Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: HPKpM6ct/yGEor7b5kJWcwwQoVLVBB+3lxaNVoyfnhs=
Subject key identifier: 67:C0:42:69:07:34:55:AC:C9:5E:B9:67:45:78:7E:94:85:26:F0:DD
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0196771EF641D2A68D07BD9FF19ECF03C70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 032A
Signing time: Sun 27 Apr 2025 12:00:39 +0000
Manifest this update: Sun 27 Apr 2025 12:00:39 +0000
Manifest next update: Mon 28 Apr 2025 12:00:39 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: ItvtXm89H+b7lQ2s2KaxWl2IHdnvPvB/XbPkqYin6YA=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f6:41:d2:a6:8d:07:bd:9f:f1:9e:cf:03:c7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Apr 27 12:00:39 2025 GMT
Not After : Apr 28 12:00:39 2025 GMT
Subject: CN=67c04269073455acc95eb96745787e948526f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:de:09:42:71:2b:2b:87:b5:13:c9:2f:0b:
eb:13:d0:e3:fa:31:9b:ef:7d:39:7c:e3:fa:87:40:
e3:43:5a:f0:4c:3b:f1:d9:ae:7d:71:42:74:9e:e9:
13:39:76:e8:08:8c:94:77:7c:e2:72:ce:98:eb:a2:
bd:52:de:1c:7d:b9:58:7f:fb:57:c0:da:4b:2e:1c:
d1:1f:b2:d2:2b:4b:67:8c:6e:30:73:21:2c:cc:1b:
ed:e2:7e:4e:1e:7f:46:b6:5e:68:e5:10:36:f4:c0:
d0:a4:41:ca:95:d1:8c:ba:7a:2e:59:90:70:d8:70:
b2:91:ea:aa:31:dc:e5:66:37:a2:05:12:7b:c5:a9:
d2:c7:f1:f2:53:77:46:72:d2:ed:54:0e:1c:a5:2c:
c4:7e:5f:ca:27:e7:53:de:93:dd:a8:e9:92:5f:d7:
38:25:52:6e:a4:ec:5e:b7:01:b8:67:c2:13:d6:6e:
3f:86:cc:ea:6d:0f:72:6f:e0:de:40:13:2c:a6:c2:
3c:34:02:b6:94:83:8c:74:1c:1a:34:84:59:9f:ac:
7a:fe:3a:0e:8a:5e:b7:1c:5f:01:c2:fb:04:0c:c1:
6c:3c:75:83:d5:53:cb:ec:d3:96:2c:87:45:57:31:
cd:c2:bc:47:f8:ad:dd:fa:7d:42:97:b4:e1:09:f3:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:42:69:07:34:55:AC:C9:5E:B9:67:45:78:7E:94:85:26:F0:DD
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:79:5c:71:10:fc:80:f1:e9:09:95:40:a4:59:ba:6a:e7:27:
2c:69:ee:93:df:24:d5:f2:95:cd:5d:fb:8e:f9:0b:88:9b:fc:
92:f0:3a:de:24:53:90:99:e3:15:d4:e3:40:3b:69:bd:ba:5f:
61:04:d1:a8:25:22:fc:96:ed:9e:7f:6b:60:51:77:2b:05:ce:
d1:ec:bd:94:33:9c:52:67:43:a2:87:fb:42:2c:9c:8d:6d:73:
65:3a:a1:76:2e:94:ba:a5:37:c0:17:06:29:43:fb:30:ee:f2:
0e:ee:e1:4e:f3:ce:2a:a0:d0:e9:da:72:3d:cb:7f:a4:54:a6:
fb:f9:01:04:00:89:42:7b:93:71:0e:4d:d8:08:ea:ea:92:a3:
9f:8d:21:9a:46:eb:09:91:cd:ff:2c:6e:ad:c1:54:f4:7f:9a:
89:ea:bc:a7:cc:78:ed:9c:e2:5e:ff:61:2a:3d:69:7a:7c:56:
55:51:7a:4d:af:a6:f8:51:16:81:eb:84:2e:1e:82:e2:a2:87:
76:ad:df:fe:a2:5a:ad:f4:02:97:94:ad:e0:1f:dc:75:58:a8:
62:93:bf:1b:d0:8d:05:b0:6e:83:5e:df:14:5e:09:c7:b4:d9:
0f:cd:3b:42:5a:f1:96:64:bc:1d:18:4e:ef:a6:46:e9:2f:90:
bf:a9:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:11 2025 by rpki-client