Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: tonyZBMIhqCnsQHGgjvhHnKMJNAOGb4fSY/wI+dfSdA=
Subject key identifier: A0:10:63:55:8D:52:F4:57:47:EA:45:1C:2F:28:42:3A:2E:B9:4A:45
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019652DB55FD92A8733BE5784AF1B7FE7346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 0ECF
Signing time: Sun 20 Apr 2025 11:00:28 +0000
Manifest this update: Sun 20 Apr 2025 11:00:28 +0000
Manifest next update: Mon 21 Apr 2025 11:00:28 +0000
Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: qXRqS5EVN3TfEkFUK1FCKONCJkFUlusyMlD6UIUZ8QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:55:fd:92:a8:73:3b:e5:78:4a:f1:b7:fe:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Apr 20 11:00:28 2025 GMT
Not After : Apr 21 11:00:28 2025 GMT
Subject: CN=a01063558d52f45747ea451c2f28423a2eb94a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:5f:9a:62:1f:df:45:9b:c3:a1:7c:e1:51:
37:8c:a9:4f:cd:e0:28:cf:c0:ac:10:66:67:80:c9:
97:81:2a:2d:dd:0a:13:66:8c:89:d6:bc:ac:1a:38:
da:05:97:2f:2f:b4:3e:e9:c0:2f:8b:c5:7b:d1:13:
f1:09:8c:ab:07:e3:05:64:73:5d:bc:2e:e0:6e:7a:
f0:68:f1:f5:32:6f:66:10:c4:b2:0e:b9:87:38:7e:
95:ed:11:c4:16:02:1d:f8:56:7c:6d:ef:bd:45:b0:
8f:77:f4:50:ad:c7:89:61:f8:6d:58:90:e3:df:6a:
fc:a2:14:ed:8e:83:a1:29:96:23:f4:dc:10:ea:1a:
d7:9c:ce:38:52:18:1f:b5:c4:6e:58:67:be:5d:f1:
5d:d8:bf:0d:5e:72:f1:d3:a9:aa:ba:29:44:2e:54:
80:76:01:c0:94:49:cc:78:2d:84:05:06:43:95:07:
de:de:c0:c3:61:0f:6d:4b:44:2d:1b:97:7b:db:b8:
06:6b:1d:6b:78:5b:3d:ed:f0:39:d8:d3:24:21:d6:
0f:38:4a:8c:59:60:99:b4:86:22:3d:0e:8e:05:89:
55:a5:bb:f2:cf:16:e0:9e:e4:b5:59:90:9a:7d:9f:
5f:9e:ed:d6:97:ff:f3:2c:e4:a1:ea:49:48:93:d4:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:63:55:8D:52:F4:57:47:EA:45:1C:2F:28:42:3A:2E:B9:4A:45
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:b3:fe:41:3a:68:8b:28:60:72:1e:29:00:45:c0:e6:a0:
ff:eb:6f:1d:f5:75:76:7f:57:fe:44:69:95:d7:06:19:13:11:
df:d7:de:1b:91:a1:8f:d8:50:11:51:e3:3f:7b:2c:8a:02:db:
e2:3e:95:3d:31:a3:d2:0f:20:1d:b5:06:c3:be:22:0b:47:3f:
85:19:35:47:f7:43:53:af:c9:73:27:d2:64:bc:79:f7:61:2e:
ed:83:1f:af:a7:27:eb:40:15:e6:ba:15:56:bd:d5:55:49:ef:
22:22:f7:a1:57:e5:65:34:5d:8e:59:a1:21:85:e2:a6:f5:2a:
14:b3:6e:8f:eb:97:2c:92:17:b6:3c:97:17:73:6b:40:a6:3c:
22:fc:af:65:a9:f5:68:e0:cb:e8:76:e9:1c:a8:2d:ce:10:09:
ac:6c:45:89:28:64:27:d8:0e:2c:04:8e:06:fd:38:e1:bf:21:
58:f4:c3:f1:1d:46:97:14:51:de:52:93:be:88:41:80:84:88:
fd:f4:ec:0e:4c:30:2f:be:9e:0e:56:73:07:d6:f7:37:12:75:
83:e8:e7:e9:dd:58:f6:25:dc:d9:55:d5:7f:d5:5d:0a:c7:8b:
30:af:a9:cc:21:3c:7a:fd:fe:d9:60:37:f5:a2:73:7a:1d:57:
44:c8:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:49:20 2025 by rpki-client