Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: SYVQsdNumHiFwPiOrda42izbwDp52gDK18/r2RtojR4=
Subject key identifier: 9F:32:45:AF:C1:1B:49:12:A8:96:9A:DE:FE:41:55:B7:E6:06:1D:E3
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 01965B03153EAD303BB00D1D1D24D8575B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0C35
Signing time: Tue 22 Apr 2025 01:00:50 +0000
Manifest this update: Tue 22 Apr 2025 01:00:50 +0000
Manifest next update: Wed 23 Apr 2025 01:00:50 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: yQzT/L2P4wmwN2sQBHdo2HhRLAGleSzPqk+qpep+ID4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:15:3e:ad:30:3b:b0:0d:1d:1d:24:d8:57:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Apr 22 01:00:50 2025 GMT
Not After : Apr 23 01:00:50 2025 GMT
Subject: CN=9f3245afc11b4912a8969adefe4155b7e6061de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:a2:6c:a3:58:03:42:b7:c1:f0:d3:d8:9e:
e4:1a:24:63:10:35:a3:28:4b:57:24:14:28:f1:16:
91:71:d4:e9:b4:ab:a9:8b:23:3f:c2:f5:80:69:c8:
63:e0:9b:7d:c4:3b:cf:8e:15:d4:29:4a:cb:4c:b4:
8c:c9:3c:dc:13:4c:41:c7:20:0a:3a:9c:c7:e1:ca:
10:54:e1:1c:e4:75:0b:77:f7:e9:dc:62:1d:11:7d:
5e:00:5a:0e:23:97:5a:66:33:17:d6:a7:5f:48:c4:
91:67:84:1e:dc:78:9a:a3:37:23:72:40:92:0c:b2:
b9:06:c8:ec:c5:39:83:4d:61:31:d2:c8:d8:06:9f:
2b:36:7e:1b:04:5c:06:f6:03:a8:89:5c:40:fe:b2:
1e:0a:78:a0:b5:0c:13:43:13:28:fc:6e:ee:25:74:
d6:92:07:9f:4a:6f:b0:26:3f:1f:65:4a:6e:c8:33:
3f:4a:60:0d:90:6a:a3:d3:71:0b:f5:48:eb:b0:a1:
e7:2c:07:15:b2:01:c9:01:84:5c:25:60:1c:10:58:
6f:e6:9c:60:f4:6d:51:54:35:da:ac:24:36:90:5e:
e7:1f:ad:7c:61:39:73:48:1f:23:df:d2:5d:59:be:
54:de:62:9f:75:98:8c:2b:df:f2:94:35:a9:69:c5:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:45:AF:C1:1B:49:12:A8:96:9A:DE:FE:41:55:B7:E6:06:1D:E3
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:36:69:04:9f:de:96:ea:59:a5:44:6f:cb:b4:7f:0c:fd:ae:
98:a0:ff:68:87:d4:a4:93:ca:4d:e3:10:5b:fe:8b:4f:04:8b:
d2:92:48:20:ec:98:c2:be:2e:24:ec:9b:27:d7:f1:8f:37:4e:
9e:7e:6e:d0:2a:af:cc:9c:36:4e:18:8b:b0:2c:8c:48:81:db:
90:2d:1b:76:70:dd:fc:62:22:1e:e5:45:3b:f6:0e:0a:ad:23:
c2:8f:67:08:36:22:61:49:62:a4:c6:6e:cd:01:f5:38:9a:45:
53:59:62:06:34:b9:ff:9c:0c:98:47:27:03:eb:56:55:6a:1b:
7c:e1:87:89:c7:4a:81:ee:3e:c8:48:1c:c3:68:c7:77:39:71:
da:94:d2:24:48:5c:4c:86:3a:b4:ab:bd:e0:67:f5:ba:1c:fa:
63:f0:1e:4a:cc:65:c5:20:9c:cc:07:72:ce:3c:6c:d7:d4:8c:
50:c3:21:01:60:c2:f0:31:7b:91:da:19:da:24:9f:0d:ff:c1:
04:d4:e9:fe:25:e1:a5:de:bc:0b:b4:e1:7f:f2:5e:0e:4e:f3:
8a:5e:8a:1e:ba:00:3f:aa:12:12:c8:92:c4:12:80:ec:7f:14:
7d:88:55:14:bc:10:5d:b0:fe:d7:e9:35:2f:15:e1:b6:63:9f:
c6:de:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:43:34 2025 by rpki-client