Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: noWWK9zc1rzkHC2mN5hW0KQ3H7AgG+XWB6nJrJ452yM=
Subject key identifier: AD:AC:3A:32:83:B4:B2:AD:7E:65:0E:DD:2A:3E:73:F5:41:DA:13:A4
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01951210D9A3BC66BE79FC40E7733807FA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:48 +0000
Manifest this update: Mon 17 Feb 2025 04:00:48 +0000
Manifest next update: Tue 18 Feb 2025 04:00:48 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: X58uwC9b3UUJwTILi9N7pt58ZMvdDDwNn7g7JgYZJgw=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d9:a3:bc:66:be:79:fc:40:e7:73:38:07:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Feb 17 04:00:48 2025 GMT
Not After : Feb 18 04:00:48 2025 GMT
Subject: CN=adac3a3283b4b2ad7e650edd2a3e73f541da13a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:ac:43:f8:05:74:b4:41:de:d3:3f:76:66:
3a:b7:39:0b:e1:2a:fa:9f:9a:57:d6:90:d0:eb:14:
7d:49:e3:8a:54:eb:b1:1f:48:4e:c1:0b:3b:a6:0d:
a0:47:12:3c:45:11:82:a8:15:7e:96:8f:d3:57:cf:
0d:b8:88:85:10:47:6a:56:4c:37:82:96:1f:4f:6f:
4a:b2:1a:78:4a:4e:cf:73:aa:36:49:35:65:62:3c:
5b:55:b5:1d:68:09:f3:c6:f4:1f:a3:88:cb:6b:d4:
36:de:09:df:9f:3e:e3:87:69:89:d9:d8:a6:a0:62:
43:29:5e:7d:92:2a:e3:12:f2:04:8e:38:4f:db:87:
09:bf:53:c6:58:ab:e8:7f:62:0a:69:76:f4:85:c0:
e8:bf:32:46:e1:88:18:e6:b4:88:7c:c6:66:71:e2:
76:88:73:bb:e3:7f:59:6c:e8:24:8c:ce:a8:4e:62:
41:43:75:e7:a4:25:10:66:39:dc:2d:a3:5a:de:ff:
e3:34:c7:ef:cc:a2:21:40:8d:6a:93:0c:85:9e:15:
fc:9f:98:03:68:bb:ac:ce:f4:cc:6e:ec:cf:da:28:
9c:e7:16:79:17:f6:59:db:db:a5:3b:6f:c0:14:51:
6b:d8:c8:65:54:95:8c:a0:92:7f:7b:97:cd:1f:92:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:3A:32:83:B4:B2:AD:7E:65:0E:DD:2A:3E:73:F5:41:DA:13:A4
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:db:c8:d6:0d:1d:18:b5:90:1f:49:c6:aa:bf:f5:79:e6:
09:e3:8b:42:4d:45:94:df:4e:a4:62:ea:89:ab:4f:02:2e:dd:
73:85:52:00:15:91:f3:62:59:10:80:fa:b5:ec:83:bd:88:36:
56:7a:a4:ce:ee:17:59:c4:2e:6a:9d:1a:47:4f:77:37:70:b0:
5b:de:05:f1:93:e7:33:e5:64:8e:94:00:da:16:c6:13:b1:b9:
bd:fb:7f:41:f2:d3:2a:ac:11:76:b3:2b:58:dc:a7:fd:82:c8:
61:6a:cf:f4:9a:b7:7e:3d:ae:d1:5d:62:e5:2b:1e:bf:94:f1:
64:65:30:fb:de:6c:83:ff:8b:e3:cb:48:d3:72:51:2d:bd:a8:
bb:a9:cc:61:13:f4:fa:5f:53:9f:99:16:50:a8:c9:9c:83:36:
23:79:25:36:2d:5a:cc:58:f8:55:a5:91:5e:6c:45:28:77:52:
4c:c9:39:13:b1:bb:7b:80:73:3d:b2:ac:6c:27:86:96:3d:58:
70:d9:7d:42:b8:92:57:e1:ba:6e:61:0b:fd:a0:1e:43:30:83:
69:c9:0b:a6:f6:66:2a:bc:90:db:f8:44:83:cd:38:ae:85:37:
97:26:4c:b6:d5:47:cd:18:ac:4a:e6:0a:58:b6:44:f1:c6:63:
43:5d:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:38 2025 by rpki-client