Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: yhqOnX8HgsTWjjN1szYN0Lpog/yiaUW5cwfXRaC3FM4=
Subject key identifier: 25:A4:AD:5E:66:3A:CE:5C:5D:1C:C6:9F:A9:E2:BC:F5:A8:06:9E:96
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 0196C72951F5E0811BA18E143A69DA9C19C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0C6D
Signing time: Tue 13 May 2025 01:01:35 +0000
Manifest this update: Tue 13 May 2025 01:01:35 +0000
Manifest next update: Wed 14 May 2025 01:01:35 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: ntDCz0bSAxZmXuJlYWROKXZ1ErIjIGM5f3+9ipyIOxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:51:f5:e0:81:1b:a1:8e:14:3a:69:da:9c:19:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: May 13 01:01:35 2025 GMT
Not After : May 14 01:01:35 2025 GMT
Subject: CN=25a4ad5e663ace5c5d1cc69fa9e2bcf5a8069e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:c6:52:eb:e6:7d:7d:02:9a:3c:36:26:fb:
8b:7d:8b:01:1d:fc:32:f4:fa:1d:00:f8:3a:df:88:
88:87:65:39:d7:79:0f:73:52:5c:73:2e:63:47:b6:
a8:47:4b:29:09:a4:2a:93:f8:20:1b:98:86:6c:45:
df:c4:2d:d3:0e:85:d1:dc:1a:00:df:d2:fd:2f:05:
b0:2d:eb:19:36:cb:08:10:3f:0e:48:a2:5f:12:e0:
59:04:33:53:0a:ca:5a:9f:63:82:e3:49:89:19:f4:
f9:70:03:39:ea:de:99:5d:3c:e1:a7:db:e3:40:22:
b6:cc:d2:69:1b:40:d1:a9:50:b6:1a:c9:9e:96:5e:
c7:32:10:e6:a1:fd:20:3c:0c:48:af:49:a2:5a:28:
80:e8:0d:ef:7b:6a:05:fe:d0:82:d4:ea:5c:c3:d9:
f8:97:dd:40:cb:4e:c2:48:6d:a1:28:b8:35:3f:2d:
40:0c:81:21:77:65:b7:2f:64:ae:41:e2:3b:5b:8c:
ad:a6:55:e3:31:0e:ca:dc:93:7f:22:57:2b:8a:d8:
a3:d0:61:9e:9c:6e:04:35:f1:75:de:a8:2c:0d:0c:
f4:c0:03:ff:7a:7b:00:07:80:17:59:c6:81:76:9c:
76:9c:fd:4f:d7:64:37:a6:47:72:8d:1e:e6:fe:94:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:AD:5E:66:3A:CE:5C:5D:1C:C6:9F:A9:E2:BC:F5:A8:06:9E:96
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:f6:f4:3a:56:a9:63:ac:2e:02:7d:20:e0:17:71:55:09:
dc:86:85:2b:f6:4f:20:38:54:75:2d:71:47:ce:32:01:31:27:
21:f1:12:ef:61:82:0e:a1:6c:8c:de:eb:4a:d0:a0:fb:2d:8f:
a8:f5:d3:f8:f4:b8:9f:2d:1c:2c:8f:ef:eb:e9:6f:ea:f9:81:
85:24:f2:97:9d:f3:8b:38:3a:5d:f7:03:22:38:c9:da:42:8e:
a4:e6:0d:cb:14:ba:93:1e:ea:4f:b1:8f:99:23:8f:34:4a:55:
1c:f6:da:34:7a:10:ce:fb:cf:ad:2b:e8:b7:3e:57:06:30:f5:
59:b8:00:a5:d8:d5:98:dd:d0:2a:c8:51:30:aa:e1:23:0e:bc:
ea:22:1f:78:0b:52:6d:9c:99:c0:c2:b7:2d:e8:d6:b4:d7:05:
30:bd:83:84:66:31:8c:3d:4d:70:08:8e:aa:9d:b2:11:61:fa:
7c:1a:63:4b:01:30:54:39:9e:1f:60:dd:42:0b:95:08:73:01:
e2:6f:b0:72:1a:e8:c7:62:e2:4e:d7:31:ac:08:32:63:3c:c9:
bf:b3:08:32:58:8d:84:b5:09:31:c7:97:7e:ae:a9:a0:55:0a:
0c:a9:90:90:fc:f3:04:42:bd:02:67:60:9c:43:53:ea:dd:3d:
5a:d6:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:10:01 2025 by rpki-client