Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: wG8O+8bbzJ5CgFj/krEBPTj4nR0DDr8KAUKoQNxxTGs=
Subject key identifier: 26:D3:C9:C9:99:7B:DE:D5:63:2A:44:39:D5:BB:E1:D5:1C:D2:5E:DF
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 0196816B7640D5B8976E138345B0F048DCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 12:00:25 +0000
Manifest this update: Tue 29 Apr 2025 12:00:25 +0000
Manifest next update: Wed 30 Apr 2025 12:00:25 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: sWBvxcd/uh/eeV/SW5D4O9zvGP7YKS8SAl0sNfRlO8g=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:76:40:d5:b8:97:6e:13:83:45:b0:f0:48:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Apr 29 12:00:25 2025 GMT
Not After : Apr 30 12:00:25 2025 GMT
Subject: CN=26d3c9c9997bded5632a4439d5bbe1d51cd25edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:51:a6:66:89:e1:9d:05:03:6f:31:07:1c:
33:f7:69:6f:a6:7e:98:79:1a:e8:a7:f3:bb:01:11:
03:ed:d2:ac:2b:ec:82:7c:66:21:07:36:61:8c:d5:
0f:6a:9a:2d:e1:21:96:d5:1a:ce:78:2f:2c:3e:b6:
e7:a3:e2:11:25:39:28:a7:db:dd:6a:01:73:05:3d:
64:ee:00:db:32:93:cc:0c:1a:a7:d2:55:53:9f:7a:
e4:cc:31:47:bd:bb:c8:da:da:cd:9f:1a:c8:a0:19:
8b:4d:04:99:9b:75:4b:68:b3:af:8c:85:58:0d:cb:
41:07:c0:52:1d:ab:2f:ad:33:e7:0f:84:00:f4:78:
f6:d0:05:5e:b1:b4:4b:57:22:e2:9d:03:4d:13:f8:
2a:7a:00:52:e0:1b:ee:4f:b3:ac:cf:91:5e:6d:28:
5b:ae:98:83:7e:fc:07:08:17:a8:12:8f:f6:90:c3:
7f:76:d6:45:45:e0:c8:3b:eb:dc:ac:2d:69:97:cd:
47:e1:c5:5f:b6:6c:e9:b7:0c:5b:cf:d0:42:12:1f:
04:a3:37:91:ff:58:dd:49:d6:d6:96:43:45:50:fe:
d0:4d:0a:21:e6:1a:fb:5e:86:34:1e:4e:fb:2a:86:
c5:21:1b:b0:af:e2:e4:2e:e5:e2:2c:8c:3d:c0:e5:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:C9:C9:99:7B:DE:D5:63:2A:44:39:D5:BB:E1:D5:1C:D2:5E:DF
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:45:23:7b:bb:00:05:68:5f:13:82:70:89:f4:38:b5:27:3c:
04:85:41:3a:ff:c6:68:af:3d:c5:7e:cf:42:5a:9c:4d:b2:ee:
f2:86:f0:96:5a:2c:10:8e:07:08:18:7a:c1:db:ea:09:a4:9f:
78:1e:27:7c:a1:9a:81:e6:73:e3:0b:c8:97:33:f2:aa:fe:61:
f6:bd:b1:c2:b1:ca:73:ed:ed:df:ad:48:98:21:a2:44:91:72:
e7:a9:16:72:fd:55:94:e5:d1:dd:34:aa:bb:49:79:dc:c3:99:
b1:e2:74:c8:1a:b9:2f:f6:fd:12:32:cf:ac:86:8f:25:bb:10:
35:a7:e3:a4:df:fe:1e:b8:30:aa:fd:ed:35:da:32:6d:b6:7b:
d1:c6:75:df:45:6a:af:2f:e7:ed:95:1e:4e:8f:79:92:0a:a8:
19:74:bc:30:34:7a:59:49:5a:c9:f3:d5:29:99:4d:4f:49:fb:
b9:68:cf:df:e2:fc:97:e0:4d:01:d2:6c:61:28:51:e6:8c:04:
98:ac:41:af:b9:c4:c3:8c:1f:42:7c:bc:22:fc:c4:d2:4e:68:
28:1b:c6:db:3f:07:0a:c3:84:dd:b7:53:ab:25:ee:39:fc:9c:
5b:0a:fa:bd:ea:8d:2b:92:dc:9d:8e:b0:a7:46:4e:66:e3:22:
6b:6c:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:04 2025 by rpki-client