
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: SqU24j3qaov5VFXlxDJIghKRKcxekF1Gk/0HJ7IO5qw=
Subject key identifier: 1D:26:F4:92:DA:EA:FC:20:2F:7F:BD:46:DA:2A:39:3A:A5:CD:97:4C
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 0196C2A719E823810CFFDEE7F96CFB35B3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 04:00:53 +0000
Manifest this update: Mon 12 May 2025 04:00:53 +0000
Manifest next update: Tue 13 May 2025 04:00:53 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: MzVZ8fD6yBEpbFJhh60zBr/RB/ZoPQwcSV2BE2lIDNE=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:19:e8:23:81:0c:ff:de:e7:f9:6c:fb:35:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: May 12 04:00:53 2025 GMT
Not After : May 13 04:00:53 2025 GMT
Subject: CN=1d26f492daeafc202f7fbd46da2a393aa5cd974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fc:32:81:3e:4d:d7:c3:7e:3e:8c:88:44:75:
3e:82:02:bc:22:f6:c6:3f:fb:e8:e7:9e:88:1e:25:
91:be:81:1e:cf:41:0d:1b:a8:1f:3b:e1:ec:78:aa:
0f:b8:ad:88:6d:8f:5d:4c:34:4d:9f:e0:52:7c:02:
d1:e3:0e:2b:9f:83:00:0c:26:8c:94:64:99:c2:fc:
b6:28:bb:ab:2c:6d:dd:d5:ac:79:fd:2e:f2:d2:df:
25:b3:af:4e:46:2d:eb:07:aa:c5:ac:c8:21:18:80:
c4:97:66:17:36:98:fe:b5:3d:a7:f2:0f:61:17:81:
b4:cc:b9:d2:d6:3a:a9:b2:6f:2a:49:d8:91:c1:4a:
b6:9c:55:f8:bd:d2:c6:e1:9e:b8:ad:a4:94:60:6f:
ba:fd:1a:b6:c3:04:67:c3:e2:66:dd:d1:72:ef:41:
6c:8e:89:95:d1:d4:81:bc:0b:27:65:4c:b7:58:d8:
5a:7b:06:e6:ab:d3:8b:62:89:ef:e7:ce:e6:3f:5c:
44:74:05:29:5a:cb:56:7e:34:fe:22:f7:d9:f1:5e:
ff:7b:10:a0:8c:7a:b2:3e:f7:ce:33:05:28:bc:d3:
31:e7:11:9d:3f:3e:89:84:f6:9e:75:59:50:20:5d:
0c:0b:e1:4c:53:45:de:f4:ff:e0:fa:38:d3:21:eb:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:F4:92:DA:EA:FC:20:2F:7F:BD:46:DA:2A:39:3A:A5:CD:97:4C
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:9e:c5:69:1c:98:45:cf:26:bf:62:f0:a4:f2:76:7f:c9:
63:47:8a:d0:41:d9:9b:79:55:b4:f1:e7:c1:89:52:96:de:33:
f0:0a:ed:c8:69:3b:a5:ec:2b:83:78:a8:7e:45:ad:97:29:c6:
83:00:1c:16:30:d6:b9:f1:0d:5a:9a:c0:98:0d:61:71:ce:42:
32:44:c1:0b:6e:2f:fe:10:31:6e:2d:54:e7:6e:30:2c:d8:a3:
75:1d:73:84:a6:f0:8f:59:43:5e:dd:00:02:e0:d5:5a:b3:ee:
1b:51:3d:c5:8b:39:66:b4:71:83:e5:6d:87:b4:df:c8:6a:45:
9f:f3:15:ed:96:9b:bc:7d:74:07:c7:09:36:41:15:05:9d:b9:
bd:a3:bf:5d:e5:cf:72:30:ac:a9:13:81:aa:1f:fe:73:a4:06:
0e:fd:5e:fa:e1:7c:d9:1c:16:5f:f3:8b:f6:d9:42:60:9b:c1:
28:1f:6c:af:16:ff:e5:c2:8e:71:55:ed:53:38:b0:9f:fb:08:
3b:f6:2f:c0:82:39:b6:21:48:28:59:54:8b:44:d9:2b:45:6d:
6a:6f:3f:82:3f:45:4e:35:45:fb:86:ab:40:c7:a3:0d:2f:b4:
9d:39:26:7e:13:22:ff:55:7f:f1:1e:65:17:c4:7a:2e:1d:4a:
1d:a9:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:26:56 2025 by rpki-client