Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: Z/mwAfwCDx5hYoKeMb5wFLCuN8UKCryxuZdUdO6EPjw=
Subject key identifier: F6:BF:60:EB:0B:4E:3D:F4:2B:6C:93:F3:28:B8:F6:F5:40:97:ED:38
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 0196293C0DFD7BE83BDE33A26B2FC85F2C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 09:02:03 +0000
Manifest this update: Sat 12 Apr 2025 09:02:03 +0000
Manifest next update: Sun 13 Apr 2025 09:02:03 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: eJARH/Wg+qjegh2+jXkM5cY7rMN2JKCYl3yrzg6kB2c=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3c:0d:fd:7b:e8:3b:de:33:a2:6b:2f:c8:5f:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Apr 12 09:02:03 2025 GMT
Not After : Apr 13 09:02:03 2025 GMT
Subject: CN=f6bf60eb0b4e3df42b6c93f328b8f6f54097ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:40:e2:db:0f:2e:5d:60:e2:f0:78:16:93:
67:41:80:ca:e5:03:d2:28:99:1d:5d:f6:61:9e:bd:
da:66:99:7d:a3:04:8f:57:1f:11:64:9b:85:a4:f9:
a5:78:8a:dc:81:de:ce:d6:a7:ca:24:d7:fe:3b:19:
61:fe:ac:43:ba:0e:5d:43:7d:d1:49:a6:e0:eb:33:
fc:e8:53:ae:c9:3c:b2:13:08:5a:45:3a:8f:a3:13:
a1:37:91:8f:ba:8d:97:d4:84:d6:55:04:da:6b:e4:
15:86:5c:aa:9c:5e:3d:f5:62:09:3b:5f:c9:dc:7b:
a2:cf:8c:b0:dd:54:ab:79:0d:45:ff:aa:ed:93:c1:
8e:37:52:f5:1d:23:14:d8:b0:fe:e9:40:a6:8a:57:
b4:3d:23:34:d3:c9:3a:f3:b6:c7:db:15:30:d8:9e:
0e:73:da:48:90:60:44:56:2f:75:d1:24:c4:2f:3d:
0a:65:33:5e:ea:15:19:26:27:89:4c:80:81:83:47:
0e:4f:1b:ce:c6:d9:c6:6b:cd:cf:7c:ea:08:b2:b9:
af:48:70:77:0d:42:20:fe:1e:80:ce:a7:be:9c:5c:
93:48:14:53:c5:7a:b2:5c:d8:5b:cd:23:8e:48:80:
33:35:e5:09:e4:bf:2e:7e:ff:e7:22:6f:49:e9:66:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:60:EB:0B:4E:3D:F4:2B:6C:93:F3:28:B8:F6:F5:40:97:ED:38
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:07:bd:07:6d:cc:cf:6b:42:5a:4c:77:b0:2c:d1:62:32:2b:
ce:79:76:d2:4c:bc:41:80:48:97:d7:e4:be:9d:e6:17:eb:02:
d4:7e:98:e8:0f:e3:75:c3:6b:c3:b8:f4:80:7c:de:de:06:d9:
11:03:63:15:15:22:db:93:93:98:68:95:12:3e:38:e8:36:dd:
37:1e:90:3f:59:ca:fb:58:d8:8d:df:c8:06:1c:25:3f:f6:7a:
0f:ec:ae:3c:1d:f5:12:85:f0:4d:f2:49:cb:18:d6:e4:c4:00:
1f:6f:f5:17:de:1a:e0:70:c6:72:1a:1f:7a:59:6c:fc:44:ca:
88:55:8d:c9:ae:85:4d:01:ba:82:fd:28:a0:9e:01:2a:5b:bb:
a9:05:c1:cb:94:02:56:e8:27:dd:d7:84:16:82:30:a1:db:41:
d6:20:1e:63:83:60:8a:d7:ad:4e:ce:33:b7:e9:83:cc:69:28:
af:44:87:2f:97:33:d4:fa:4b:1d:89:c6:67:ce:df:64:d1:c4:
54:a9:b3:b4:02:e3:a5:29:e8:33:5c:44:a1:42:e7:28:c0:5c:
cf:40:f6:c9:de:fc:a2:23:67:e1:f7:56:25:c1:e1:fd:5b:39:
2f:9f:65:40:6a:8c:11:15:47:8c:e8:89:73:73:ea:2a:04:09:
0f:d5:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:53 2025 by rpki-client