Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: JTLSmWx5Gamyz1Eldc293D50Ge9vVIvIrtjNEntYw48=
Subject key identifier: 00:DC:9D:45:E1:45:FB:78:36:3A:D9:1B:96:9A:4D:22:24:7B:AB:97
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019682EBF68202C2C2CBED35DDDE3493F010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 19:00:23 +0000
Manifest this update: Tue 29 Apr 2025 19:00:23 +0000
Manifest next update: Wed 30 Apr 2025 19:00:23 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: FGk2LKP0Lz8h+lYs1vwML/orzJI/ALep2QhzMhJ+c9E=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:f6:82:02:c2:c2:cb:ed:35:dd:de:34:93:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Apr 29 19:00:23 2025 GMT
Not After : Apr 30 19:00:23 2025 GMT
Subject: CN=00dc9d45e145fb78363ad91b969a4d22247bab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:f2:58:67:74:db:f2:1c:6c:13:e5:2d:62:
c2:ff:d5:2c:55:20:f6:09:6b:4f:20:17:f8:35:e4:
f8:fc:00:40:41:5c:88:0a:f9:e1:1e:0c:ce:89:4e:
0c:95:c1:b2:6e:e2:76:25:ed:00:4a:e4:92:cc:38:
6c:24:73:f7:5e:7c:9a:c1:c9:57:b5:c3:c8:ef:44:
20:67:6e:6e:00:1f:d5:41:cd:d8:a1:61:6e:93:17:
f0:83:5d:93:55:51:de:14:f6:ef:9a:91:e2:79:bc:
92:71:31:52:2a:64:ea:22:bc:94:66:d8:e1:80:82:
f0:5f:38:9c:e2:d3:73:2e:20:16:01:ce:1e:57:ac:
2f:3e:00:11:cc:fb:ef:6b:b2:64:3c:13:8c:b7:e8:
aa:2f:47:41:16:3c:08:09:80:9a:ec:5e:91:ef:10:
0d:1c:60:da:11:b2:12:fa:d1:c3:76:e7:7d:02:5a:
b0:3d:61:a7:38:03:55:b2:d1:fe:de:79:81:11:ed:
b3:bc:49:da:45:7f:7f:d6:8a:fe:44:84:5f:f6:a1:
19:62:1d:b1:e0:fa:22:93:04:c0:af:dd:8e:ee:95:
72:a1:cc:a9:84:62:48:a8:18:70:2e:05:19:7d:57:
df:c7:8a:c0:a0:9b:cd:03:db:8e:e0:39:2b:ed:96:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:9D:45:E1:45:FB:78:36:3A:D9:1B:96:9A:4D:22:24:7B:AB:97
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:38:59:b9:a9:37:18:00:56:84:c3:42:c0:2a:ca:88:c5:cd:
6d:db:0d:b6:93:d7:95:f3:c9:5f:e7:bc:e1:67:46:0c:d1:dc:
c4:57:09:c4:30:f1:97:63:77:26:93:83:a5:2f:92:43:e0:90:
f2:a9:1c:3a:74:2e:c1:b0:47:a8:01:69:31:c1:89:6d:b0:ea:
07:14:18:76:e7:6f:9e:8c:2a:8e:a4:00:71:99:7e:5c:5f:18:
65:21:03:9b:ea:44:26:61:aa:9c:38:f4:ab:c0:82:da:e1:d0:
ff:8a:74:af:b4:b8:c1:bc:12:23:ba:b6:c7:10:88:5f:27:e3:
1e:09:d1:43:4f:f5:37:3f:49:48:6d:ea:29:2f:f4:8a:9a:bf:
95:a9:66:97:9d:61:6c:c2:a4:66:43:1e:3d:03:d7:4e:44:d3:
41:c8:25:fa:f1:0f:97:af:a7:c7:8d:01:0e:aa:1b:a8:67:6b:
a9:49:9e:ed:3d:41:4c:a2:41:14:87:36:94:95:ab:75:78:44:
8f:5f:e1:c5:e5:46:f3:8a:09:e2:5f:37:af:f5:14:6f:d0:ab:
30:74:0a:c0:4b:1e:d4:88:ab:61:1e:f9:da:06:b6:05:ab:f9:
d1:2e:d4:1b:e3:6d:6c:79:4b:25:62:4e:92:c2:75:0b:36:2b:
9d:6e:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:37:09 2025 by rpki-client