Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: FWi/1aMWd1wsbto51TJrXKuNJ7g0KKUypp8dPGgXZn4=
Subject key identifier: 0B:E4:B1:79:3E:E6:E8:6F:5B:AA:96:65:90:EF:1A:65:B3:04:FA:BD
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 01965048555500CAF410ACBDA947A22806D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1236
Signing time: Sat 19 Apr 2025 23:00:39 +0000
Manifest this update: Sat 19 Apr 2025 23:00:39 +0000
Manifest next update: Sun 20 Apr 2025 23:00:39 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: n+lwFS0mK5ZeXuCj0jwhAHSKWAyV45caXTuvx+5SB+I=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:55:55:00:ca:f4:10:ac:bd:a9:47:a2:28:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Apr 19 23:00:39 2025 GMT
Not After : Apr 20 23:00:39 2025 GMT
Subject: CN=0be4b1793ee6e86f5baa966590ef1a65b304fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:f8:a1:88:db:55:22:36:e6:76:c6:15:28:
6b:af:1d:28:14:c1:5f:4e:4d:12:9f:ed:9b:0f:f6:
4b:73:4d:cb:ba:30:53:77:3b:ff:62:11:72:3c:3c:
dc:7a:fb:00:d0:45:b6:a5:a7:0e:bc:91:66:49:80:
77:cc:b6:40:d1:1b:18:1e:1c:24:fb:71:e5:7b:74:
52:1f:8d:1d:a9:c7:03:ff:e8:cb:ae:d6:29:6b:37:
79:f8:6a:ac:a5:05:29:9b:d1:82:32:62:bd:46:3e:
35:77:ef:18:3b:ee:ad:25:67:e2:24:3a:16:7c:f3:
48:2f:54:81:ce:86:2c:2b:8b:a6:73:d7:29:a6:74:
2d:3c:ac:dc:78:bb:ee:84:ed:49:f8:fa:a2:6b:9c:
55:fe:52:5d:4f:dc:33:36:24:00:a8:54:7c:45:7d:
6d:7a:0d:2b:09:19:6f:26:23:ae:14:46:d5:da:e9:
27:5a:d0:0a:49:88:37:cc:5d:4f:4f:0b:d3:6f:f5:
4e:f1:27:4c:bc:34:69:ac:a7:75:a5:e3:3e:87:86:
77:29:80:5d:b9:db:d9:4f:f8:f6:7e:56:6b:3a:69:
2b:2b:68:e4:be:1a:7d:9b:bf:b3:97:8b:3d:a1:d9:
98:73:bd:1f:f4:9e:3e:15:56:be:9c:19:a8:3f:01:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:B1:79:3E:E6:E8:6F:5B:AA:96:65:90:EF:1A:65:B3:04:FA:BD
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:66:09:9b:1e:88:6b:26:dc:8d:ff:ba:6b:05:26:cc:d0:cd:
d0:a2:2b:18:2f:e5:4e:8e:86:e9:6e:57:0d:28:3b:4d:21:53:
10:44:c2:b9:93:1b:f4:7a:a6:27:e7:dc:40:dc:b2:f8:bc:1e:
1b:05:69:be:44:6e:7e:2a:5a:34:dc:7f:cf:7d:5a:46:a4:1c:
47:e3:32:ec:44:50:9c:28:a3:b6:99:7d:15:ac:ab:f2:a5:94:
f6:cd:89:0e:c8:2a:12:73:df:ba:4c:43:dd:52:5f:e6:3b:c5:
bc:65:b3:c9:db:5b:37:0f:d4:e7:c7:2e:1a:ef:b2:88:c1:74:
9e:12:c1:fe:a9:78:cf:f1:67:6b:c6:f7:5c:a0:e2:73:dd:85:
97:27:ea:89:0d:5c:1b:9d:4d:69:16:42:c9:e2:5b:66:61:89:
f4:c2:bf:51:a3:34:ca:d4:1b:69:7c:1a:ae:e7:05:dc:8d:3d:
6f:b6:2a:23:a3:04:a2:74:be:c6:ff:1f:8c:11:b8:c4:72:d4:
d7:ac:fe:b0:96:15:12:2a:84:31:bb:13:e9:b8:66:3d:c3:a4:
c8:cf:b0:b9:4a:d2:1f:77:17:e0:69:61:ec:21:fa:6a:b0:62:
8d:01:c2:ae:4b:34:ad:51:f5:44:a7:39:c8:c9:f6:47:0c:44:
16:ff:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:05 2025 by rpki-client