Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: sifGooR4LqAG6Ay4JQvw1SdaNZTg5fYPIwZwCeA9+gc=
Subject key identifier: 36:07:5C:9D:B4:33:A6:B5:40:8B:48:06:90:D0:65:74:43:30:C1:2B
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 0196572608E274382EB818C3695F9B0C3FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0824
Signing time: Mon 21 Apr 2025 07:00:32 +0000
Manifest this update: Mon 21 Apr 2025 07:00:32 +0000
Manifest next update: Tue 22 Apr 2025 07:00:32 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 4f9sr8JH7Wq1HuJXuxNqMkQmy+c2c3eJQwIikwYAaHQ=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:08:e2:74:38:2e:b8:18:c3:69:5f:9b:0c:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Apr 21 07:00:32 2025 GMT
Not After : Apr 22 07:00:32 2025 GMT
Subject: CN=36075c9db433a6b5408b480690d065744330c12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:28:87:5e:19:f0:c5:17:8f:c2:71:43:f4:
e6:04:73:22:55:3d:a9:b1:d0:11:c2:5e:79:f7:0a:
44:49:31:18:78:c0:ac:e5:6a:35:6c:ff:9a:68:5f:
43:80:f5:86:0b:bc:4f:9d:03:63:0f:35:b0:30:19:
4d:dc:4b:54:95:4b:f4:86:67:9b:4a:03:ea:49:42:
23:af:6d:6c:f3:30:d7:f0:dd:95:a4:1b:80:dc:49:
87:b2:30:e2:dd:d1:c3:60:bd:c3:14:36:eb:96:83:
92:da:af:92:1c:90:2f:81:d0:29:80:18:93:07:30:
cb:3a:d8:5b:17:07:9a:08:b7:f4:4f:0c:15:1b:12:
8e:cd:1b:83:5f:a6:8f:d0:52:a5:3d:cc:a1:15:8d:
5e:09:c7:0e:a8:8e:93:16:db:bc:10:57:af:b4:98:
ad:32:e4:86:e8:cd:9c:9d:6d:78:fc:e3:fc:aa:98:
68:e7:fb:5d:95:16:a8:3c:86:5a:96:72:5f:dd:01:
69:52:50:3a:ff:09:88:19:85:48:01:40:de:6d:7c:
17:ab:12:8d:66:d3:49:4a:71:eb:59:11:c5:2d:ce:
ed:b6:57:46:5a:83:f4:12:ac:0c:64:a1:01:2e:ed:
8c:de:67:9a:05:ab:25:01:f8:c5:42:cb:e7:c6:fa:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:07:5C:9D:B4:33:A6:B5:40:8B:48:06:90:D0:65:74:43:30:C1:2B
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fb:69:0a:cd:4a:16:cf:8a:83:b5:7d:79:74:19:80:2c:73:
47:f8:6e:2d:3f:9c:1f:09:c6:d3:32:78:44:f0:2a:00:ee:a6:
4e:54:91:fc:04:8d:72:48:d6:b2:a3:88:29:44:f0:7d:6f:71:
3d:61:34:1c:b9:5b:3f:24:3c:1b:2e:f1:2e:52:bc:3d:28:c8:
51:39:ee:1f:10:bd:37:dd:10:cb:6d:65:bc:a8:c6:13:83:0d:
e2:c2:59:20:95:64:73:8e:c7:f9:6a:f9:ef:89:af:ad:01:11:
de:76:a0:78:c9:d7:0e:dd:ed:15:51:4c:06:c0:7c:45:63:35:
1e:29:db:ee:e1:c1:4c:a5:1b:ea:64:df:74:bd:e3:53:eb:56:
76:f1:05:51:13:27:92:fa:e2:f9:4a:ad:b3:66:85:38:2f:76:
d4:8c:bf:c3:0c:92:3d:1a:2e:0c:bc:95:81:c1:18:49:9d:53:
5c:ef:5e:51:d1:a3:2e:7c:75:75:09:5e:bb:96:c4:8e:1c:a9:
71:69:fd:83:37:56:2a:81:5b:18:87:e9:fc:6b:e2:6f:1e:e7:
e0:32:01:f0:21:17:85:e1:42:8e:4a:a9:d4:37:13:1a:c4:a0:
5b:06:e4:a7:ce:80:ab:89:81:92:c7:c8:29:75:a2:e9:dd:0a:
1b:71:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:35 2025 by rpki-client