Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: 2KUQXATfwWKdjBF/va++WBcYNU1ecKzZTWNVr98SB0A=
Subject key identifier: 8C:57:F8:AA:93:FA:4A:5A:87:5F:2D:20:79:53:09:42:7E:A7:3D:67
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0196B710B4EEBADC3D8C55F46816271752A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 121E
Signing time: Fri 09 May 2025 22:00:47 +0000
Manifest this update: Fri 09 May 2025 22:00:47 +0000
Manifest next update: Sat 10 May 2025 22:00:47 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: w7MZT8F1/UPlr0JN/tLx/ojqhuoTnQrWtG5kRMqaR3s=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:b4:ee:ba:dc:3d:8c:55:f4:68:16:27:17:52:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: May 9 22:00:47 2025 GMT
Not After : May 10 22:00:47 2025 GMT
Subject: CN=8c57f8aa93fa4a5a875f2d20795309427ea73d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:b7:3a:f1:b7:ff:b1:1d:7f:d8:d3:4d:89:
49:32:43:e8:3d:28:17:49:04:93:9e:6c:36:a9:39:
b2:cd:16:f1:aa:ee:5f:cd:eb:b4:0d:9c:06:b7:2c:
69:05:f3:6f:d5:69:98:78:a4:2c:16:74:f0:e3:4d:
7b:7b:21:7d:43:cc:13:03:7e:25:3a:e0:57:9d:e7:
e0:00:1c:01:e0:3d:26:e8:24:9e:90:8e:7f:12:13:
dc:5b:99:ea:99:0b:6d:e0:ef:c1:90:ae:69:6a:a1:
6a:a3:e3:e8:5d:cd:e0:8e:19:b1:02:fa:7f:12:5f:
55:d9:c1:e5:62:0f:49:23:ea:b4:05:0a:55:6c:af:
db:a7:f3:00:08:f4:45:96:89:8d:84:3d:6c:98:7d:
ce:98:b7:e7:cc:9b:22:27:a7:89:f8:2e:c0:78:4e:
b0:78:a8:a4:da:a5:1f:a5:9f:d1:4a:b3:36:fe:05:
b8:bf:97:9b:64:45:e1:eb:06:d3:8d:54:f2:1c:29:
a2:bb:bb:2d:01:fa:7a:2e:35:00:a3:d3:05:22:b5:
e4:ba:5b:86:dd:df:ff:be:11:4b:5b:e1:7a:0e:2f:
6c:81:5e:94:81:e3:4a:84:a3:34:e4:ac:78:af:d2:
07:7a:bb:c8:c7:e5:ad:1a:16:0c:32:6b:b3:49:9d:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:F8:AA:93:FA:4A:5A:87:5F:2D:20:79:53:09:42:7E:A7:3D:67
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:53:8f:1b:d8:f9:b9:57:2e:88:99:54:74:1f:36:bc:71:
bf:78:a3:28:9d:dc:c8:24:69:6a:c5:d7:de:42:aa:cc:d1:8f:
c6:ef:7b:86:00:f7:bf:a8:1d:c5:4a:d6:43:af:46:02:d3:8e:
eb:16:7f:f7:35:d1:87:27:75:05:86:a8:29:60:9b:18:01:f5:
c1:d1:e6:d8:ba:06:a3:24:50:2d:47:f5:e8:d5:50:a4:c3:1f:
93:4b:e2:ba:42:69:e6:f6:4e:65:4d:94:70:a0:be:dc:fa:9c:
e5:0f:57:f1:bf:96:9f:f4:b2:ad:97:8d:ad:dc:79:94:14:13:
68:0e:03:dd:d9:fa:4c:6f:6c:c8:ac:fe:da:ce:ac:fc:37:45:
cb:f6:a7:0d:bc:c8:f1:6d:f9:c4:7c:33:dc:14:bd:fe:59:08:
fa:94:6e:fb:11:16:d0:32:35:de:22:3e:a1:56:66:b3:a0:7a:
2c:f0:bc:60:ac:66:d6:61:6d:ea:95:7a:58:a3:d9:89:2b:90:
73:75:37:39:29:88:17:c5:3a:47:9f:6c:ba:43:8c:46:48:03:
d8:07:c2:47:7f:57:8b:e3:6d:91:79:6b:9c:1a:bb:70:b6:43:
93:ba:6d:89:f4:1f:cd:f0:06:dd:11:37:05:25:8c:6b:c9:ff:
91:3e:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:02:28 2025 by rpki-client