Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 33PZSZBWe2ClvOe23Wjx0/HkIZ2DwZWq3fmhmeeQB6c=
Subject key identifier: D9:0B:EA:9A:5F:06:2D:03:42:D2:7D:B4:9F:A8:1D:98:87:DF:D1:E0
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019644E8E6C11EFAA40B449A58BC4A53F87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0310
Signing time: Thu 17 Apr 2025 18:00:36 +0000
Manifest this update: Thu 17 Apr 2025 18:00:36 +0000
Manifest next update: Fri 18 Apr 2025 18:00:36 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: nBsjElC/LDv7P6i599IfHZbclwv42SkgFfj5jrpW2vk=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:e6:c1:1e:fa:a4:0b:44:9a:58:bc:4a:53:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Apr 17 18:00:36 2025 GMT
Not After : Apr 18 18:00:36 2025 GMT
Subject: CN=d90bea9a5f062d0342d27db49fa81d9887dfd1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:63:57:8f:54:dc:b5:43:aa:d5:88:91:71:
ea:59:c5:aa:92:84:15:73:52:d5:70:b5:de:b4:a6:
6a:7f:0a:c4:9b:fb:02:ec:6a:65:59:6b:3e:0a:5e:
d6:73:bb:3c:23:41:62:c1:d7:74:f1:bc:6e:5b:dc:
b5:7b:e3:b1:c3:85:93:1a:42:90:61:06:a3:43:34:
df:75:13:56:ad:7c:32:ba:bf:7c:ac:08:bc:ff:9c:
1f:63:19:70:ff:b0:b9:af:ee:c2:cb:64:10:55:dd:
aa:1d:f7:a1:ea:dc:a7:c6:08:ff:aa:2e:b3:4a:4b:
90:a3:48:50:e5:5a:8a:61:f4:df:7a:b8:47:e7:2a:
5b:a3:03:fa:3b:ae:b9:ab:df:3e:df:25:bc:53:2d:
dc:61:bb:e2:d2:e2:f5:92:1f:5b:76:97:09:d0:b5:
0f:26:10:8d:93:1e:98:ab:0e:58:04:8a:b1:38:ba:
5a:3d:cd:20:a6:a6:dc:e1:a7:25:4b:88:44:c6:bd:
79:96:14:6e:da:b4:65:1e:f3:03:64:64:75:9f:82:
8f:d7:95:4d:1f:37:67:fb:7a:4b:b8:0c:de:4a:b5:
6c:02:55:22:f8:db:44:c7:60:b2:62:5a:3e:ec:04:
6a:17:39:d0:f0:ef:ab:74:4f:19:38:bf:fd:68:1d:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:EA:9A:5F:06:2D:03:42:D2:7D:B4:9F:A8:1D:98:87:DF:D1:E0
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:77:d8:aa:36:3e:37:69:6e:d8:45:72:b4:df:ff:ce:79:c7:
86:0c:95:ca:f0:f1:bb:5f:11:ea:52:14:a9:71:8a:6e:50:af:
48:ef:4e:3d:7b:39:67:8b:bd:22:7b:48:bd:f2:c0:f1:f8:f6:
a8:62:51:db:35:ea:ac:f9:65:7d:81:1a:8f:ce:ff:a1:49:d7:
4b:d4:68:20:46:74:12:3e:b1:d4:1e:9c:e5:63:d4:e1:f4:46:
3e:3f:65:c4:4d:db:d1:30:10:b4:30:73:93:22:2e:76:bd:ca:
eb:ee:2e:ed:41:b1:ee:26:54:b7:2e:51:f7:5e:0f:89:a2:63:
bf:b7:e3:47:c5:45:de:e0:b3:01:d3:b1:41:78:67:fa:23:d8:
02:70:ce:b9:2f:35:7d:82:8a:44:34:71:b9:97:1a:7f:08:22:
64:21:66:42:d7:53:5c:fb:f1:38:cb:f1:ac:08:83:1c:dc:af:
b6:46:45:17:94:87:6b:a0:4d:0b:70:18:1d:59:8b:f9:d5:e3:
93:2f:8d:80:42:e8:e1:82:95:2e:fd:f0:51:1e:94:07:fd:30:
9b:d4:e9:3d:11:cf:b8:8a:c5:bf:24:fb:a5:00:7a:dd:37:0c:
59:09:73:9f:bb:ad:22:f7:5d:92:d8:70:e4:22:98:6d:b0:ae:
be:b9:b8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:45 2025 by rpki-client