Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: s/rrR6LibPMd/Fj1TL4s7bTKNvUCJz1Gbm0qVJLF5hw=
Subject key identifier: 5E:E4:FE:9D:EB:06:40:B8:CF:16:CB:87:48:A5:B9:23:8B:CF:8D:F5
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019658DDABE9D6A4BD6078DC6DEB5773D044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 15:00:44 +0000
Manifest this update: Mon 21 Apr 2025 15:00:44 +0000
Manifest next update: Tue 22 Apr 2025 15:00:44 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: 4/fY6DWEa8zn6Lw27cSCt1lmV7Dp9merwPMBgmS7yEs=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:ab:e9:d6:a4:bd:60:78:dc:6d:eb:57:73:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Apr 21 15:00:44 2025 GMT
Not After : Apr 22 15:00:44 2025 GMT
Subject: CN=5ee4fe9deb0640b8cf16cb8748a5b9238bcf8df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6b:80:ff:67:fb:c4:45:7c:e8:1c:8e:ff:64:
61:c1:30:ea:2f:eb:08:21:b6:30:e1:ab:d1:6a:f2:
6e:9d:79:87:b1:d8:3b:93:78:7b:1c:1b:c7:e4:75:
bc:b4:2d:44:34:14:b8:50:f2:88:32:8a:c1:8f:57:
7a:fb:37:ff:24:8f:b9:fe:59:a2:08:ba:cf:57:e3:
b4:c0:88:35:1e:ac:f0:44:60:57:ca:fb:f4:57:af:
c8:a6:a4:9a:fd:e9:1b:f2:82:cb:33:6e:3f:5c:fc:
32:0a:e8:12:e1:9c:1a:b0:47:55:95:82:e4:36:59:
c0:9c:71:62:f7:3b:f2:68:49:f4:dc:05:8d:5c:3e:
59:0b:27:b6:31:75:46:3e:87:01:82:69:a6:fa:2a:
45:be:44:a6:99:aa:ea:25:f2:c3:f9:29:e6:91:6b:
90:fa:40:84:0e:bd:a9:51:5e:69:19:79:9b:26:12:
bb:e8:ff:3b:b7:16:0b:d4:de:68:25:12:2b:03:fd:
da:91:17:2d:41:ba:d6:ae:0f:9d:b0:8c:03:9c:bf:
f7:23:56:26:8f:56:e1:29:dd:a3:31:40:d0:cf:3f:
7c:99:97:db:e4:48:be:07:d5:21:66:bb:14:9f:4c:
f6:f7:23:6c:38:d6:f5:4f:96:17:3f:86:a0:88:c2:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:FE:9D:EB:06:40:B8:CF:16:CB:87:48:A5:B9:23:8B:CF:8D:F5
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ca:ac:87:d8:f0:2f:26:db:5b:62:b7:de:b4:08:72:df:4b:
fe:7c:29:04:58:e6:22:15:de:a2:b8:c4:d3:84:97:ee:84:0d:
fe:9f:42:da:15:49:c9:59:96:01:c2:d2:3d:c9:d2:6f:c3:e3:
1c:e8:4c:9f:d6:d9:47:fc:6b:6e:23:4a:fb:f8:8f:5c:25:89:
4e:8b:76:c8:f2:6a:a4:f9:d2:b9:a1:c7:6c:4e:b9:89:92:53:
7c:b8:f4:bd:d2:d5:f3:3f:f8:91:40:3c:75:e4:2b:65:22:a8:
1c:c7:3c:0b:07:1b:59:f1:c6:a2:69:af:e6:e2:44:64:c5:d7:
19:19:a3:a4:d8:e3:67:6f:95:30:fc:e5:b6:09:e5:45:7c:e3:
2f:75:37:0e:16:89:b4:e3:2d:1c:2a:7a:f3:c5:43:13:11:9d:
1c:4e:fd:14:d6:5c:41:57:ff:b1:c0:66:2a:b8:8b:01:52:21:
01:fd:8d:33:3d:fa:8f:d9:3a:11:ab:a1:2f:29:23:1d:23:1a:
aa:96:07:e5:8d:77:46:b5:26:65:64:62:11:28:0a:0e:89:f0:
c9:af:e7:79:45:4d:97:c3:6d:46:ce:69:5b:54:6e:1c:16:32:
c6:ab:6d:c3:8b:93:26:f8:8f:70:77:b6:96:6c:59:06:8e:ae:
2a:73:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:00:22 2025 by rpki-client