Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: ZSBGf0iarolLITaaAcyUlrQ5Fb7mGvZ2YtxnmqABnm0=
Subject key identifier: 9C:F5:D7:66:76:50:03:96:10:99:AD:0D:9C:99:DD:B2:29:6C:34:06
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0196331A71E612CF4EE45D30F6E3B06EE621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 070E
Signing time: Mon 14 Apr 2025 07:01:33 +0000
Manifest this update: Mon 14 Apr 2025 07:01:33 +0000
Manifest next update: Tue 15 Apr 2025 07:01:33 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: QL2SMc8di1mYoAlebZddddemUqpdjre+vEZVv/KVym8=)
2: Pc2EUIWHtHolnHBST8NkkBublHg.roa (hash: kiUdXWLazxPlTfW1//CR94yYtQySkuU4W6TmLo2zE+c=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:1a:71:e6:12:cf:4e:e4:5d:30:f6:e3:b0:6e:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Apr 14 07:01:33 2025 GMT
Not After : Apr 15 07:01:33 2025 GMT
Subject: CN=9cf5d766765003961099ad0d9c99ddb2296c3406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:3c:83:55:9a:98:a2:33:a5:bc:bb:6d:53:
b6:ba:d7:9b:94:0a:98:f5:9c:de:9f:a9:4b:54:6f:
05:56:e1:5d:34:17:f1:f4:2f:f6:7b:29:be:76:02:
c8:fb:a8:de:83:b1:ad:19:e1:ca:80:8e:98:1c:d5:
2b:ab:83:e0:4f:18:81:6c:1b:48:dc:43:25:42:8b:
6a:fe:e7:38:28:60:87:fd:af:fc:b9:03:f8:b5:57:
05:cc:11:79:bc:26:f9:f6:fd:5a:a6:d4:63:30:4e:
4b:d7:02:16:50:16:4f:cc:22:14:ce:b4:4a:c4:9f:
a0:52:33:fb:e2:9f:05:b8:24:00:76:5b:88:d0:3d:
7d:9d:b1:34:0d:e9:e7:a3:c3:af:6b:56:63:cc:e5:
e0:c0:1f:be:6c:b4:4f:b7:4f:ff:db:07:d5:17:8d:
2b:c6:31:93:7f:1c:d4:b0:ee:38:15:7d:42:e2:fa:
15:28:a9:ee:a1:f5:85:a8:78:ef:a9:f3:38:35:01:
14:fe:3b:80:e5:9e:e3:09:77:1d:75:71:23:eb:c6:
99:c0:3d:ad:b5:d0:56:3e:79:41:9f:d9:17:ca:27:
c5:9c:e6:19:c7:d8:bd:0d:94:91:7e:96:e4:b1:6c:
9a:ab:ba:59:bd:8f:c1:5e:96:e5:49:64:77:a6:77:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:D7:66:76:50:03:96:10:99:AD:0D:9C:99:DD:B2:29:6C:34:06
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9e:c4:24:1a:17:8f:d3:4f:95:7c:25:f7:8f:1e:a3:75:3b:
13:80:53:a9:81:2b:8f:ce:a7:3f:e1:29:b6:d5:0c:e6:bf:ed:
53:cb:e4:e7:b9:dd:58:1b:29:ba:f6:1e:e7:d6:b1:68:47:97:
74:06:5b:84:bc:a6:d3:bd:aa:07:ce:55:55:49:aa:87:d3:0b:
29:cf:b5:ac:83:bd:47:af:aa:5f:8b:19:32:5e:f1:db:0f:c9:
ca:dc:c3:47:ce:7b:0c:d2:19:2b:71:97:40:1b:84:6f:74:20:
c2:e0:c4:a0:ee:e4:ad:91:ad:3d:84:3b:88:7b:1e:9e:01:99:
fa:dc:18:b5:a3:67:8d:93:8c:20:af:66:40:79:9f:1c:b6:87:
d7:34:79:b3:91:9e:5c:ac:2c:fe:81:44:0d:6c:4c:c0:15:4b:
06:5d:3f:ae:aa:b3:49:9d:bc:db:a5:4b:4f:e5:14:4b:97:dc:
09:46:c9:8e:fa:dd:76:e0:d7:bb:a2:e0:c0:d1:38:38:e6:17:
41:4a:a0:fd:ec:b8:13:9a:f3:c1:43:0b:bf:a2:b1:7f:ae:0a:
a7:13:ff:64:f7:b5:55:90:d0:d8:2d:57:fe:1e:80:15:52:f5:
00:ac:57:ce:62:e9:4e:e3:ca:1d:41:1e:80:55:90:de:65:b6:
c5:63:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:29:51 2025 by rpki-client