Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: uweTwDhRba0LiZiqLYescXBCKYMp5EGTR6W9xuj06wI=
Subject key identifier: 69:2A:FC:60:80:ED:DB:93:54:88:02:DA:7F:70:CC:40:B8:36:B3:D7
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01963DD450A188E66B272EEE5C80AFB2BF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0629
Signing time: Wed 16 Apr 2025 09:00:46 +0000
Manifest this update: Wed 16 Apr 2025 09:00:46 +0000
Manifest next update: Thu 17 Apr 2025 09:00:46 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: w06R2eLgkaprqrlgAPohRSVArbDGwQMAvQtw1LmlV6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:50:a1:88:e6:6b:27:2e:ee:5c:80:af:b2:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Apr 16 09:00:46 2025 GMT
Not After : Apr 17 09:00:46 2025 GMT
Subject: CN=692afc6080eddb93548802da7f70cc40b836b3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:79:88:9f:cd:a2:e1:22:cc:7e:70:c4:05:
8b:b6:1b:d9:1f:0d:5b:57:d3:f4:d7:82:fc:2b:2d:
6c:9b:0b:08:b3:28:c1:71:56:bd:48:83:cd:b2:eb:
e1:99:28:65:c9:85:92:5d:32:85:ad:0d:7e:f9:a2:
59:4c:3b:db:8a:07:d7:d9:1e:df:b2:8e:67:62:72:
1d:5a:2a:82:5b:de:52:4b:48:ff:3a:01:04:c1:66:
0d:44:bc:2e:be:30:93:7d:20:bf:7b:1b:e7:d6:d7:
d2:30:ea:b8:a1:47:ad:e9:99:8a:9b:dc:6c:96:bb:
59:51:73:9d:d8:67:6b:c4:74:ec:3c:88:95:45:d3:
89:18:2e:8f:9a:5b:c9:99:4d:cd:09:45:bc:08:0d:
8d:ac:9e:1d:91:63:b6:44:31:a4:cc:74:46:ef:4e:
3e:c2:8f:eb:ec:43:11:a5:1d:86:6f:40:2a:dc:67:
ea:8d:eb:c6:ef:f1:34:c8:f7:99:98:fd:65:b1:49:
28:88:4c:5b:96:43:fb:f2:95:10:47:3f:3a:3e:f5:
43:c3:f0:b7:9d:bf:80:3d:ec:80:95:32:cc:6b:76:
70:27:fd:a6:c7:2a:38:41:ad:50:12:6f:93:2d:65:
f4:9f:be:6f:90:e9:0a:8f:2f:69:62:70:48:50:84:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:FC:60:80:ED:DB:93:54:88:02:DA:7F:70:CC:40:B8:36:B3:D7
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:de:fb:0f:f5:49:a3:80:09:23:95:e3:be:02:39:02:4f:79:
91:93:88:ad:c6:be:a7:a7:a7:e5:92:a4:2e:23:71:39:a7:fe:
ca:5a:bf:d9:68:19:13:eb:c2:1a:87:b4:38:cf:98:c4:11:d8:
94:e0:62:46:09:0a:59:6e:f2:6e:36:6f:88:e5:93:20:7e:ab:
c3:50:a7:c1:d3:43:53:28:c2:be:69:ad:e2:17:d5:e8:33:8b:
a8:a8:d0:df:c1:09:fb:81:1d:9f:c1:8e:8f:ca:95:97:55:22:
11:23:75:e3:7a:18:91:f0:2d:76:dd:f3:b5:f5:4f:43:38:ca:
8a:ac:23:59:7a:b5:f7:ff:27:2e:c9:aa:e1:ed:dc:94:bd:54:
c9:40:d0:1f:d4:cc:3d:1b:cc:54:6e:9c:23:1f:45:b1:0c:fc:
73:51:38:91:3a:8f:20:c5:ce:cf:6b:57:15:14:0f:ea:46:c5:
55:66:99:8d:55:a4:d9:c9:1b:e0:9a:21:89:ff:6c:0b:dc:1b:
1e:b9:40:66:0a:c7:a1:70:0c:70:43:7c:2a:a6:6d:3c:d8:8b:
55:39:42:8c:77:aa:d9:4f:da:df:1c:cd:fc:ff:8e:10:1c:38:
a0:64:d2:1e:7f:83:56:8c:3e:9f:04:d2:77:10:9c:f2:f7:18:
f2:e0:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:48 2025 by rpki-client