Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: Ee1eck0bdtJSQbLdJcuSP8ZTfxux8a/1GPLZ9F9Acj0=
Subject key identifier: 92:2D:28:2B:8B:B1:48:13:3C:FE:09:B4:B0:25:E5:0B:93:97:52:FA
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01964EC7E0360D37AFAB2031E6983145EEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 16:00:43 +0000
Manifest this update: Sat 19 Apr 2025 16:00:43 +0000
Manifest next update: Sun 20 Apr 2025 16:00:43 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: cNT3/ZHMcYbVnNgDT4SlkRbEaeTyQVJBJvWu/H8wysE=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:e0:36:0d:37:af:ab:20:31:e6:98:31:45:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Apr 19 16:00:43 2025 GMT
Not After : Apr 20 16:00:43 2025 GMT
Subject: CN=922d282b8bb148133cfe09b4b025e50b939752fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:8f:24:00:99:e5:4e:04:71:47:f6:52:36:
8a:f2:b7:6f:ac:3a:de:dc:26:f6:b8:65:f0:49:1f:
70:f0:c2:5f:52:24:d6:bd:f0:45:58:8b:ac:88:a0:
be:2b:87:f2:a5:7c:cc:d2:8e:f6:69:2c:fe:43:a3:
09:33:22:63:44:5f:d9:58:88:b1:8f:49:bd:f9:91:
e9:d4:29:e6:a3:d7:ab:7b:20:0e:32:91:f6:2d:ab:
75:c7:1b:f1:e8:f2:3d:ec:8e:c2:2b:c5:29:38:01:
03:e5:da:9d:01:01:2c:84:95:1d:8d:11:40:62:e0:
88:1d:3f:21:e9:d9:61:b4:42:2d:6c:5d:fe:9a:68:
33:57:79:5f:a9:da:ae:19:d8:f2:ca:a5:93:10:64:
a3:cb:bc:79:94:11:e1:07:f1:cb:6b:6d:cf:42:6e:
c8:44:cc:7b:ec:7c:21:c7:48:ea:c2:42:a1:20:33:
37:5e:cc:32:d8:cb:ca:6f:ca:f8:de:96:7a:18:54:
b7:3b:a7:ac:79:f0:04:a2:33:d8:2a:fc:64:5c:a0:
0f:1b:1e:01:2e:e1:97:1d:6a:f8:da:87:d1:1c:57:
6f:6a:3c:41:7e:28:ba:21:10:d6:8a:c6:1f:5f:83:
ca:86:01:ee:28:44:6d:e1:08:55:55:84:0f:b1:25:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2D:28:2B:8B:B1:48:13:3C:FE:09:B4:B0:25:E5:0B:93:97:52:FA
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:be:d8:ef:e4:be:66:f0:f7:33:5d:d9:ce:63:15:c2:72:
32:cb:95:94:a2:10:34:69:b6:c6:43:03:02:65:ab:7b:9a:a8:
87:60:7d:bc:0b:c6:26:15:6f:0d:51:c7:a1:4a:41:34:fe:34:
4d:6c:1f:06:a0:81:cd:95:86:98:97:61:19:b1:b5:01:da:aa:
5d:51:f4:de:82:54:04:f4:53:1c:f1:34:9a:f0:fe:bf:d8:57:
85:47:7e:45:11:e5:64:bc:0d:70:af:57:89:44:0c:d9:09:3c:
3b:da:62:ef:9d:55:11:74:3a:3c:a7:0e:36:97:ec:0c:7c:2f:
a5:ef:bd:b1:cf:d6:85:17:6c:73:58:99:50:f2:41:1e:b7:7d:
f1:8c:96:10:06:9f:2f:6f:c7:fc:25:7e:74:80:37:e8:3b:59:
ae:0b:ea:de:1a:da:c9:88:3a:7c:26:12:f6:19:1a:84:62:4e:
3a:89:52:dc:8b:b5:c0:13:32:d6:04:dc:e5:62:a8:25:4c:a7:
7a:f5:a7:ed:56:38:ba:a1:38:5b:28:5c:84:65:53:72:b6:9e:
a6:b7:05:e5:b1:98:f6:ea:cd:7d:b1:0d:59:dc:4d:26:0e:ef:
9b:e5:58:44:2a:b3:da:34:e7:49:1f:0b:1e:01:19:93:53:d1:
ae:19:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:46 2025 by rpki-client