Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: iIYixjwEp94U5LSGAo1LhCvyVl34ZiaSufw/HYAMJyc=
Subject key identifier: 45:02:A1:5A:DD:F4:81:8A:E3:F1:D2:87:85:14:81:A7:DA:36:F8:B3
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019752348868604CB8D580A74EBD47C3C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0CE3
Signing time: Mon 09 Jun 2025 01:01:03 +0000
Manifest this update: Mon 09 Jun 2025 01:01:03 +0000
Manifest next update: Tue 10 Jun 2025 01:01:03 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: KL45VT/U/z3/f1O5Z/LjCiKhOvOBP0X6Shlqw+fS7Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:88:68:60:4c:b8:d5:80:a7:4e:bd:47:c3:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Jun 9 01:01:03 2025 GMT
Not After : Jun 10 01:01:03 2025 GMT
Subject: CN=4502a15addf4818ae3f1d287851481a7da36f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:db:98:c5:6e:1e:0b:6d:a0:a5:da:ab:f4:
d2:0d:10:23:70:2d:68:78:61:53:21:46:a6:50:7a:
1e:74:fd:d8:5b:77:b8:79:83:66:90:0e:5a:f3:32:
19:16:a4:2b:11:58:8c:a1:9c:93:5a:5d:a9:ee:9a:
a1:fd:67:ad:99:ed:62:83:32:3a:c9:9d:fa:ff:45:
5e:47:74:42:c2:29:bd:0a:c3:68:db:57:02:2e:d3:
97:8f:90:40:43:6c:d9:a7:8d:73:ad:ae:1e:5e:e8:
4c:54:a7:5a:97:42:19:59:82:16:40:d6:b5:76:d0:
78:7f:3c:d3:65:7a:ea:a4:6d:9e:2c:68:ab:f4:96:
80:e4:d6:b2:f5:31:3e:9e:bb:c6:3b:c5:15:64:57:
35:f3:5b:9d:90:75:96:b2:87:03:0b:6f:87:9a:3a:
a8:57:eb:d0:75:cd:d8:9f:02:9c:60:3b:63:39:5c:
49:78:a4:af:f2:a0:61:2c:cc:fb:e8:5d:18:c7:53:
30:c3:97:31:66:de:2f:e2:c5:eb:b7:24:b5:76:28:
17:79:6b:84:4f:8d:80:08:07:05:19:d8:bf:c4:13:
fd:5d:4d:2f:19:c5:89:e6:ef:69:e8:fc:97:62:18:
a2:2a:39:c6:86:72:50:21:ef:b6:d1:ae:fa:f5:e3:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:A1:5A:DD:F4:81:8A:E3:F1:D2:87:85:14:81:A7:DA:36:F8:B3
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b6:61:85:27:37:84:7f:cd:a8:78:cb:44:90:fe:83:f8:3c:
e4:71:2a:52:d9:76:76:0d:81:68:a6:b6:83:c0:9e:d4:b3:85:
73:3d:11:e1:7f:40:09:51:ec:86:24:8d:6c:94:61:00:85:7f:
ac:9b:37:de:c2:4d:45:c1:4d:1e:09:35:e8:d7:4a:6e:8a:2d:
42:0c:fc:ae:a5:db:50:b3:c4:6d:e6:57:cf:0a:a6:f1:94:50:
6e:a6:2c:70:59:4d:5e:3d:64:a1:ec:e3:a4:ac:8e:f9:a6:4c:
62:be:23:29:41:a4:b9:85:09:25:33:f1:f5:a8:bf:9e:71:58:
de:bc:4a:01:94:83:1a:17:e4:ed:b5:a5:26:02:05:c9:9b:ea:
3a:28:ad:ba:4f:1b:0b:20:53:d3:45:6c:f3:b7:a2:7c:da:44:
73:00:87:0d:39:0d:e4:82:9a:c1:bd:58:cf:a8:80:b5:c7:07:
9c:1a:a2:8b:12:02:69:9d:ca:61:2b:6e:bf:4f:cb:dc:8c:e3:
1e:b2:23:ec:ff:6a:73:27:ea:b9:52:81:96:eb:c3:30:7a:5a:
ed:16:a5:43:5c:04:f6:e0:07:13:16:5e:29:56:73:81:40:7b:
91:fd:9e:50:1b:41:f8:26:c0:33:b0:01:e6:c0:86:6b:db:76:
d7:99:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:19:03 2025 by rpki-client