Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: SNM8GiAtTbJMf4s0dtrGl0sjgiHWrbzMITRQCkdikT4=
Subject key identifier: 82:73:EA:E7:10:18:DA:34:6C:37:93:BE:D1:21:C7:DC:27:C0:97:4B
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0196A7668C8FABDA66E044A2C30F17E97518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1165
Signing time: Tue 06 May 2025 21:00:37 +0000
Manifest this update: Tue 06 May 2025 21:00:37 +0000
Manifest next update: Wed 07 May 2025 21:00:37 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: pffojziXeWcwM1uMR/rZcNhTiVqN3hc8cHb4k4d9ALE=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:8c:8f:ab:da:66:e0:44:a2:c3:0f:17:e9:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: May 6 21:00:37 2025 GMT
Not After : May 7 21:00:37 2025 GMT
Subject: CN=8273eae71018da346c3793bed121c7dc27c0974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:e6:a7:68:e8:37:a6:ba:9b:bc:97:f0:e6:
d7:66:ee:34:e2:2b:46:30:24:89:7a:f5:bc:3b:55:
ae:a0:5f:be:ef:ce:5a:45:2e:df:d8:c5:f6:44:02:
47:03:86:5d:27:fc:e0:0b:84:8d:36:5c:2a:ce:4d:
50:2e:16:68:d9:90:fe:d9:2e:19:d4:8c:a8:be:e6:
61:d6:55:0d:d6:17:41:55:5d:5d:65:29:fd:58:d9:
8c:89:e0:29:7c:74:69:16:b2:fe:42:29:ce:b6:55:
e4:85:7c:70:a8:04:82:81:f5:d3:20:65:5b:49:f5:
6d:f6:44:d7:99:16:89:8c:da:46:74:f5:f6:20:85:
bb:83:9d:4e:9a:62:4b:b5:c3:3b:82:bc:af:4d:9e:
ac:5c:bb:3c:df:bb:18:ae:30:f6:1e:d5:07:82:23:
78:3b:09:40:55:39:1b:49:16:03:b0:7b:6f:a5:df:
86:29:95:20:27:58:88:92:be:8b:e7:ea:10:49:f4:
9f:a9:1f:e7:ee:bf:cd:db:7e:00:f1:ca:0c:77:9c:
3f:96:71:ab:6a:dc:30:b6:e5:7b:6c:1f:82:26:ec:
9a:9b:54:43:c9:ce:b4:d1:c8:9f:1a:9c:e3:74:12:
76:75:64:aa:af:d5:2a:f3:e0:b7:d2:79:88:18:30:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:EA:E7:10:18:DA:34:6C:37:93:BE:D1:21:C7:DC:27:C0:97:4B
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:11:5f:f0:43:47:c4:0e:ee:15:b2:62:74:16:aa:17:49:
97:9f:95:c6:37:fb:16:50:f6:ad:43:3f:10:20:0f:ba:ba:4e:
cb:2e:b5:30:c0:86:c2:18:2a:cf:04:3b:2f:3d:99:5f:f5:c7:
a0:1c:eb:62:11:12:05:81:c6:f9:1f:d7:d8:fa:ba:c5:59:e6:
cb:be:ae:56:c1:98:fc:a6:a7:32:96:36:0f:58:5c:c2:89:bb:
e7:6a:2d:eb:96:15:70:0c:0c:de:e5:b2:15:6f:d4:d3:f6:59:
87:31:ea:f2:a8:39:be:53:41:19:57:6e:c0:ca:a3:0c:6a:df:
5a:48:c1:86:27:9b:41:23:de:1a:e5:41:89:9d:95:da:9b:5d:
3c:68:03:9f:32:96:31:86:95:c4:0b:a4:dd:49:8b:eb:d7:7e:
9a:f9:7a:86:a9:ce:9b:1f:f5:02:8e:d2:bb:4d:ab:8c:db:83:
66:37:06:10:ff:c3:63:61:97:62:f8:0d:ee:3d:fa:e2:df:c4:
7d:01:fb:d2:6c:02:f5:29:d5:f5:79:b8:55:43:d1:dc:37:d0:
42:34:7b:64:a4:17:5e:20:4f:15:78:c2:8a:41:5a:81:20:60:
14:7c:2e:12:0a:99:4e:5b:ee:91:84:98:c1:84:6f:0a:59:aa:
d5:5f:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:19:23 2025 by rpki-client