Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: BCGZ46cdMcvdPofcsRiOv/fbTlKqkq7OUlaso2X7A3c=
Subject key identifier: 85:87:A0:AF:28:64:B3:22:5D:DF:A6:A3:B5:B3:B3:7C:CE:48:A4:AE
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019644B1EEFA027C2401572AD0AEF19FB378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 17:00:33 +0000
Manifest this update: Thu 17 Apr 2025 17:00:33 +0000
Manifest next update: Fri 18 Apr 2025 17:00:33 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: WVxgxN+1czTZ/MqVsRePT7jE9YRgOmZ6gs4RKu32yS4=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:ee:fa:02:7c:24:01:57:2a:d0:ae:f1:9f:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Apr 17 17:00:33 2025 GMT
Not After : Apr 18 17:00:33 2025 GMT
Subject: CN=8587a0af2864b3225ddfa6a3b5b3b37cce48a4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:9d:3f:4a:3b:df:67:7e:c4:cc:d0:3f:61:
ed:88:2f:fd:5c:2c:24:cd:4f:96:fc:81:4d:6e:0f:
a6:be:90:ec:33:21:2f:4b:af:f6:86:75:89:f3:11:
45:26:eb:44:e6:86:c6:6c:90:88:6c:9f:80:3f:07:
a9:fc:df:f0:bf:df:2b:c4:9b:5e:cd:56:bd:2c:83:
61:ca:68:20:3c:b7:e6:1e:6f:06:65:44:95:b7:91:
81:63:8e:2a:b5:56:c8:15:0a:79:d7:5f:83:0a:59:
aa:7d:d8:99:92:e2:95:cc:f4:07:60:e2:4c:7a:80:
f8:21:fc:d4:29:67:af:1b:4f:44:c5:d7:94:cd:1f:
b9:36:23:06:ef:db:5c:af:06:2b:de:38:e7:54:43:
06:de:be:9e:10:da:b3:26:4e:c3:0c:3e:9b:58:f0:
d8:00:cd:2c:3b:c4:1f:0b:0e:6b:97:54:48:8e:e7:
93:e5:5c:36:d4:3b:f5:20:8e:62:1a:8c:81:23:9d:
e5:8b:bf:c1:71:4f:4c:b9:9d:ca:17:33:f1:bc:51:
6d:c1:95:e5:da:6a:3d:25:8a:bc:f6:59:22:fc:a7:
f6:10:4c:54:24:3b:d3:ee:55:d9:ea:63:6f:64:a4:
33:a8:a9:d9:a3:8f:26:4c:a8:aa:69:e7:77:5e:6f:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:A0:AF:28:64:B3:22:5D:DF:A6:A3:B5:B3:B3:7C:CE:48:A4:AE
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:71:c7:c1:fe:1b:1b:2c:0f:53:a8:c8:26:12:f5:d1:15:7b:
00:58:29:f8:d3:76:a5:76:52:4f:66:d9:1d:03:78:d0:83:4f:
8a:72:88:38:5a:d9:67:7a:49:7a:8e:58:2a:cd:70:5d:9c:cc:
1e:80:1f:5b:43:31:7a:0f:6e:91:c6:de:8e:03:4e:ba:c7:5b:
39:13:ee:69:80:9e:1f:73:a3:3a:e6:e5:e0:17:d9:a9:f4:47:
30:c4:5a:8e:f6:6e:e9:d0:ca:73:2a:32:8b:08:5d:04:c6:54:
1b:24:08:37:6c:c5:df:2c:78:5a:f6:4e:a9:a0:95:94:af:e4:
56:20:f9:f4:c8:bc:73:75:da:92:ea:37:db:3d:8f:04:8b:31:
f1:fd:88:8e:05:db:a2:53:9a:d6:a7:80:8b:3e:c8:06:ac:3b:
7c:d7:97:e8:c8:b5:62:1e:fe:f2:72:f1:ed:fe:fc:36:14:2a:
f4:f2:fd:34:37:c7:1f:59:a6:ed:e5:81:db:41:d3:55:82:1d:
a8:18:f2:09:0d:a4:25:5f:7b:82:9a:1e:77:b6:3b:f8:07:32:
5f:6c:cb:8d:21:a6:21:70:ae:e4:34:05:c2:12:c1:26:58:8d:
37:e9:c3:4a:c7:88:da:56:d8:69:b8:2c:3f:74:f9:90:4a:cd:
6f:33:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:39 2025 by rpki-client