Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: 1yyErvrXIcZs+0y2zCU4hrZPk6ajdldmzVe13n1EpXM=
Subject key identifier: 21:55:69:8B:0F:7A:39:9B:F0:49:A9:40:1B:34:12:13:DF:F9:5B:19
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 01965B70BD609F7B55445855A08E4D60D59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 138E
Signing time: Tue 22 Apr 2025 03:00:37 +0000
Manifest this update: Tue 22 Apr 2025 03:00:37 +0000
Manifest next update: Wed 23 Apr 2025 03:00:37 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: SW003Tihvlaqpaes8UBLYTk5EG4vCK1utFVnd8l6gTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:bd:60:9f:7b:55:44:58:55:a0:8e:4d:60:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Apr 22 03:00:37 2025 GMT
Not After : Apr 23 03:00:37 2025 GMT
Subject: CN=2155698b0f7a399bf049a9401b341213dff95b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:9a:1b:2a:c9:63:90:d5:cb:73:a6:53:13:
3e:39:a4:ff:71:6d:b7:08:e4:a3:8e:df:14:21:78:
50:5d:b8:44:78:75:a7:e7:84:09:27:7d:12:20:c0:
c6:15:9f:6b:a5:d7:3b:ac:42:a7:39:69:c7:1b:ab:
bc:6c:87:ec:cf:f1:3f:ab:2c:8e:32:6b:41:c0:ef:
47:de:56:f7:1a:3f:c0:8f:17:35:8e:a5:ab:b1:f7:
73:55:94:96:21:f2:83:0e:42:61:2c:df:a6:da:da:
bd:63:20:84:3e:21:be:e7:df:f2:44:2a:90:85:db:
fc:09:50:3b:ce:16:13:fd:97:17:39:86:38:77:b1:
09:98:84:d1:0d:7a:07:3f:db:dd:d7:6f:ef:95:f9:
d6:32:e8:ea:be:97:28:3d:48:1e:8a:60:69:67:fa:
c2:0f:63:ea:b2:5e:9a:b5:92:3f:73:35:f9:71:22:
af:00:ca:95:d4:06:44:be:70:b7:35:a2:e1:f7:41:
f8:e2:d8:8d:49:ba:de:b4:8d:3a:d2:be:8c:cf:47:
e5:e2:ad:b5:47:ca:0c:e0:13:63:47:e3:b6:9a:91:
75:e7:8f:ba:5f:9d:4c:94:0e:0b:03:a2:fc:42:5e:
61:fc:9b:4c:b7:3f:8c:d9:ff:1f:63:b9:32:35:6b:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:69:8B:0F:7A:39:9B:F0:49:A9:40:1B:34:12:13:DF:F9:5B:19
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d8:d7:03:91:51:19:67:12:03:22:8a:62:ed:9e:f4:a5:5d:
04:b1:d7:1c:c6:e9:3d:8d:8e:43:10:60:34:de:ab:6d:a8:3c:
03:d7:9b:5f:4d:3e:e8:49:40:88:20:ea:64:dd:6e:90:d2:e1:
a0:d4:7f:82:3a:55:52:2f:f0:ab:37:82:d2:23:33:79:d2:f2:
8b:91:22:79:5a:83:4a:ea:fb:e6:13:ca:9b:57:47:7d:7a:49:
57:4b:3f:62:ee:2c:74:97:9a:10:4b:cc:f5:e4:8e:4e:ba:37:
c6:24:ef:8b:c7:87:e7:35:16:e7:65:e3:c5:97:7c:6d:34:62:
8d:89:3f:56:86:77:3e:52:e6:b3:60:fd:88:a1:bd:cd:cf:ff:
80:ab:08:33:36:d5:e7:e0:a4:b5:2f:08:e7:25:5e:f8:ab:8a:
1a:d4:58:02:27:8c:28:fd:3c:b3:54:a7:c2:8c:bb:64:db:ad:
0d:ed:42:ad:d7:94:e3:77:52:51:67:9d:fe:95:01:ba:c4:93:
cf:ee:68:9b:7c:af:05:a1:24:16:2b:8e:1e:8b:3b:4c:b0:34:
06:bc:1c:44:69:11:2e:a0:19:ce:93:23:bb:eb:61:5f:38:25:
c4:4a:c8:12:df:da:86:e5:4d:2b:b0:15:c3:d4:ac:00:41:bf:
da:03:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:34 2025 by rpki-client