Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: /1RKKW90/Y47y5kqU51adlBxdxWGtq/tpgisoCFymjM=
Subject key identifier: 09:20:2B:8B:73:5C:1C:A4:FE:AD:65:C5:24:94:7B:0E:4C:5E:06:ED
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019678D6567775A7B2F0DA8C1161A66D9F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 20:00:34 +0000
Manifest this update: Sun 27 Apr 2025 20:00:34 +0000
Manifest next update: Mon 28 Apr 2025 20:00:34 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: VpEHqXyApaDh/Be4u1tsFjGkv1uVGklqCT84PqrkpxA=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:56:77:75:a7:b2:f0:da:8c:11:61:a6:6d:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Apr 27 20:00:34 2025 GMT
Not After : Apr 28 20:00:34 2025 GMT
Subject: CN=09202b8b735c1ca4fead65c524947b0e4c5e06ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:bc:46:31:29:1e:80:63:55:3e:c5:60:9b:
80:62:3e:0b:dd:49:92:a7:aa:06:d8:a2:e6:96:a2:
64:ff:7e:be:0f:08:59:d9:c9:b4:e7:80:b5:6c:0c:
80:b2:94:e7:77:f0:e2:be:b0:62:7f:8c:dd:0e:61:
92:a2:2a:68:3b:d2:30:8e:45:22:e2:e7:9d:f9:f9:
98:43:c0:79:25:dd:3b:59:ef:d2:be:3b:60:b6:f5:
8d:be:e6:96:b8:0f:0c:04:bd:83:4c:ad:f7:e8:55:
4e:8a:bd:43:9c:4d:8f:4c:53:b1:c8:d8:4a:78:43:
39:84:43:bf:e0:24:cb:da:2b:f8:6a:94:12:5f:04:
6e:68:75:d2:d9:78:00:20:c9:28:6c:c2:03:a7:75:
b5:fc:db:71:7b:86:60:4c:a3:27:08:40:e4:af:36:
2b:01:8a:06:0c:af:dd:30:1a:4e:e6:02:56:4a:e9:
08:09:91:3f:54:ae:75:52:8b:d0:d8:99:f3:e9:d0:
53:30:cc:71:01:c4:54:ee:e1:ed:8b:94:d0:f7:38:
3e:66:ec:bd:0e:e5:6f:d4:d2:fd:e5:5c:ea:ad:bf:
e7:dd:5f:77:8d:72:08:87:4a:c4:51:a0:2a:c0:cc:
e5:b7:be:e1:e8:8d:bd:dd:6c:bc:57:53:e0:4b:94:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:2B:8B:73:5C:1C:A4:FE:AD:65:C5:24:94:7B:0E:4C:5E:06:ED
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:a7:a5:6b:78:80:39:0c:f5:92:ec:7c:03:01:33:fd:b3:
a0:98:a6:e2:4f:b3:5a:7b:a1:32:c3:1d:bc:bf:97:1c:9a:e9:
7e:c1:91:3d:7d:38:c4:11:16:ff:b4:b5:22:e3:89:e7:26:be:
3e:1f:01:c3:ef:87:2e:74:fb:99:10:b2:92:dc:82:d3:a8:10:
8c:24:5c:de:c3:b9:21:ec:9f:47:05:9c:2a:7c:3b:8f:7e:a2:
f5:e5:a3:fb:36:df:ad:98:ce:e2:e5:9a:e0:ab:d9:79:b9:bc:
ef:d3:31:a5:88:97:ab:40:db:6b:2e:d4:3e:68:d8:42:76:aa:
39:f0:6f:15:b3:37:81:4c:98:fa:fa:9f:d4:06:7d:63:1a:9f:
8c:07:9b:1e:f3:c8:98:63:56:88:69:1d:8b:68:b5:1e:c2:88:
ca:f0:cd:01:15:e8:1a:14:8b:20:10:be:91:c0:39:e1:b4:07:
7d:42:f9:ce:55:a3:ca:92:3d:51:0b:d8:73:4a:01:5e:da:92:
9e:86:8f:2a:96:ca:c9:d3:4c:ed:93:5a:a2:c4:55:a0:d2:19:
a3:7c:bd:20:cd:ee:32:b2:8d:06:e9:26:7e:53:8f:77:52:1d:
00:b1:d2:c8:32:58:cd:af:1b:6a:6e:48:31:05:43:06:8e:53:
e8:91:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:50 2025 by rpki-client