Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: s//PewAPTa1YMxOGJ/pSUfX9sxEApJMddjkblXz8lcc=
Subject key identifier: CF:3B:6A:DE:AC:9D:52:06:A4:37:66:79:D3:FF:65:97:8C:8D:5A:65
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019510FDE4CEAB28EDC9845F91E2DAD79FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 23:00:29 +0000
Manifest this update: Sun 16 Feb 2025 23:00:29 +0000
Manifest next update: Mon 17 Feb 2025 23:00:29 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: zBdDzuz3eX5m6//thPMBjKrZ8PYaDhjohZ4RVCmWtk4=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e4:ce:ab:28:ed:c9:84:5f:91:e2:da:d7:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Feb 16 23:00:29 2025 GMT
Not After : Feb 17 23:00:29 2025 GMT
Subject: CN=cf3b6adeac9d5206a4376679d3ff65978c8d5a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:e1:6b:6c:ac:fb:94:7e:fa:d1:03:d9:db:
1f:40:7c:af:c4:1f:0c:64:77:d0:2e:5c:2f:a2:f2:
82:33:99:e5:e5:3b:24:36:17:93:8e:a6:07:9c:4c:
24:0c:13:6e:9e:a9:bb:bc:7e:85:7e:31:a2:57:36:
94:07:bf:79:8b:ab:36:f3:e9:89:52:01:b7:4a:d9:
7f:97:8c:2b:c6:20:e1:90:cd:1d:f0:6d:d3:23:0d:
5d:11:b1:78:05:36:f3:db:56:54:34:88:25:41:14:
59:e9:0a:47:57:d6:a2:66:6e:fd:f9:3e:61:57:55:
9e:5b:cd:8f:a5:ff:39:ac:9f:77:2e:d7:29:b8:c1:
ba:f5:03:60:1e:ab:db:cc:8f:51:9d:23:8b:3e:ac:
f2:7f:f5:c8:37:70:90:6c:eb:2e:2f:63:c2:e5:47:
7e:f9:94:08:56:f3:fc:10:14:58:b3:bd:77:8d:41:
fb:e6:12:91:88:b4:3f:4e:1c:d0:27:d4:b3:ba:45:
1f:8e:8f:d4:b9:0c:ff:ef:71:0d:79:aa:c6:02:70:
2a:0a:e6:a1:13:8c:a5:a6:64:a6:01:9e:bb:ba:ff:
05:84:58:97:a6:cf:fb:4a:a6:9e:7e:c1:f7:d9:45:
95:2d:7d:5a:c3:60:e8:d8:22:aa:8b:2a:b2:38:7c:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:6A:DE:AC:9D:52:06:A4:37:66:79:D3:FF:65:97:8C:8D:5A:65
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:77:d5:1b:36:81:7e:b1:16:8e:16:b5:32:62:b7:ff:50:
78:f6:8c:7d:22:b2:a8:11:96:46:7e:1e:25:89:38:db:56:6c:
9e:e1:dd:86:c8:89:f9:86:b5:dc:5f:5a:02:c9:d4:64:1b:3d:
3b:64:47:a5:32:e3:7a:41:c2:71:4e:1e:84:4d:45:84:9d:d6:
c4:a8:cc:1d:96:27:b1:9b:8e:10:60:da:b8:13:a2:68:87:11:
a4:94:6b:d9:ae:88:ed:b1:20:a7:19:a9:6e:f7:f4:a6:f7:28:
cf:80:d4:4a:2c:5b:ba:b9:7a:ad:42:e9:2b:8a:41:56:eb:4f:
ad:3d:7a:25:e4:c7:b3:1e:da:50:d8:bd:03:30:d9:8f:95:9b:
e3:bd:7a:3a:8c:8f:29:31:68:59:08:bc:e9:18:21:ac:a1:a5:
6c:5b:cb:f4:97:11:59:1d:9a:85:05:82:e9:fe:0b:5f:4b:c5:
5d:06:e6:5b:5e:71:a9:17:9c:f2:2f:4c:78:a9:d1:d8:5c:63:
f9:aa:28:72:60:c7:f2:97:16:8b:ff:54:08:f7:ad:5c:6b:84:
62:e0:57:9e:00:b5:a8:31:73:64:c3:fd:7b:e3:a0:3b:59:7e:
7c:77:b4:35:7c:d2:37:d4:9b:19:28:e2:3c:c3:b7:84:91:3b:
19:59:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:16 2025 by rpki-client