Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: Sa1mGqenpV/kEfVEfnpPVDKyhHIWO5WRl8q4+YZDuDM=
Subject key identifier: AE:05:43:D2:A5:59:74:0B:1F:E5:0D:4A:38:CF:5F:B9:EB:EF:26:32
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 01969E9A2A3C813D447B13004A02BE9FF468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 0414
Signing time: Mon 05 May 2025 04:00:25 +0000
Manifest this update: Mon 05 May 2025 04:00:25 +0000
Manifest next update: Tue 06 May 2025 04:00:25 +0000
Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: pUcqRq8dq9nqzokY9marCo9fQVPtxzqauDapd41BIFE=)
2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:2a:3c:81:3d:44:7b:13:00:4a:02:be:9f:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: May 5 04:00:25 2025 GMT
Not After : May 6 04:00:25 2025 GMT
Subject: CN=ae0543d2a559740b1fe50d4a38cf5fb9ebef2632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:41:32:5c:be:40:eb:58:82:32:ee:c1:dc:
19:73:12:cc:c3:75:a6:2b:72:0a:ad:1b:f7:d3:18:
aa:61:58:d6:44:99:e7:e8:fb:28:d7:5d:5c:3d:33:
7c:ff:6a:8a:98:33:d3:ed:f7:53:62:7b:ea:5d:ab:
9c:0f:2a:5e:cb:20:87:0f:48:f7:d3:11:1e:59:43:
b4:0f:fa:30:db:d9:9d:3d:1e:f1:0c:8f:5a:96:16:
3e:af:fe:cf:4d:83:65:ca:5e:86:51:22:28:10:96:
5f:ea:c4:71:dd:3b:cf:b3:94:2a:9d:a3:71:ae:70:
14:ad:ff:f6:ce:f4:93:8e:a9:35:e5:3a:0b:2b:f8:
6d:98:cd:2b:2c:67:bd:67:f5:61:05:4f:78:58:2a:
de:89:49:c0:4d:5d:3d:62:00:4e:40:b6:86:13:e0:
25:b2:04:4f:fb:89:50:a4:e0:7b:0e:89:a9:f3:a3:
30:f7:16:65:f5:dc:5b:4f:4f:9f:f4:ce:5e:e9:8a:
a4:e7:95:db:50:de:3d:4f:19:d4:f2:f8:44:c8:ea:
32:9b:17:18:b8:1b:5c:55:11:49:bc:05:04:c3:a3:
e8:25:6c:d5:23:3f:00:cb:2e:80:14:b8:a9:c9:d7:
c7:7d:ba:b3:5b:a5:17:19:01:b8:2c:21:a0:13:d8:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:43:D2:A5:59:74:0B:1F:E5:0D:4A:38:CF:5F:B9:EB:EF:26:32
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e8:30:29:d9:7a:fb:fe:e2:e0:89:f3:c3:ee:b0:44:91:d2:
33:73:21:f7:04:c5:a1:59:46:d8:d3:44:bf:cf:b7:e7:48:db:
f9:ba:4e:5d:d8:c8:c1:17:3e:82:ff:cd:5a:20:92:a4:55:f7:
47:f9:2c:a9:c1:bf:d4:1b:a1:2d:cc:89:dc:5e:c3:e5:02:b8:
1a:71:df:02:df:51:1f:8f:fc:06:a1:0f:6d:c6:43:b9:10:a5:
43:07:9f:33:4b:2a:60:5d:3c:c5:7b:86:c3:dc:f4:0e:b3:02:
ee:98:8f:1f:ba:b3:86:34:ac:cd:76:be:bc:31:32:a4:ce:57:
da:ab:02:5f:81:b9:2b:a0:90:7e:fa:45:d3:80:25:60:75:ca:
22:d1:b5:37:6d:49:c7:04:64:3f:9f:90:5a:31:fc:6d:c0:f0:
2c:72:90:6c:19:76:9e:18:46:57:68:04:88:8f:d5:2a:f7:c6:
2e:4f:42:55:63:fe:24:55:21:5d:0d:5d:6f:9e:bc:ad:42:d7:
21:00:cb:8d:ad:5b:72:36:56:da:fc:c9:a3:61:aa:90:3a:82:
a2:e1:4a:54:b8:ba:31:b2:24:33:fb:b5:33:00:f1:fd:e3:fd:
3a:89:9a:f2:6e:42:63:a5:48:c9:88:23:c6:44:51:76:00:4a:
b7:7c:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:24:39 2025 by rpki-client