Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: tmH1fkU5zxCz0UF71LXFuMJSCTBq7bpcpBPRp1OSg38=
Subject key identifier: A0:58:C4:13:BF:2A:5D:9A:C2:5F:A0:61:31:5A:B7:AF:F9:5C:B9:4F
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 0196A1D22CC497E73D60753EAEA02D172043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 19:00:27 +0000
Manifest this update: Mon 05 May 2025 19:00:27 +0000
Manifest next update: Tue 06 May 2025 19:00:27 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: aOVXKEEQKmJrLgDGSWoCLWnsDCtn/cYWiTPEFLkXDeo=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:2c:c4:97:e7:3d:60:75:3e:ae:a0:2d:17:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: May 5 19:00:27 2025 GMT
Not After : May 6 19:00:27 2025 GMT
Subject: CN=a058c413bf2a5d9ac25fa061315ab7aff95cb94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:74:c8:48:02:66:fb:c7:e7:75:92:ae:71:
6c:d7:de:f7:5b:e9:dd:c4:b5:58:c3:aa:76:7f:a3:
ae:c3:61:f3:d6:99:f8:f8:79:16:23:51:f4:45:de:
90:79:0a:fa:6e:1b:8d:fe:b6:bf:3c:14:cd:9d:b5:
c2:24:b0:43:b2:d7:ab:ab:da:e8:ea:97:16:ef:e7:
d9:58:cc:84:5b:cb:04:57:83:33:f1:6e:e4:de:22:
00:a0:bc:37:38:ee:43:8b:85:f6:45:40:e5:55:74:
22:8b:aa:bd:b0:5e:d3:c2:09:fa:bb:0b:85:54:37:
e2:c9:7d:01:5a:2b:d0:ff:2f:6c:f0:31:94:55:6a:
ee:d8:cc:08:2c:c0:55:e6:af:53:ab:be:9e:50:a3:
e6:15:63:c7:c3:03:42:11:aa:9c:10:10:0f:e4:28:
41:57:d8:68:08:26:2b:cb:10:8d:70:1e:21:37:09:
bd:29:08:54:62:35:5a:bd:a7:f8:2a:45:3e:ba:63:
53:58:9a:a5:7c:c6:26:ab:39:93:04:24:91:94:a7:
c8:89:34:f7:35:db:17:92:05:a5:4a:42:34:3f:ea:
b6:81:25:5a:47:c4:70:84:68:be:aa:b1:56:3d:3d:
47:0d:91:47:b9:a0:72:0e:50:7f:84:de:4d:55:1d:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:C4:13:BF:2A:5D:9A:C2:5F:A0:61:31:5A:B7:AF:F9:5C:B9:4F
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:6c:44:9c:c4:bc:97:1a:5f:3d:5f:17:a4:9f:fb:57:02:
b3:de:c6:e2:69:53:53:7f:06:16:e5:8c:1b:68:46:b1:d0:7f:
c6:b2:f0:92:ad:97:db:af:83:db:83:1a:05:11:5e:80:8f:96:
52:8d:3c:8e:98:26:d8:6f:89:c3:1b:c6:d1:d6:f0:84:47:00:
0c:5b:c1:c2:71:2e:86:5c:53:5e:f4:ad:ce:05:58:d7:54:17:
db:c6:9b:36:1a:cb:8d:a2:bc:7f:b1:c8:2c:4f:ed:ec:29:58:
2e:7a:fe:d2:95:eb:f6:99:d5:e1:68:ae:08:e0:bc:59:f4:ea:
21:0d:04:43:c8:93:b8:ec:1d:77:f9:16:20:a2:d6:93:ad:49:
ba:7c:0f:d7:1d:c8:99:18:4d:95:e0:88:89:97:40:ee:97:36:
c0:e8:08:51:b2:50:38:06:64:7f:cf:42:82:c9:3f:e8:e6:01:
25:51:9e:e0:0c:37:40:ca:03:54:31:71:9e:3e:c5:ab:c2:c7:
29:13:1a:4b:d6:53:f1:6b:64:b8:ce:25:42:4f:ba:cf:dc:0c:
1d:94:ba:8d:d3:58:8b:96:21:a8:23:d3:08:b8:ad:76:2e:2e:
61:26:1c:da:53:31:5a:32:14:8c:13:a4:f6:32:67:4d:b1:0e:
c6:1e:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:09:40 2025 by rpki-client