Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: OW+NPzvYkTadCHyhoPYRo//y5BPxICSFg+4tfauJl/U=
Subject key identifier: 18:72:41:F2:A8:D9:7C:32:BE:A0:0F:D1:B5:CF:88:C3:C3:1E:F6:E2
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 019691168763D109E60CEA1D0BBECC4C4545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1162
Signing time: Fri 02 May 2025 13:01:34 +0000
Manifest this update: Fri 02 May 2025 13:01:34 +0000
Manifest next update: Sat 03 May 2025 13:01:34 +0000
Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: Eg86MN+RWCZspc5dEYD9aa1zuqdpFYozyi3QUAwhem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:87:63:d1:09:e6:0c:ea:1d:0b:be:cc:4c:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: May 2 13:01:34 2025 GMT
Not After : May 3 13:01:34 2025 GMT
Subject: CN=187241f2a8d97c32bea00fd1b5cf88c3c31ef6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:5e:f4:6a:77:93:c9:31:e4:9f:67:70:8a:
29:93:b9:84:fc:88:d4:a6:8b:4f:e0:11:39:2a:df:
c6:f2:30:58:4f:8c:48:90:76:1e:75:31:10:89:b3:
0b:a8:78:56:d1:5d:69:1e:36:0b:34:8c:fb:95:03:
89:3a:61:61:68:1d:c7:7c:ab:9c:32:9f:66:ae:63:
4b:d4:4a:73:be:ba:cb:9f:35:95:76:ab:48:8f:f5:
a3:85:82:f6:1b:84:70:e4:65:39:73:2b:3d:6c:66:
66:66:c5:de:b9:69:fa:ec:c2:de:9e:88:78:75:8d:
57:b4:28:a2:45:37:a8:11:e1:db:d2:a0:4e:e8:99:
81:a2:75:31:3b:30:60:12:39:9b:5c:47:41:ab:b8:
31:06:d2:9c:d7:be:15:70:d5:4b:28:55:52:30:2f:
af:b8:d2:9f:f1:64:17:24:54:dc:09:01:e5:05:5d:
95:69:aa:c4:c6:d9:32:5c:81:eb:37:47:b0:ca:d8:
1c:0b:68:cc:8d:ea:a5:e1:89:eb:be:5e:ee:16:9c:
53:68:bc:85:07:04:49:fd:df:50:6e:b9:03:ca:90:
17:2d:c6:67:25:49:60:66:81:68:9f:35:c9:d9:79:
0e:72:65:d1:f9:ce:12:3c:d5:37:65:a3:50:3e:d1:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:41:F2:A8:D9:7C:32:BE:A0:0F:D1:B5:CF:88:C3:C3:1E:F6:E2
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:7c:ce:8b:ed:52:53:95:74:c9:ba:55:15:35:b7:6c:61:
dc:3d:f5:1e:f2:31:68:94:dc:36:3e:3c:07:0a:0a:1d:b5:fa:
f5:11:fa:18:f3:87:85:09:94:7f:09:7a:b1:d2:d9:fc:c3:b3:
8e:bb:5f:7c:6a:d0:31:f4:f5:44:c9:f0:66:70:ab:6d:e4:f0:
14:2e:bc:bc:0e:b8:b6:76:45:b1:99:7c:0c:90:1d:df:f9:af:
d0:27:77:dd:10:4b:9a:e0:c4:b1:c3:6f:b1:7f:33:55:eb:12:
a0:10:ba:b3:c7:9c:f6:a6:7e:6f:c6:d4:aa:78:0f:bd:d8:0e:
89:21:a3:5c:25:8e:e6:e0:8b:ce:e1:ac:86:43:de:7a:73:a9:
28:7b:ad:fd:77:1d:69:85:26:47:a1:32:e1:68:c9:9e:f6:ff:
49:ff:5c:59:37:ad:39:5f:04:e6:1f:c2:f9:54:4f:1c:2a:0d:
27:33:cc:eb:33:e9:fb:f8:86:b0:3f:1b:c0:33:96:9a:83:9b:
88:20:00:f8:c1:1f:f8:8c:02:9d:28:d2:b3:41:ed:ae:89:99:
83:b8:1a:db:21:11:e5:48:65:63:c7:37:e2:46:16:c9:46:0c:
ce:24:be:32:81:c2:31:c4:f6:49:00:b1:e6:9b:a4:0c:ac:38:
e5:36:61:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRFodj0QnmDOodC77MTEVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzY4M2NiODU2ZDZkOWZmNThlMjg3ZThhOTA1ZDI5MmRj
YTZiMzQwHhcNMjUwNTAyMTMwMTM0WhcNMjUwNTAzMTMwMTM0WjAzMTEwLwYDVQQD
EygxODcyNDFmMmE4ZDk3YzMyYmVhMDBmZDFiNWNmODhjM2MzMWVmNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j9e9Gp3k8kx5J9ncIopk7mE/IjU
potP4BE5Kt/G8jBYT4xIkHYedTEQibMLqHhW0V1pHjYLNIz7lQOJOmFhaB3HfKuc
Mp9mrmNL1EpzvrrLnzWVdqtIj/WjhYL2G4Rw5GU5cys9bGZmZsXeuWn67MLenoh4
dY1XtCiiRTeoEeHb0qBO6JmBonUxOzBgEjmbXEdBq7gxBtKc174VcNVLKFVSMC+v
uNKf8WQXJFTcCQHlBV2VaarExtkyXIHrN0ewytgcC2jMjeql4Ynrvl7uFpxTaLyF
BwRJ/d9QbrkDypAXLcZnJUlgZoFonzXJ2XkOcmXR+c4SPNU3ZaNQPtHOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhyQfKo2XwyvqAP0bXPiMPDHvbiMB8GA1UdIwQY
MBaAFHM2g8uFbW2f9Y4ofoqQXSktyms0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUt
Njg3YWU2ZmJhM2FkLzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUtNjg3YWU2ZmJhM2Fk
LzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzp8zovt
UlOVdMm6VRU1t2xh3D31HvIxaJTcNj48BwoKHbX69RH6GPOHhQmUfwl6sdLZ/MOz
jrtffGrQMfT1RMnwZnCrbeTwFC68vA64tnZFsZl8DJAd3/mv0Cd33RBLmuDEscNv
sX8zVesSoBC6s8ec9qZ+b8bUqngPvdgOiSGjXCWO5uCLzuGshkPeenOpKHut/Xcd
aYUmR6Ey4WjJnvb/Sf9cWTetOV8E5h/C+VRPHCoNJzPM6zPp+/iGsD8bwDOWmoOb
iCAA+MEf+IwCnSjSs0HtromZg7ga2yER5UhlY8c34kYWyUYMziS+MoHCMcT2SQCx
5pukDKw45TZhZw==
-----END CERTIFICATE-----
Generated at Fri May 2 15:00:37 2025 by rpki-client