Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: IrKT2CkGqcV32L7E27q1upldWGiTTIa6kU1k+HazE7s=
Subject key identifier: 0D:2B:5F:A1:A3:94:6B:64:46:0D:F5:2E:AF:79:0C:90:16:D1:15:F4
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 01965CBA3366217AE86B0EEC3AEF29BCE397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 09:00:28 +0000
Manifest this update: Tue 22 Apr 2025 09:00:28 +0000
Manifest next update: Wed 23 Apr 2025 09:00:28 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: s1OPn5fAyKeCpWojebPo1ZjslQCgn1utTBVLMzOgKxo=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:33:66:21:7a:e8:6b:0e:ec:3a:ef:29:bc:e3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Apr 22 09:00:28 2025 GMT
Not After : Apr 23 09:00:28 2025 GMT
Subject: CN=0d2b5fa1a3946b64460df52eaf790c9016d115f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:f0:cb:6e:38:53:d8:af:a5:c3:24:d8:36:
b5:5b:7a:df:fa:dc:2c:93:56:b7:a6:8b:0e:8a:5d:
b8:d6:f5:33:42:0e:67:d8:3e:05:d2:bb:6d:84:54:
43:c1:01:27:16:58:df:26:ea:f5:19:cf:32:71:ca:
53:19:57:c2:e6:91:99:1c:cb:a2:70:27:0b:68:94:
76:70:a8:b0:f4:10:7e:0d:5a:97:e0:b1:22:2c:4b:
93:39:22:a2:26:98:2a:d1:c9:fa:42:3a:d6:af:f2:
73:9f:39:dc:ee:c2:42:cf:97:7c:a4:e7:a2:d2:c4:
48:0c:64:fe:2b:fc:ec:10:eb:69:25:c5:78:fc:54:
7a:cd:87:4e:4f:3e:87:52:40:4f:17:7c:89:40:d1:
66:c8:9e:6b:71:d1:38:d5:e2:44:a6:15:61:48:11:
0e:99:00:e8:51:e5:45:0c:27:a5:a9:21:38:b1:17:
21:df:9e:a9:55:3e:ed:1e:fc:af:2f:39:c0:16:03:
86:ef:2e:94:b8:47:8c:67:e3:cf:5e:00:6f:23:da:
d5:38:19:7a:bd:c1:7c:24:7e:d1:ee:66:a6:b0:a1:
30:99:21:f0:76:15:9d:84:77:66:79:50:c0:50:56:
2a:cc:f0:81:65:aa:f7:55:9d:0f:1f:48:6e:7e:db:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:5F:A1:A3:94:6B:64:46:0D:F5:2E:AF:79:0C:90:16:D1:15:F4
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:b1:00:9e:d9:6c:84:ec:db:04:24:e8:a3:16:51:cb:e9:
ab:b7:02:5a:0b:94:53:6f:6c:ce:02:5c:0d:10:3e:20:3a:1b:
38:f8:f3:14:f0:54:7a:24:55:1e:da:e7:a4:9b:35:60:0d:28:
d4:ba:ff:ce:fa:e8:67:e6:2e:4b:68:ed:12:4c:fb:2a:22:48:
a3:dd:77:bd:7e:48:7c:52:45:70:6f:e1:a2:b8:71:a7:d6:08:
a3:0a:0b:54:d4:41:ea:d0:25:77:2a:4b:94:14:06:31:65:4b:
ce:b8:65:26:1c:e5:90:db:46:8c:b9:f4:22:dc:5e:5f:49:bc:
cb:db:e1:a0:80:3d:f5:e0:52:c8:54:b3:a4:01:89:2d:03:12:
f3:2e:cb:f4:30:4b:ca:24:28:0a:0f:4b:2d:e4:8b:c7:af:b1:
f6:66:32:62:31:85:8b:68:8c:9e:83:26:3c:c8:26:1b:be:36:
f9:6f:2f:02:e3:e2:3b:eb:e3:ae:ef:4d:3c:85:15:6f:27:57:
f3:9f:cd:01:4a:33:8a:b6:15:ea:b5:77:20:50:a9:7b:58:ce:
a7:5a:8d:36:7f:9c:e2:39:17:1d:fb:0a:0a:89:c1:71:b0:e6:
db:21:20:80:ee:dd:c6:b0:ab:dd:04:49:f2:f8:ee:e2:c5:0c:
e9:7e:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:59:31 2025 by rpki-client