Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: MW5cMDRaZ07BtsnuRodYmMs+XGDcAIM+O3R3fFPMXXw=
Subject key identifier: 71:A6:8C:83:63:51:ED:95:2F:34:98:4D:8A:23:1F:6D:9A:B4:F1:62
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 01968DA667CF052A05A4D3159E5CC94E6DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 13A8
Signing time: Thu 01 May 2025 21:00:15 +0000
Manifest this update: Thu 01 May 2025 21:00:15 +0000
Manifest next update: Fri 02 May 2025 21:00:15 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: fXOJFY/Wb2RFrjKtLRrgLioYNUH8rV1ihsKulk1AazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:67:cf:05:2a:05:a4:d3:15:9e:5c:c9:4e:6d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: May 1 21:00:15 2025 GMT
Not After : May 2 21:00:15 2025 GMT
Subject: CN=71a68c836351ed952f34984d8a231f6d9ab4f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:82:8b:73:33:20:72:dd:b1:35:20:e1:5b:
4d:07:ad:d0:4a:7f:c8:5a:ec:c4:72:ea:40:af:60:
a5:8e:81:2e:1d:b2:e2:a8:f5:89:45:c1:b0:fb:b0:
87:c2:c8:88:89:b5:ce:50:9f:fd:fc:72:3f:65:4c:
f7:c7:36:57:d5:88:de:5f:0a:53:09:da:9f:39:0d:
c6:3b:13:6c:d8:99:23:88:e3:05:df:a6:07:58:f7:
30:26:da:3a:ec:d5:b0:4d:24:f4:41:97:8d:30:2e:
bd:8d:5c:39:6b:03:96:c3:96:3a:4a:d3:94:0d:78:
0c:37:32:8a:38:17:cb:40:ea:e6:84:16:97:c8:4f:
14:8a:93:b6:4c:45:41:23:60:ec:c8:cb:56:63:d0:
a8:3d:7b:f8:c9:f0:06:f5:ae:d3:94:7a:6e:e5:e3:
3b:da:03:63:9d:32:c8:d4:b7:ef:2c:b4:6d:d0:6f:
50:cc:64:17:1d:d6:d9:3b:a3:f7:30:72:88:2e:c8:
62:71:63:eb:7a:be:d1:03:58:3b:2c:4e:44:d4:e7:
bf:a1:f1:a6:83:8e:80:db:16:49:1d:8d:da:60:07:
91:03:5b:d3:54:20:7d:d2:5b:a5:48:b2:3e:dd:fe:
59:be:a6:d9:8f:88:48:de:a6:aa:a2:41:c2:73:77:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:8C:83:63:51:ED:95:2F:34:98:4D:8A:23:1F:6D:9A:B4:F1:62
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:a1:32:ec:f0:9f:f8:90:62:f9:32:0c:2a:a1:0b:4a:a0:
90:89:f4:33:0a:02:a3:3d:b5:f3:2f:ca:1d:2c:2f:0f:a7:71:
ca:4a:45:04:05:9a:0a:3d:77:15:d4:40:81:e8:a8:88:84:c6:
47:d7:cc:0d:6c:29:dd:90:9c:33:cf:6b:3a:8a:3e:27:82:5c:
4a:e0:55:39:0f:ef:97:77:96:9c:26:c2:45:e7:31:19:d8:87:
df:26:00:8d:fe:c4:36:78:b9:0a:c5:69:26:0a:40:e8:d9:9a:
c8:4a:42:5e:fc:44:65:03:71:81:21:2d:da:20:b0:db:e9:d3:
f3:9d:8e:87:f5:97:40:97:65:f4:f3:82:e9:af:88:ce:84:63:
fd:d7:52:db:09:7a:3f:c8:cd:60:6f:97:73:dd:09:2b:f9:9e:
50:2b:65:d9:b4:1d:fb:94:57:6d:fa:e7:f3:22:39:9a:4d:ce:
2e:9e:c1:47:9c:9b:0b:48:13:a4:52:26:df:65:d4:ed:85:6d:
a7:33:e6:e8:10:59:74:fd:a1:f5:8f:56:bb:f0:8b:aa:98:bf:
9c:bc:d1:40:35:82:7a:eb:fd:bd:67:92:12:57:97:8f:11:aa:
56:b6:3b:38:27:ad:01:c7:10:9c:7b:64:b6:c5:9b:2a:7b:97:
70:9e:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:50:38 2025 by rpki-client