5:99:ad:ef:05:fc:6c:85:57:3c:9f:d3:13:a0:e5:f6:68:11:
7a:af:69:71:c6:b1:2d:0d:5b:a2:bf:3f:8e:b1:bb:07:04:02:
72:89:42:ce:ba:91:41:1c:63:28:7f:d4:a1:ee:8c:ff:2f:e1:
e7:72:0b:59:09:91:4e:4e:61:63:ae:53:26:52:d5:9e:ae:60:
de:84:8d:5e:11:ef:bc:c1:9d:58:03:e2:ca:89:c7:55:3c:f4:
7e:4f:f6:1f:d2:e6:e6:25:bd:86:87:b5:a0:be:b9:bd:3b:64:
90:e1:e9:6a:71:a5:83:66:ea:b4:f0:98:b6:df:61:20:86:03:
42:e9:0c:13:27:49:ba:d2:7f:ad:b7:a7:53:eb:75:b2:1f:d7:
f2:91:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:59:19 2025 by rpki-client