Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: WgKZA6Arl7d2ci41/cByf9Pt3kesq8PmezYpvu+5YMU=
Subject key identifier: 9A:04:CF:0C:C6:23:E7:73:90:37:BD:82:D6:56:14:1C:4C:5A:1D:22
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 01967567A1E892B2130B030E7F1E438FB1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 11FC
Signing time: Sun 27 Apr 2025 04:00:48 +0000
Manifest this update: Sun 27 Apr 2025 04:00:48 +0000
Manifest next update: Mon 28 Apr 2025 04:00:48 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: AhQKUzeW5OIsSHoYY1ie1EVov2h1okNdSBEYTvhQ2Q0=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:a1:e8:92:b2:13:0b:03:0e:7f:1e:43:8f:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Apr 27 04:00:48 2025 GMT
Not After : Apr 28 04:00:48 2025 GMT
Subject: CN=9a04cf0cc623e7739037bd82d656141c4c5a1d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:7c:2e:56:14:67:da:4c:22:b3:fe:e4:49:
47:81:b0:d3:d8:14:de:dc:d7:8f:ad:c2:eb:93:74:
df:09:d3:ff:77:39:2b:fb:4d:67:09:0f:9a:71:06:
aa:40:50:45:f6:36:80:60:2f:25:61:09:80:91:f6:
49:20:e3:be:25:9b:87:1a:93:04:ba:fc:f0:ef:95:
a6:23:f3:35:4f:80:14:01:0c:d1:59:ff:c2:4a:98:
00:03:e2:6c:af:d5:32:e0:62:73:b6:be:d7:96:67:
73:db:22:a7:b3:16:ca:28:e9:da:6e:51:15:c6:81:
0f:a7:2c:b0:0b:66:f5:31:c8:c2:ab:d7:5e:58:60:
ce:fb:4b:a2:fc:96:80:39:d8:26:45:aa:56:00:6b:
30:fa:eb:8c:96:5a:72:de:24:12:8e:60:4a:09:e0:
0f:25:c7:ff:4d:6d:b6:59:d0:34:dd:ca:96:6f:fe:
40:2a:77:d5:ba:d0:24:01:5e:fe:1e:ee:9f:ad:85:
68:75:19:bd:d5:3a:d3:de:49:91:92:2d:9d:3e:23:
bd:42:2f:8b:9a:c8:35:8e:2b:47:f2:2b:f0:8f:c8:
30:f5:f8:3c:c9:60:5d:65:e3:fd:4e:67:48:59:54:
25:cb:4f:b0:03:32:25:08:18:87:df:80:b6:78:43:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:CF:0C:C6:23:E7:73:90:37:BD:82:D6:56:14:1C:4C:5A:1D:22
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:73:36:ff:16:4c:ec:08:06:5d:4f:33:ea:42:fa:62:73:fe:
75:11:a0:3a:97:13:05:f7:77:6f:0d:bc:fa:4f:1c:56:76:15:
ef:52:ba:94:78:20:40:c5:7d:b5:6c:7c:73:60:98:e2:cf:0d:
a9:bb:3b:21:94:68:03:c4:81:91:de:12:c7:5f:eb:86:8f:bc:
4e:93:b7:9c:5e:d7:3e:40:89:2e:e1:6b:d9:28:0e:81:32:18:
07:1e:53:36:e1:3c:ae:e4:bc:9a:86:f5:d1:b6:2b:21:d6:b5:
e8:2b:ca:c3:7d:2d:cd:7c:e4:27:04:fc:12:7e:b1:97:dd:df:
2f:7d:76:39:04:cf:68:88:a5:c6:43:42:90:e1:ec:01:ba:2b:
ef:f6:ac:7f:87:69:ed:f4:0d:04:bc:7f:01:4f:e5:61:af:12:
bd:99:dd:de:47:a9:eb:23:2f:23:e7:99:b9:ce:30:cc:68:10:
7a:56:be:bf:ec:6e:9b:43:fc:75:62:57:12:81:bf:c6:67:2e:
e3:df:7e:ca:c8:6e:e5:8c:79:f9:1c:ff:18:f6:05:c2:7f:04:
7c:4c:ce:23:80:3e:2d:95:6d:6e:81:33:2a:81:b7:b0:e2:2f:
54:b4:64:8a:3a:05:f3:f2:9f:6f:68:fe:db:20:8d:7b:33:ba:
29:0f:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:09 2025 by rpki-client