Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: B9QT7VtlWgHhUwlMFpDqaWv6g+txK4pCRkRQyoC/CKU=
Subject key identifier: 6F:B6:BE:4A:7F:A4:5C:31:5A:46:A7:02:69:47:60:7F:82:49:1A:D9
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 01963FC2976F36975A90BFA852C0345B1ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1485
Signing time: Wed 16 Apr 2025 18:00:39 +0000
Manifest this update: Wed 16 Apr 2025 18:00:39 +0000
Manifest next update: Thu 17 Apr 2025 18:00:39 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: ja8xCZRNuGAbyLlqNmhwv0Uqflniej+FwX3TlBTcHm4=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:97:6f:36:97:5a:90:bf:a8:52:c0:34:5b:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Apr 16 18:00:39 2025 GMT
Not After : Apr 17 18:00:39 2025 GMT
Subject: CN=6fb6be4a7fa45c315a46a7026947607f82491ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:04:5a:5e:63:ec:23:44:c5:69:00:79:0c:
f6:7b:bf:a9:f6:ca:98:a8:fc:8b:be:25:58:1a:84:
3e:ab:5b:c3:f3:ee:7d:12:ef:07:68:2c:de:2e:08:
bd:9a:60:3f:a9:26:7b:a0:6a:e2:62:a0:18:39:82:
3d:11:83:df:21:4e:ec:d0:79:c5:48:ae:3c:a7:39:
2f:0b:66:4b:9c:ee:8a:23:70:41:a1:63:86:5f:34:
6c:c1:58:df:37:89:a0:b1:0f:f8:92:ba:a7:bf:56:
42:3a:9d:9b:2f:14:80:0d:22:ca:26:a2:c5:a9:e6:
3d:09:eb:d2:b7:ba:a9:64:73:02:8c:8c:a2:f7:be:
83:d2:12:e9:2b:62:63:cf:b3:3d:0a:c2:09:e3:79:
10:c4:4b:5c:c7:2f:30:10:cd:33:1c:54:03:27:d3:
76:a8:d3:6b:00:76:15:ff:dd:9b:01:c1:84:cd:2a:
0f:f7:36:5a:70:38:6c:2d:af:01:c4:9e:96:25:a0:
85:bc:45:7d:c4:f8:90:7c:b8:ca:0a:84:53:c6:e3:
4a:a7:7e:3a:8a:51:e4:3d:b8:d9:e7:8f:24:4a:e7:
83:3a:65:0e:4e:00:75:3c:73:f7:23:01:20:5d:de:
90:da:e7:39:19:d3:4e:83:98:c4:af:d7:76:2e:6b:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:BE:4A:7F:A4:5C:31:5A:46:A7:02:69:47:60:7F:82:49:1A:D9
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:b0:44:67:86:ba:ea:e6:ae:db:a2:c9:c5:66:69:a8:b8:
c6:76:30:85:8e:03:99:b3:2f:b6:62:4d:32:db:8a:f7:d9:b1:
be:14:55:81:93:67:7e:01:3e:e1:7e:ec:ae:58:7e:e5:9f:6e:
48:e3:62:d5:31:f7:bf:51:83:ba:86:1d:3c:5e:e9:b1:ba:32:
1e:c6:cf:f3:2c:07:43:0e:32:35:7e:fd:21:65:8a:d0:cc:52:
bf:10:f5:be:8a:a5:8b:b7:43:4b:a4:16:7b:1c:ef:33:ca:2d:
c3:48:82:64:8f:bb:1f:09:42:98:ba:4f:94:83:e1:34:81:d3:
86:7b:e7:6a:ca:0b:5e:ed:2f:06:45:ca:27:1c:4e:1c:74:a9:
ca:96:6e:58:c2:25:4c:de:a8:d1:f1:3c:de:4e:8d:39:55:41:
bd:fa:fc:42:2d:04:39:41:8a:e8:23:4f:25:06:82:0b:8a:cf:
60:50:8d:2d:9e:cb:46:56:45:b1:97:c2:3f:d1:06:da:29:a9:
15:f5:aa:83:be:4c:81:a0:5f:79:d6:08:aa:fe:74:1e:f0:6c:
e9:b7:81:43:5c:a1:e2:0a:3c:7e:a5:51:fb:0a:60:ad:3e:04:
d8:9d:c5:09:5e:73:b0:50:af:be:f1:89:32:46:59:ac:70:14:
60:21:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:15 2025 by rpki-client