Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: irkgIfKDvFY2XORj6YPBg2QX92CS0Gfk2L5FIV62iOk=
Subject key identifier: 44:D1:0C:ED:7F:0A:2C:63:41:A5:EB:8F:A5:75:2A:1E:5E:40:B9:9E
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0196553773D21C5F7F54025E26D4C1DFC69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 0F9C
Signing time: Sun 20 Apr 2025 22:00:19 +0000
Manifest this update: Sun 20 Apr 2025 22:00:19 +0000
Manifest next update: Mon 21 Apr 2025 22:00:19 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: LZXTVQdfUtBbASza5rxgQKt7fL6s8PfeWXlYVukRwyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:73:d2:1c:5f:7f:54:02:5e:26:d4:c1:df:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Apr 20 22:00:19 2025 GMT
Not After : Apr 21 22:00:19 2025 GMT
Subject: CN=44d10ced7f0a2c6341a5eb8fa5752a1e5e40b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:a8:67:d8:fb:74:67:7e:1d:2f:c8:86:dd:
8a:ea:43:b5:c7:e7:7a:0d:92:f2:34:19:88:1e:7c:
95:a4:0a:84:57:53:b3:f3:67:ae:bd:8d:a1:af:ee:
e1:4c:7c:14:a7:48:f9:e0:b4:15:37:0a:12:17:51:
96:a0:2b:26:8d:b3:57:42:02:31:0c:4e:25:5f:c7:
82:2c:35:3c:28:5a:c6:cc:91:9f:fb:19:7b:65:82:
59:82:42:50:4a:e7:5e:ab:ee:a3:00:fb:0a:c7:cb:
00:c5:52:9c:75:99:b6:65:b9:1b:36:37:40:eb:8f:
f0:d9:9d:b8:87:43:35:a5:3a:8c:7c:ef:df:e5:8d:
88:43:eb:e6:c2:15:6f:84:de:66:ff:d0:e5:d9:8f:
63:e2:4f:22:cc:9c:5b:b5:28:a0:4c:91:a5:42:f4:
0c:07:82:cb:75:d6:23:55:32:ee:70:80:d0:c4:b3:
bf:3e:d0:44:d0:74:33:73:b7:5d:c2:67:6f:58:71:
40:c3:db:65:b7:a8:1d:2f:e2:18:4f:7f:2d:25:77:
a3:77:4a:8e:d8:e7:0c:8c:3b:7f:ce:b3:4d:3d:93:
90:40:43:d5:d8:3e:3e:81:e2:82:18:4a:d7:24:87:
2a:f3:ed:d7:e8:c4:6d:ec:bb:83:29:80:62:60:22:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:0C:ED:7F:0A:2C:63:41:A5:EB:8F:A5:75:2A:1E:5E:40:B9:9E
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:42:cf:ab:c9:a1:a5:46:73:cf:49:89:63:3f:c6:9a:e0:
73:f6:4e:2b:ae:dc:2e:d1:d1:b9:93:19:46:91:c8:3e:7b:82:
ed:73:68:4a:32:a4:06:d5:f6:dd:cf:ba:23:27:2e:22:d9:75:
50:e8:25:42:c4:62:a2:bc:e3:53:00:ad:f7:a4:0e:a5:4f:d5:
da:fb:85:14:76:c7:01:53:2d:e2:9b:35:6e:03:a2:bc:7c:a8:
d1:d0:e3:b7:ec:95:a0:2e:f3:9d:59:a7:9d:b0:6b:b3:f0:79:
f4:e8:09:9a:e2:66:83:52:e6:df:8c:59:fd:86:0a:05:d6:b1:
db:d3:cb:ba:bd:1e:c6:45:fc:e1:98:eb:0d:6f:4b:d8:69:af:
dd:f3:e5:d9:96:29:98:8e:23:92:5b:a4:7c:6a:f3:62:a5:03:
45:32:4a:9f:40:72:f8:b9:5c:79:34:ee:39:18:ea:22:ce:49:
74:2d:0d:75:64:12:0a:12:c1:a8:a8:d8:e1:22:90:16:3b:2f:
27:7e:87:fd:1f:4b:7a:9d:cb:33:e0:d4:fd:e8:4c:b7:08:3d:
bc:de:62:17:45:02:74:14:14:b5:3b:21:b5:9f:ac:11:6a:61:
93:1b:7e:01:b7:7e:87:8b:25:48:b2:41:9b:a9:5d:44:cd:ab:
50:dd:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:38:45 2025 by rpki-client