Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File: cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier: knBDOC17Kqho+05TxQw8OHyXnYPNyXRMSBU0oWJD178=
Subject key identifier: E8:D1:C3:9E:26:5B:B5:39:82:9B:04:5C:16:B8:F7:83:A9:4F:12:C0
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer: /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial: 0196BC000777D2D63E04440A968B1417C2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number: 042D
Signing time: Sat 10 May 2025 21:00:40 +0000
Manifest this update: Sat 10 May 2025 21:00:40 +0000
Manifest next update: Sun 11 May 2025 21:00:40 +0000
Files and hashes: 1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: H2GP7AepIqaLyjTY/4YEujL3i3lecN/rblkzAvkx+yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:07:77:d2:d6:3e:04:44:0a:96:8b:14:17:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
Validity
Not Before: May 10 21:00:40 2025 GMT
Not After : May 11 21:00:40 2025 GMT
Subject: CN=e8d1c39e265bb539829b045c16b8f783a94f12c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:1e:8f:84:2b:ab:aa:86:03:4c:4a:1a:86:
d8:98:d6:b5:26:2d:54:60:7d:73:cc:ae:f3:58:f4:
be:12:07:62:0e:eb:e6:81:90:fa:0c:2d:e6:d1:8a:
ed:ed:dc:61:e1:75:32:bb:6e:48:28:52:0b:2b:9d:
6e:58:08:5d:ad:a5:aa:d2:e1:b9:76:81:c6:10:a0:
9f:ec:3b:ac:29:c6:a1:94:ea:54:22:13:51:e3:e2:
da:f8:41:0f:82:98:3c:7e:ee:b1:82:fc:6b:0b:c5:
89:41:43:07:95:ca:5c:5c:7f:4f:c0:9c:98:7d:c7:
c6:a9:42:c1:f8:7a:39:0e:c2:4b:7e:50:2a:68:74:
8a:41:a1:01:02:e6:ff:e2:31:8b:73:12:86:4e:d6:
a5:6a:52:d2:61:f0:92:e5:83:ea:dc:08:4d:97:7d:
df:4b:f4:6d:7e:87:37:b1:61:73:f7:6d:f6:68:13:
1d:95:1b:a1:e0:05:19:51:bc:55:95:f2:e8:ea:47:
ec:92:04:82:7f:7f:9e:de:6c:9c:da:ad:18:74:b6:
49:eb:f7:23:cd:a0:c0:f9:86:ce:34:47:d1:55:10:
8f:10:6e:d6:8b:cd:8f:04:c2:65:05:0b:1f:ec:82:
26:89:f1:21:da:14:e6:81:86:24:77:b1:d9:b9:02:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:C3:9E:26:5B:B5:39:82:9B:04:5C:16:B8:F7:83:A9:4F:12:C0
X509v3 Authority Key Identifier:
keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:82:25:bc:2a:cf:3d:50:88:b9:e6:f5:6c:0a:e1:a6:3b:
81:46:b0:f7:bc:d5:fa:f2:03:18:7a:31:81:03:28:74:59:17:
61:2c:20:76:34:cc:4a:21:a5:f4:d4:40:c2:c4:f8:67:48:f5:
9c:a7:95:43:c8:1d:93:e9:ea:fd:7e:55:db:d7:1d:2c:d1:cb:
f4:c2:0e:f3:26:65:26:74:8d:4f:fc:a4:3c:92:ed:81:ba:41:
ed:78:d1:1b:81:7e:7b:32:a9:80:5c:1c:11:02:17:7f:62:c4:
3f:65:df:01:ac:4c:55:32:23:2c:59:16:4c:72:db:0a:7c:81:
72:fe:57:e3:10:2b:2e:a4:3b:33:ea:11:61:08:6b:b2:64:f7:
67:58:85:44:d9:80:f3:63:46:de:9d:06:bb:f2:4d:2b:bb:f2:
e5:43:35:1f:80:4c:20:77:68:94:ce:68:fc:7f:69:38:5c:a2:
55:37:ec:d0:c1:d2:aa:22:bd:49:df:a3:ae:2e:8d:0d:ca:28:
3d:9c:e4:42:88:57:c1:86:42:58:7a:ed:fb:c1:0a:e8:2a:8f:
c3:43:14:e2:e9:33:32:2a:b3:51:31:d0:03:24:e7:6b:c5:5b:
79:9a:83:89:f4:c0:d0:a9:e3:b7:ac:db:a6:bb:9b:61:f8:b3:
22:fa:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:28:15 2025 by rpki-client