Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: Yd78aiXeBqfsdgiGTW6DBgH6e1Oo3SseM/oW0kiAJw8=
Subject key identifier: F2:DA:4D:EE:17:43:79:03:46:66:89:30:DD:41:52:62:EC:99:24:C5
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019644B2061B1F9FC4C5802B3CF857929A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 17:00:39 +0000
Manifest this update: Thu 17 Apr 2025 17:00:39 +0000
Manifest next update: Fri 18 Apr 2025 17:00:39 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: q8Kh77C4SFi7tVlCRhNfCplWCgqdfziHyzI9Pd7Yqt0=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:06:1b:1f:9f:c4:c5:80:2b:3c:f8:57:92:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Apr 17 17:00:39 2025 GMT
Not After : Apr 18 17:00:39 2025 GMT
Subject: CN=f2da4dee1743790346668930dd415262ec9924c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:3d:cb:69:62:98:d2:cb:17:40:29:54:d4:
c9:e6:a0:b2:fe:ed:0d:c5:03:c5:99:93:60:b2:de:
e0:65:3a:40:63:67:68:66:77:2c:fa:f4:40:e4:e2:
9b:74:92:7a:c0:d0:60:d7:89:44:ea:0d:64:54:2e:
ae:ad:e9:21:b3:1e:2c:7d:5c:d7:52:74:17:bd:fa:
b5:9d:0a:72:49:5c:36:44:0c:18:de:97:98:b6:a9:
dd:60:0e:20:e5:1f:e6:29:f8:df:2a:0d:6e:40:02:
25:9a:90:c0:2f:e3:0a:ae:e7:05:36:c9:4d:93:23:
47:da:a6:48:c8:23:b0:05:20:24:57:09:71:7f:18:
4b:26:8c:b0:f7:02:05:a0:08:7d:99:55:d2:8b:15:
3f:e1:36:2c:54:a0:da:a0:c3:93:15:4d:7e:da:07:
f5:f2:06:3f:0d:49:3e:cb:43:c0:4a:f1:da:11:9a:
2a:53:81:ac:f7:e8:b2:a7:94:84:d5:67:16:7d:a2:
33:79:92:28:d5:ef:85:32:86:51:c1:3f:25:8d:cb:
e8:3e:2a:89:42:08:a7:2f:66:3d:8a:cf:34:fa:ed:
a0:f6:f4:60:1c:b3:e5:a0:14:15:11:ac:28:73:ad:
51:6a:0b:f8:d4:44:c1:13:c2:96:14:15:a2:07:b0:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:4D:EE:17:43:79:03:46:66:89:30:DD:41:52:62:EC:99:24:C5
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:29:57:5e:dd:49:79:4f:c8:2a:51:88:f1:3d:d3:bc:99:
6f:fd:63:00:e1:5b:b0:67:c4:ff:6f:63:cf:ab:1e:0b:a7:9f:
94:39:e6:e9:04:4d:7f:b5:2e:5b:4d:2c:17:07:75:c5:09:ab:
7e:f4:d7:92:a0:5c:1f:7f:d6:89:ff:80:b8:ce:c1:18:fb:42:
ed:fa:a3:e6:c7:d3:7c:69:ab:ef:a4:d8:c8:51:b6:17:f3:b3:
04:e3:36:e9:4c:71:1c:7b:a9:36:e0:94:4e:67:d5:f0:cd:6d:
91:78:92:0d:9b:16:ff:51:c7:f4:78:d8:f5:5a:23:30:2d:87:
f8:7d:65:02:e4:39:db:72:37:41:59:5f:71:ec:d9:41:3f:65:
30:41:1a:99:d2:95:76:5b:51:52:05:31:5a:af:e2:c4:d1:37:
01:0c:c8:b2:f1:02:03:f3:4a:8f:07:6d:d7:d5:0d:e7:7f:27:
a8:d6:75:67:8a:a1:1a:63:67:b9:ce:e7:c3:d4:26:4d:7f:86:
79:ec:4b:37:b3:01:e8:fe:74:19:07:84:42:d3:71:80:7b:d6:
79:4d:b8:be:82:5c:c3:38:01:42:4b:28:9a:b4:b2:45:46:c0:
3a:d9:33:8c:2b:cc:ea:71:2a:5a:d0:da:5c:20:b4:8f:e3:95:
47:1e:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:52:44 2025 by rpki-client