Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: TEPY78pIYic//nXMBxK6PDH0Ew1sWwLU5BObRQyBnBA=
Subject key identifier: DE:FD:2C:C7:D9:05:AD:98:90:5D:1B:F6:F1:C3:08:76:F1:96:F4:2E
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019655DD4BD708931054C1032AAED06928C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 0FC9
Signing time: Mon 21 Apr 2025 01:01:28 +0000
Manifest this update: Mon 21 Apr 2025 01:01:28 +0000
Manifest next update: Tue 22 Apr 2025 01:01:28 +0000
Files and hashes: 1: WntehPztUAsCnfsYWJyPGRUsUHM.roa (hash: 5/L8DbJ4CG3bN8z8g844cMQvNk+i0ElV2AgHgE9q718=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: VdTHI6apChQyVkBgN5I2fWeLP9lRn9AU/pjIZdICbIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:4b:d7:08:93:10:54:c1:03:2a:ae:d0:69:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Apr 21 01:01:28 2025 GMT
Not After : Apr 22 01:01:28 2025 GMT
Subject: CN=defd2cc7d905ad98905d1bf6f1c30876f196f42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:c0:70:42:4c:5f:28:6b:4c:ac:29:1c:26:
79:90:63:59:0c:97:ee:ef:0f:13:f4:23:d2:43:ee:
ae:cb:0f:36:64:ff:61:89:de:ba:05:ca:38:7a:a5:
4a:46:24:ca:95:e5:aa:b6:81:0b:d5:5e:01:ce:8b:
e6:3f:89:d4:99:75:94:73:21:4f:00:48:49:37:1a:
1a:8a:23:0d:93:68:2b:05:b1:9f:98:f1:5b:a1:ad:
c7:9f:66:d7:c3:eb:64:e4:7c:3e:7f:a7:c2:68:ac:
74:12:d1:64:16:be:80:bd:b0:27:21:e2:0c:85:0a:
a2:3a:df:7b:8f:e7:c4:c8:46:67:2c:72:d7:6f:e3:
7c:e8:8a:02:e2:02:90:ea:a0:41:40:5b:a9:7d:e8:
88:f8:5f:4c:79:d7:13:0a:54:4e:b9:9b:43:e1:83:
b4:db:b2:9b:cb:01:8d:8b:eb:1d:c2:73:d5:a2:c4:
8c:ce:97:b2:5f:ed:0c:27:26:b5:42:22:13:cd:f2:
c4:49:e8:ab:c6:ad:23:af:b7:29:48:08:79:f6:26:
0c:1a:da:8e:e5:8f:da:71:cd:ad:cc:c1:29:9a:7f:
fb:d7:45:39:b4:99:f5:a2:28:8a:e1:f2:b7:93:61:
8c:1e:03:45:dc:73:fd:1a:36:04:cb:ad:dd:46:6b:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:2C:C7:D9:05:AD:98:90:5D:1B:F6:F1:C3:08:76:F1:96:F4:2E
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:aa:50:04:75:f1:7b:c1:05:30:43:23:30:26:ec:ae:ec:
fc:db:b3:3b:3a:66:29:90:57:e2:e2:43:2c:77:3d:90:5f:bd:
d5:e7:09:69:9b:cb:1f:30:11:72:69:4c:82:c2:1a:61:02:a0:
72:ef:26:76:24:5b:71:1c:d8:c5:7c:87:1a:d4:72:eb:30:17:
96:3d:56:64:b7:4b:2a:ef:39:ec:a0:f8:89:4f:8a:15:cf:ec:
3c:e4:5a:69:cf:1c:75:bb:d3:99:a7:63:04:b5:3d:09:2f:01:
2b:d1:7f:34:2b:35:3e:93:15:1f:5e:5d:43:84:35:de:26:30:
cf:b7:ca:11:5d:ae:18:ce:59:ee:52:10:0f:8c:3a:1d:f1:17:
7a:5f:06:7e:19:01:cc:07:4f:bd:38:8f:1c:0b:fb:96:fa:bf:
72:eb:1a:e6:39:02:aa:17:58:30:cb:32:27:21:9d:3e:66:3a:
ce:75:cd:cc:a8:36:41:1e:6e:38:24:71:e6:cd:c2:1c:a7:5f:
7c:7a:81:c9:46:c8:69:4d:08:89:76:5a:51:71:89:a2:14:f5:
bf:c3:b2:dd:1a:3b:d6:11:30:60:7f:6c:31:a9:1a:ed:ef:a4:
d5:af:a1:84:0c:84:26:1d:5b:23:0e:90:ff:bc:b3:2e:c3:4e:
62:e0:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:24 2025 by rpki-client