Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: lDcWGN+s2+XsPrNTA17J+wzKIrOl9DNoMjhUnQZARPs=
Subject key identifier: E7:E2:D1:0B:9B:23:32:2C:0F:3E:D0:7B:86:75:B4:6C:D8:44:6A:DE
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 0196C1CACAD4037038970E159757DCC6F678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 0306
Signing time: Mon 12 May 2025 00:00:14 +0000
Manifest this update: Mon 12 May 2025 00:00:14 +0000
Manifest next update: Tue 13 May 2025 00:00:14 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: LS5iZxgftQbY0yQC5CK9Lnw60tQwahQ/JfjRl6AcKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ca:d4:03:70:38:97:0e:15:97:57:dc:c6:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: May 12 00:00:14 2025 GMT
Not After : May 13 00:00:14 2025 GMT
Subject: CN=e7e2d10b9b23322c0f3ed07b8675b46cd8446ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:1d:13:f9:ee:cc:75:cd:c5:f6:3a:4c:08:
a4:ba:40:7a:0f:62:37:78:8d:7d:c2:0e:d1:5e:00:
99:f5:ce:a3:9f:a2:62:8f:f9:a9:16:64:e3:73:04:
35:ad:4b:fb:e3:a5:cd:a6:81:22:59:2b:d4:2c:f6:
16:c8:d3:bb:6c:f1:b5:86:38:54:27:61:0c:b4:81:
70:b5:58:0e:3c:f9:e7:f0:33:e0:37:cf:30:19:a3:
eb:3c:37:fc:1b:9c:0c:c7:6d:53:74:28:c0:3d:ee:
59:40:05:2b:64:1e:59:5b:4a:15:bb:af:58:27:5b:
90:3d:0c:8e:c5:63:61:80:d6:7f:6c:d5:0a:9e:3a:
5a:d2:64:9e:73:50:fa:61:79:33:c2:cd:84:61:84:
f3:20:62:02:32:9f:de:f3:f3:4f:35:a7:77:ec:6c:
89:af:79:4b:8a:83:6a:cb:d6:82:71:b6:d7:63:b4:
fd:c6:6c:4e:7c:b7:1d:5c:c4:a8:84:10:1f:e6:76:
b0:2f:6d:40:3c:15:94:f5:aa:aa:a4:75:cb:fa:7d:
74:8c:7b:3d:3b:48:e4:27:88:31:09:db:c1:d9:93:
63:91:ad:76:5d:c4:88:d3:f9:8f:57:47:61:e2:2e:
e7:0f:b5:0e:b5:58:b5:c7:5c:9b:ae:6b:ea:1d:b1:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:D1:0B:9B:23:32:2C:0F:3E:D0:7B:86:75:B4:6C:D8:44:6A:DE
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:a6:44:6b:2d:0e:4d:5a:da:b4:f8:78:78:ef:14:1c:b5:
c8:cb:5d:a0:de:6d:5c:b1:0b:fd:b4:5b:80:69:44:02:a5:5c:
9f:58:17:74:b4:64:b5:31:80:9d:fc:20:40:eb:35:9b:79:7e:
34:37:0e:bb:53:21:fb:28:46:62:ed:3b:84:5b:fc:66:4d:71:
9c:65:38:5f:e6:13:71:b4:fb:2e:2f:35:d6:8d:fa:8a:d5:b9:
ad:7b:a9:90:d5:a2:ea:98:38:f5:ef:8a:07:a0:3c:e1:de:f8:
b5:14:19:bb:89:a4:e3:c5:32:e0:4a:cf:46:c6:99:6b:91:e7:
88:61:f8:20:68:1e:51:52:1c:fd:23:a4:8f:93:30:f7:f8:cd:
54:5a:db:fb:89:c4:3d:18:5e:c8:d9:f0:cc:1d:31:2c:f4:14:
32:fc:aa:d9:91:e4:da:f7:fe:df:26:b5:9b:b9:91:42:e9:81:
f5:48:2c:74:b4:24:cd:cf:a5:93:25:bd:75:3b:89:22:23:cc:
c8:8f:5e:6b:49:d8:20:83:18:a2:a5:d8:de:5f:ff:23:4a:6f:
75:fb:a9:1d:23:44:e1:7b:d9:63:9f:a8:51:3a:19:22:5c:ae:
89:c3:c4:23:45:d6:8f:f6:9e:76:13:96:26:9c:b9:0c:ec:38:
3b:00:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:38:54 2025 by rpki-client