Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: SiGu4vPuVCFkYAaa6aphcyxNrkm5oKpwHyCgti3kXQ8=
Subject key identifier: 74:98:69:42:7A:4A:34:66:59:BB:2F:6B:08:7F:1A:FB:43:99:AD:68
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01967CB321261AB35310ED69D9A515ABD48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 14:00:36 +0000
Manifest this update: Mon 28 Apr 2025 14:00:36 +0000
Manifest next update: Tue 29 Apr 2025 14:00:36 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: Jsba6+n7R/sWQdlbZS5m7kh2eafRdYbTL0xwkohtupE=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:21:26:1a:b3:53:10:ed:69:d9:a5:15:ab:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Apr 28 14:00:36 2025 GMT
Not After : Apr 29 14:00:36 2025 GMT
Subject: CN=749869427a4a346659bb2f6b087f1afb4399ad68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:66:71:f7:38:7f:53:51:39:22:16:96:46:
0c:03:6e:71:ba:2f:28:8d:dc:cf:9e:41:e2:4a:98:
37:41:bf:1a:a7:04:90:35:12:6f:ca:9b:3d:e3:0f:
b1:be:39:52:85:80:a8:2e:7e:0f:8a:d2:fb:80:35:
c0:8e:1b:89:d9:54:a2:4d:b1:06:6e:b3:eb:9a:1c:
b4:62:26:3d:d0:fd:d2:46:38:a2:a9:2a:f7:7e:6b:
9d:30:5c:14:2e:35:8f:33:fd:dc:c0:83:d5:a2:2d:
d0:da:ca:1e:7b:10:1d:ef:27:7b:93:04:2d:be:54:
83:30:66:00:b1:aa:0f:6c:b9:cf:51:dc:f5:67:9c:
40:fa:f2:b9:f4:ae:19:1f:6b:ed:c5:2f:69:39:a4:
69:70:29:16:20:cd:f8:26:cc:bd:2f:8c:52:15:b6:
66:b0:e6:d8:85:7a:e6:02:d0:33:9e:e3:d5:d1:04:
12:ce:2c:fb:64:0f:d8:03:42:7e:bc:1d:6f:45:9e:
e6:e5:58:b9:c7:c4:4b:24:9e:de:63:32:0c:50:d9:
b3:01:d7:e4:50:9a:4c:41:ce:b2:54:f8:44:99:aa:
fb:9b:ab:9d:d1:01:06:2a:a9:b4:6f:b7:e4:0b:fa:
90:cf:ae:6d:e4:73:ed:e5:71:d1:17:ee:32:3d:d4:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:69:42:7A:4A:34:66:59:BB:2F:6B:08:7F:1A:FB:43:99:AD:68
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:0a:e6:21:ca:9a:37:13:19:2f:19:37:51:dc:d8:d1:8f:
5a:9a:fc:fa:d6:5b:a5:28:6a:43:61:3d:fd:53:51:d2:e6:59:
fc:97:79:79:eb:64:d2:fe:87:33:bd:c5:2f:ae:a4:29:a9:a5:
9c:bc:01:e1:04:ca:db:49:e9:15:91:a7:e3:62:ad:3d:17:ee:
4e:52:6e:0b:6e:c1:5d:1a:c0:e5:b8:b6:11:25:93:34:38:5d:
31:84:bb:37:f3:58:17:cb:d8:df:74:b6:d0:e7:c0:3b:6a:63:
0f:e3:49:15:dc:e1:ab:d2:52:79:4b:fc:ad:d0:88:a6:3d:75:
62:4d:67:77:19:39:92:b6:79:ef:2f:ae:66:36:98:2b:6d:9f:
81:0a:e6:56:ba:a5:f8:74:70:2a:78:f8:34:6c:af:aa:5a:59:
42:cb:76:b4:1e:49:34:db:8d:b2:f6:aa:40:6e:6a:a0:31:f6:
f4:12:2c:3a:89:7f:29:ca:e5:ea:b9:07:42:c6:6c:b6:a3:0c:
49:98:62:70:a7:3c:eb:0e:58:92:a6:67:d6:6c:d8:72:7a:c0:
a6:3b:84:ae:cd:c6:dd:aa:db:d1:b3:3f:5e:92:bf:38:d4:ff:
63:d5:bc:1e:69:61:25:99:80:9b:1a:fc:b9:16:72:25:79:59:
4f:fd:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:40:56 2025 by rpki-client