Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: 7ynxDPlkztayVUH0149rw6I2y972ZCk0Elr2tVCW5po=
Subject key identifier: A8:ED:00:A8:46:4F:DB:D7:02:10:6D:93:23:59:DF:21:3F:E6:0A:3C
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 01967530A634F9C4E404DE244BD16D6F5CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:44 +0000
Manifest this update: Sun 27 Apr 2025 03:00:44 +0000
Manifest next update: Mon 28 Apr 2025 03:00:44 +0000
Files and hashes: 1: PXbhZwxgnHhuLjwlWCx5dOlGReg.roa (hash: j01BLIn3vk3ptsAnq3fQBlO6Lv4NALx1Y8dTw8r7J30=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: wBhUdk+RioI2Ylyk3bkSJMDD1WAJojVS+WFptz6qty0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a6:34:f9:c4:e4:04:de:24:4b:d1:6d:6f:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Apr 27 03:00:44 2025 GMT
Not After : Apr 28 03:00:44 2025 GMT
Subject: CN=a8ed00a8464fdbd702106d932359df213fe60a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:23:9d:c9:df:d5:4b:61:c8:76:a1:a7:02:
50:27:fd:99:60:3b:4c:17:8b:47:d9:1f:74:27:a2:
1a:eb:86:94:c1:30:9f:bb:36:79:fa:36:93:8d:53:
1e:56:af:b9:5c:ae:78:44:b5:92:a9:a4:fc:84:43:
bb:f8:5c:4d:e0:73:c4:b3:c4:6d:f1:50:19:17:ff:
4b:99:07:39:3b:bf:2b:ae:81:20:d6:9a:72:22:cc:
18:91:b8:c0:19:76:6e:15:84:5a:0a:7b:36:a4:ab:
43:65:02:bf:60:8f:28:88:79:9a:b7:82:c4:cc:ae:
33:b4:54:f6:4c:1c:f2:3f:3d:bf:28:0e:46:22:3f:
a7:29:6f:52:63:63:85:42:28:c3:bd:d5:2d:a1:a7:
c8:7f:4c:94:98:7d:65:b1:42:d3:aa:1d:7a:5d:e9:
72:ff:f7:22:22:02:c8:ee:4a:4c:90:7b:34:3d:b1:
b3:44:cb:0e:7e:55:53:40:bc:20:80:c9:7b:e0:12:
7c:e1:01:23:dd:fd:c0:ee:d0:c2:71:17:91:b3:d8:
fd:c1:23:0a:18:47:57:2e:7c:8c:e9:dd:07:3d:8b:
b6:47:aa:8b:70:94:aa:23:77:d2:96:d4:b9:38:96:
ef:3c:5f:cf:e8:90:0d:67:2a:9b:7a:5c:ca:b5:6e:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:00:A8:46:4F:DB:D7:02:10:6D:93:23:59:DF:21:3F:E6:0A:3C
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bd:09:d1:0a:78:0a:d3:d3:37:0f:9c:52:1f:5a:c7:f6:82:
0a:9d:8b:0e:54:93:89:93:cb:0b:94:4e:77:48:d5:34:02:39:
17:a5:a0:2d:e9:71:2e:c8:b7:45:4a:2b:a7:62:b4:e9:51:d3:
9b:91:99:63:f8:5f:c5:39:27:f9:b8:6c:81:08:aa:32:00:f5:
63:2a:80:5c:45:74:15:18:30:9d:5b:a3:89:31:c4:ac:81:40:
bf:6d:f5:31:49:d4:cc:73:8a:72:4a:67:68:83:4b:ea:66:b5:
99:93:5d:1e:a5:14:5e:01:cd:42:ff:61:cf:9e:91:d5:c7:91:
2e:72:4b:e4:70:69:f9:6a:c6:e1:5f:e1:81:c9:dd:09:c7:de:
eb:50:e8:0d:68:17:93:01:a6:76:68:9c:16:0c:f7:b3:43:ee:
0e:ad:0f:25:34:eb:29:1e:a9:d3:ff:8b:37:4a:22:3a:99:61:
0f:d2:54:76:c3:bb:fb:60:7c:51:b8:00:9a:cb:5c:90:7b:3c:
a9:eb:f1:9e:67:31:b0:3f:46:47:94:74:1a:1b:cd:6d:1e:22:
34:ca:00:51:1d:2d:58:a2:ab:a1:c3:01:b3:62:b8:b9:90:1e:
8a:cb:75:86:f5:c4:d6:6e:e2:73:46:09:ee:30:98:0c:f5:93:
90:80:90:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MKY0+cTkBN4kS9Ftb1zlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzk4NzBlMTAyNjJjNjcwOWI3YjYxNjM3MTM0YjVmOWE2
Yzc4Y2EwHhcNMjUwNDI3MDMwMDQ0WhcNMjUwNDI4MDMwMDQ0WjAzMTEwLwYDVQQD
EyhhOGVkMDBhODQ2NGZkYmQ3MDIxMDZkOTMyMzU5ZGYyMTNmZTYwYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33cjncnf1UthyHahpwJQJ/2ZYDtM
F4tH2R90J6Ia64aUwTCfuzZ5+jaTjVMeVq+5XK54RLWSqaT8hEO7+FxN4HPEs8Rt
8VAZF/9LmQc5O78rroEg1ppyIswYkbjAGXZuFYRaCns2pKtDZQK/YI8oiHmat4LE
zK4ztFT2TBzyPz2/KA5GIj+nKW9SY2OFQijDvdUtoafIf0yUmH1lsULTqh16Xely
//ciIgLI7kpMkHs0PbGzRMsOflVTQLwggMl74BJ84QEj3f3A7tDCcReRs9j9wSMK
GEdXLnyM6d0HPYu2R6qLcJSqI3fSltS5OJbvPF/P6JANZyqbelzKtW593wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjtAKhGT9vXAhBtkyNZ3yE/5go8MB8GA1UdIwQY
MBaAFHM5hw4QJixnCbe2FjcTS1+abHjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYt
MTU0NTc0ZmJiMzg5LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYtMTU0NTc0ZmJiMzg5
LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUL0J0Qp4
CtPTNw+cUh9ax/aCCp2LDlSTiZPLC5ROd0jVNAI5F6WgLelxLsi3RUorp2K06VHT
m5GZY/hfxTkn+bhsgQiqMgD1YyqAXEV0FRgwnVujiTHErIFAv231MUnUzHOKckpn
aINL6ma1mZNdHqUUXgHNQv9hz56R1ceRLnJL5HBp+WrG4V/hgcndCcfe61DoDWgX
kwGmdmicFgz3s0PuDq0PJTTrKR6p0/+LN0oiOplhD9JUdsO7+2B8UbgAmstckHs8
qevxnmcxsD9GR5R0GhvNbR4iNMoAUR0tWKKrocMBs2K4uZAeist1hvXE1m7ic0YJ
7jCYDPWTkICQ6w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:52 2025 by rpki-client