Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File: cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier: Rn//rLOvvC7etLk2HszlPYebRplLWTlQjhKmfDMUv/Y=
Subject key identifier: 6D:BC:B0:99:97:DC:DA:60:C0:B3:91:61:EA:0C:73:33:3C:D5:D4:35
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer: /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial: 01964820EF381EEBC20DB17377B0C346250E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number: 03F1
Signing time: Fri 18 Apr 2025 09:00:39 +0000
Manifest this update: Fri 18 Apr 2025 09:00:39 +0000
Manifest next update: Sat 19 Apr 2025 09:00:39 +0000
Files and hashes: 1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: C78CcLyeZmBJNlN+NuszU1cf3f1csFUV5YLfD92ja2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:ef:38:1e:eb:c2:0d:b1:73:77:b0:c3:46:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
Validity
Not Before: Apr 18 09:00:39 2025 GMT
Not After : Apr 19 09:00:39 2025 GMT
Subject: CN=6dbcb09997dcda60c0b39161ea0c73333cd5d435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9e:0e:d3:76:0c:7f:64:c8:e6:b5:f8:b7:13:
5c:6f:b5:ef:40:9f:81:69:10:79:29:41:0f:95:a5:
94:7a:c4:4a:16:90:70:77:4c:ae:6f:e9:f5:b9:53:
bf:a4:de:2a:69:46:21:5d:4c:ed:25:ce:23:7d:06:
2d:99:fe:99:62:69:1d:b9:7d:f8:f9:91:89:8e:de:
12:d1:e0:e8:4f:9d:fd:e8:b2:60:a0:1a:90:b2:cd:
3b:61:88:e3:6c:3c:f6:f1:d5:38:f1:56:b0:ef:39:
6f:ee:0f:6f:a7:d2:2f:b6:ed:61:b5:e5:1f:be:6f:
41:d7:15:13:37:aa:3e:c1:88:6f:5e:52:29:f7:f9:
02:46:79:d5:61:58:55:80:f4:1c:a6:bc:ca:7e:55:
c1:a4:0d:a7:b7:14:b2:42:c1:c0:c2:51:d6:a8:24:
29:01:45:82:f5:30:8f:31:39:ce:e7:f5:b8:05:9e:
84:31:09:da:b4:11:23:c4:cc:e4:ef:72:54:38:16:
1a:61:34:1d:36:7e:7e:07:c7:d6:fc:a0:6b:d4:49:
0f:27:1d:09:4b:ea:bc:0c:44:f1:b2:35:b3:96:cd:
fc:49:ac:b0:fe:66:8e:0e:b8:71:a7:40:0d:61:10:
d6:ea:b5:d2:c8:56:fc:85:08:ae:83:cb:e3:f5:9a:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:B0:99:97:DC:DA:60:C0:B3:91:61:EA:0C:73:33:3C:D5:D4:35
X509v3 Authority Key Identifier:
keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:82:5e:85:26:7c:83:d1:e7:17:ef:99:fe:5c:42:75:a4:
1a:e1:1d:77:a4:95:11:62:76:a1:b7:07:f6:f0:e7:0c:eb:75:
57:c1:69:61:74:af:20:05:9a:b1:a3:03:ac:f6:89:4a:6a:a3:
90:3d:00:80:8a:fc:02:67:4d:be:46:2a:e9:1b:f5:c4:7a:00:
df:a8:4b:d0:69:a0:3f:42:f3:1a:07:43:48:58:58:33:38:61:
d7:ba:ee:f7:17:c4:dd:3a:8a:5e:57:18:99:11:bc:6c:28:a7:
f2:08:d2:f6:88:92:56:69:bb:c3:4a:57:fa:78:18:7b:9d:ef:
28:f2:0c:7c:7c:6b:3e:5c:9a:31:a8:5c:f7:44:bf:e3:cd:78:
1e:c2:60:97:ed:01:e3:9f:b5:11:57:b6:cc:08:6b:5c:ae:10:
52:54:27:34:c9:c4:d0:8c:73:50:f2:28:7c:89:63:ea:66:64:
23:87:3a:fa:11:6a:ce:b9:45:4c:c8:c5:6e:95:ad:2a:91:d0:
ce:7c:d8:db:52:b3:fc:b8:3d:68:c0:c6:e6:4f:bd:81:78:5b:
a9:e9:8a:d5:5d:da:4c:bb:a6:07:e7:5d:50:72:1b:60:2c:69:
d5:28:22:e1:c6:2f:08:34:b6:b6:bc:cf:9d:be:73:ee:a6:da:
4d:1d:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:06:38 2025 by rpki-client