Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: PI1N0kiepR0oq3wg2YjOTUc4XPW7Np3N1HJV3MeGGWk=
Subject key identifier: 52:5A:3D:74:76:02:C1:98:87:FB:9F:75:8C:41:CB:7A:C1:EF:92:03
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 01969E63531F79A8CB92B8DC43B5B85A51C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 14B6
Signing time: Mon 05 May 2025 03:00:31 +0000
Manifest this update: Mon 05 May 2025 03:00:31 +0000
Manifest next update: Tue 06 May 2025 03:00:31 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: 04ti0IOCmfLUBapmFMSGtNFwLNkTs+vXB5ylzj5TpSk=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:53:1f:79:a8:cb:92:b8:dc:43:b5:b8:5a:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: May 5 03:00:31 2025 GMT
Not After : May 6 03:00:31 2025 GMT
Subject: CN=525a3d747602c19887fb9f758c41cb7ac1ef9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:5d:36:5d:28:58:02:ad:70:c1:ff:6e:da:
23:c4:cf:08:97:79:2a:30:3e:b7:ed:1c:1b:9a:bb:
49:61:95:b1:da:14:13:2a:bb:6f:1d:45:9f:58:65:
3c:ff:d3:00:dc:57:93:32:15:b4:e6:2e:bd:4e:b4:
90:25:26:59:cc:12:7c:df:27:6d:e8:02:f7:1e:bb:
b0:c9:02:3f:d8:95:ff:0e:49:a7:92:5e:29:bd:80:
ca:79:17:0d:9f:9e:9c:ac:9d:4c:e3:c8:2d:99:83:
b5:16:b3:40:4c:66:83:20:85:66:81:51:ba:eb:eb:
00:c3:29:7b:40:39:b5:4c:10:61:f4:97:08:ff:80:
70:98:06:db:42:19:d6:8b:4f:8e:98:b0:88:e1:3f:
51:b7:3a:60:7a:65:bb:4f:2d:8d:d0:87:89:4a:af:
d5:68:e4:d5:f4:c2:8a:24:f9:f1:3f:54:56:34:2c:
65:1e:d6:5a:e2:36:65:60:de:5f:e9:e2:23:6e:31:
76:cd:0d:da:85:56:f6:26:18:a0:7b:7f:2f:da:bb:
32:86:cd:64:24:f2:9e:a9:d3:4c:a6:22:77:57:7f:
45:2c:39:af:02:8c:08:88:74:5f:ca:d5:f1:32:3e:
d3:4f:7d:57:4f:6c:23:b7:aa:48:aa:5e:6f:a6:7c:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:3D:74:76:02:C1:98:87:FB:9F:75:8C:41:CB:7A:C1:EF:92:03
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:dd:27:98:13:9a:8f:7c:2f:bb:1c:b7:59:07:e2:95:ea:
f2:08:3b:b6:71:54:97:3c:b5:5f:a9:56:d4:4d:1f:06:30:00:
8e:54:42:87:f9:ab:bf:7e:e2:41:d8:3e:8d:52:f3:1e:01:10:
bb:56:86:32:a1:ca:7f:5f:de:57:f4:d3:2d:32:cd:a3:50:54:
47:72:27:65:24:1b:5a:b5:65:f2:df:28:0a:b7:80:6d:c2:5f:
85:4e:5e:bd:3f:42:a4:a5:27:0d:74:6b:9e:c7:9f:fb:37:56:
5f:70:fb:f9:c9:24:f8:f8:50:a4:37:6c:28:e9:c8:38:30:c9:
0d:d4:3c:7b:03:11:a4:d3:e4:72:8d:22:20:0a:43:2e:33:c3:
c5:10:5c:3b:c7:42:07:a0:4b:81:a1:a1:c5:c9:d0:1e:03:cc:
e8:20:7d:96:1e:63:92:ee:38:b7:87:1a:c3:69:ae:12:a0:43:
5f:36:bc:24:fc:5b:d7:b1:4e:f5:47:52:cd:36:aa:0d:e7:bc:
bc:8e:f9:32:f6:6c:6e:28:46:c7:a1:b5:6b:39:33:c8:50:81:
6b:ec:10:8d:c1:41:a9:af:d8:7b:d5:05:0c:79:ab:af:b6:20:
1c:e9:6c:1a:b4:43:88:f9:f0:19:98:93:9c:3e:fe:fe:96:50:
2a:b3:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:30:38 2025 by rpki-client