Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: DSNjyagdtFmH5/0YNZykAYgjfoB/OiHci8s1NLwg8KM=
Subject key identifier: 33:85:1F:18:F5:B4:45:23:2C:72:30:FA:A6:88:86:60:85:38:7B:D9
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 01963FFA5484FC3CD049DB30F445D9353D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0681
Signing time: Wed 16 Apr 2025 19:01:32 +0000
Manifest this update: Wed 16 Apr 2025 19:01:32 +0000
Manifest next update: Thu 17 Apr 2025 19:01:32 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: HDcHMw8li92zlVyOsVGjSkhx5pe0YxuGVk3aziPuHGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:54:84:fc:3c:d0:49:db:30:f4:45:d9:35:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Apr 16 19:01:32 2025 GMT
Not After : Apr 17 19:01:32 2025 GMT
Subject: CN=33851f18f5b445232c7230faa688866085387bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:a6:53:f6:75:18:97:30:c3:30:bb:ea:62:
8e:8b:c5:0e:35:86:2c:c2:e2:57:11:9d:b8:d3:fa:
a8:93:40:ed:55:30:b4:f5:dc:f6:d0:68:5b:4d:31:
d7:e5:7c:5f:7f:38:fa:32:87:76:df:69:3d:d6:16:
f6:24:07:32:3c:da:df:4e:14:52:7b:62:80:1d:65:
7a:90:c2:f3:0f:16:49:bf:5c:41:9a:52:16:80:8e:
8c:f7:53:71:69:eb:9e:d3:85:0e:0e:4a:65:0c:79:
b7:6e:10:6a:c2:2c:80:d7:73:f3:d6:56:c3:48:fa:
76:35:ae:8c:d3:55:0a:bc:3f:00:fa:9f:53:1a:c4:
72:30:64:32:49:69:77:ef:e6:49:ed:78:f9:24:17:
61:46:4c:ba:d9:71:6d:3c:3e:05:0a:32:e7:62:ba:
94:b3:51:a5:fc:1f:d8:26:0f:aa:76:b2:7c:fe:c3:
27:92:74:36:79:f7:2c:a2:21:6c:87:42:5f:d9:c2:
c4:83:ad:71:ce:a0:67:0a:89:13:54:12:18:99:b1:
3a:24:dd:5f:b8:11:5a:bb:52:e7:cf:64:e8:ca:10:
83:cc:26:f5:68:0f:d0:14:41:53:bc:3d:11:6a:c3:
c8:25:2d:a9:85:c7:51:92:76:eb:35:d4:d9:c2:ab:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:85:1F:18:F5:B4:45:23:2C:72:30:FA:A6:88:86:60:85:38:7B:D9
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:a7:18:bb:5f:77:73:dd:1a:10:a4:f6:69:b2:45:68:b8:
2b:02:fc:7a:14:b6:19:63:62:ab:ef:12:24:d3:6c:89:ea:36:
2b:1d:d8:c5:e6:14:70:e9:b7:4f:a3:0e:4b:0f:e9:97:47:5f:
8b:a7:94:1e:cf:1c:5b:e6:3f:21:22:05:25:c3:42:2b:ff:e1:
c2:73:cd:8c:00:68:ad:84:d6:4f:ab:ac:29:d7:7a:e3:c2:c1:
0a:b0:c3:f2:19:97:0f:9e:6d:68:b8:91:1b:cd:09:c0:54:bb:
13:a8:fe:1d:4b:76:2b:50:89:36:6a:ca:a5:e4:b2:5e:c7:68:
e9:7b:ba:b7:65:a1:77:55:e7:a2:8d:10:4b:0b:7c:5c:71:94:
c2:64:cd:e0:38:40:9d:4b:6a:c4:3b:38:aa:bd:86:26:f9:cb:
88:26:ae:b5:74:e9:60:97:59:fc:99:8b:38:8a:72:d5:94:d3:
68:ee:5f:0f:45:07:e1:2d:b1:17:42:85:78:9c:5c:f5:27:d3:
af:df:c6:8a:61:02:b6:9f:0e:8e:0b:b2:6e:a2:02:8e:ee:68:
20:28:d2:46:92:61:12:a1:31:20:65:da:70:ed:2b:89:75:83:
5d:1d:9c:e4:cd:63:15:ad:83:69:06:50:09:d4:d6:c5:73:52:
a5:65:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:17 2025 by rpki-client