Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: WUqVdnb0UKG4JV+/4LwDZKg/qnK/ij0GhhEyQ3Y43Z0=
Subject key identifier: 38:85:55:92:64:91:CA:25:7D:E9:1B:9D:4A:03:DE:09:BB:CD:AF:5F
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019626716654FBA730E0EBD42C4285F1419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 14EB
Signing time: Fri 11 Apr 2025 20:01:28 +0000
Manifest this update: Fri 11 Apr 2025 20:01:28 +0000
Manifest next update: Sat 12 Apr 2025 20:01:28 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: 9iosXPIN+cvor8aGTf/MQMXogAKATHWPvJbZI4piE34=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:71:66:54:fb:a7:30:e0:eb:d4:2c:42:85:f1:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Apr 11 20:01:28 2025 GMT
Not After : Apr 12 20:01:28 2025 GMT
Subject: CN=388555926491ca257de91b9d4a03de09bbcdaf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:f1:b5:7c:a0:26:35:6c:c2:27:cc:d1:49:
eb:e6:49:93:58:8f:0a:24:24:64:b9:fb:db:63:51:
c6:61:6e:a3:7c:a9:82:11:67:22:00:d5:0c:e1:dd:
1d:3f:50:40:e2:72:a7:16:7f:f2:32:2b:c7:24:2d:
23:85:2d:ab:14:1f:bc:99:b7:6c:04:41:83:5a:3c:
de:cc:90:c1:3c:95:7a:a3:85:21:22:c8:15:6b:f5:
6a:b8:2b:59:1e:c6:57:7e:1b:ae:d8:74:b4:50:78:
ed:d1:4e:9a:36:46:f8:56:6d:97:08:e7:3b:b1:2c:
be:b9:e1:22:a8:a2:48:65:a3:83:97:aa:51:c4:d5:
ba:38:87:8a:73:0a:59:0c:7f:de:ed:e6:55:ab:c3:
cf:f1:68:55:6e:ee:2f:c5:27:3b:43:1f:1f:46:0f:
a0:4f:43:87:54:2e:30:bf:18:1f:16:d9:58:ef:05:
fb:7e:bf:29:ce:81:d0:74:cb:1f:84:03:a6:de:a5:
00:2c:eb:a0:1a:82:61:7d:c5:d6:4b:02:47:93:a3:
35:87:34:45:35:7c:30:64:ed:58:8d:f6:93:ae:7a:
88:19:74:8f:86:65:35:35:c8:ab:14:a4:85:e1:12:
10:25:87:d6:95:df:eb:4e:2f:a1:3f:0c:4e:f8:e3:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:55:92:64:91:CA:25:7D:E9:1B:9D:4A:03:DE:09:BB:CD:AF:5F
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:8d:ea:48:75:d1:66:49:5b:eb:c1:36:b2:16:14:5b:48:
80:c7:8a:12:ef:85:ae:2e:f1:41:85:0a:6e:ab:51:c4:24:de:
43:3e:f6:cc:90:11:f9:db:21:25:83:9c:1e:30:30:47:d6:50:
16:98:93:3f:cd:82:79:a9:42:fa:68:7f:91:99:c5:56:e6:85:
07:fb:04:c0:fc:7c:32:61:c7:f3:91:1a:b1:3d:b1:9c:62:22:
d3:41:bd:3e:59:1f:5f:c6:88:e1:ab:e3:6e:d0:c6:57:a1:31:
41:9b:b3:34:99:b2:21:5f:7a:7c:1b:e3:4a:07:a4:ff:56:bc:
1c:f3:d4:f9:b2:fe:bb:6a:28:92:a9:5b:c6:c4:1a:36:17:0f:
9d:14:a9:c6:18:30:41:89:64:06:d3:7d:45:49:c8:7e:a1:e1:
af:96:a3:1c:f6:f6:7c:58:a2:2e:ac:cb:5e:32:37:dd:60:78:
b0:a7:eb:f4:96:90:5d:5f:89:4c:7a:55:75:cd:b4:3c:68:bc:
5f:00:19:52:8e:f3:a7:ac:6d:d2:98:cd:b7:6f:a6:62:d0:cb:
cd:29:41:0a:e1:a0:e4:73:da:81:12:5f:5f:d8:4d:1e:e0:fb:
10:28:89:71:0a:c7:71:45:4a:a1:fd:01:ba:d9:39:5b:c2:71:
99:64:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:51:48 2025 by rpki-client