Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: Mm+W+8vmoXumRpsY3cpGAkp2x+YvvVJ+QOpB8IeQadw=
Subject key identifier: FD:D9:0B:8A:49:0B:76:D0:A4:98:04:BA:93:8A:68:57:46:0B:76:0F
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 01964030602E87CC1B0D0BCB724C07B0D3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 20:00:34 +0000
Manifest this update: Wed 16 Apr 2025 20:00:34 +0000
Manifest next update: Thu 17 Apr 2025 20:00:34 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: iAHhZQi6awItevjmEgjaba+RF6CyomSv7Pp8h9sPcH8=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:60:2e:87:cc:1b:0d:0b:cb:72:4c:07:b0:d3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Apr 16 20:00:34 2025 GMT
Not After : Apr 17 20:00:34 2025 GMT
Subject: CN=fdd90b8a490b76d0a49804ba938a6857460b760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:50:72:40:13:11:97:44:b8:b7:ce:72:a9:
d6:7c:f7:da:62:97:76:ab:80:1c:0b:b7:53:c8:c1:
26:52:65:36:ac:b4:1c:77:7b:21:d4:64:1e:e7:2b:
6c:fc:95:bf:a7:eb:54:0c:b9:57:f3:0f:bc:9e:f6:
08:ce:6b:39:3d:0b:fd:42:3e:42:3f:4e:5c:01:fa:
11:7b:07:66:f8:f9:b6:55:3d:dc:99:65:44:00:1f:
cf:aa:8c:a4:cb:46:ed:0c:fd:da:ef:ce:22:1c:fe:
5f:07:06:89:26:22:10:d7:67:2d:1e:77:98:4a:0b:
cc:80:9d:cf:11:50:e8:da:e1:6f:1f:2b:74:0f:e2:
93:b5:bd:f6:8c:5d:cf:5d:db:6d:3f:3f:8f:63:5d:
d8:98:53:04:70:6e:af:b0:e0:99:c5:cb:2a:d9:7a:
f4:47:0e:a5:07:bc:a2:5f:40:5e:55:89:3e:ab:b3:
92:db:ba:03:d4:b6:b0:a4:1c:b3:5e:49:25:ff:4e:
ca:e7:68:0b:46:27:04:80:6e:10:bc:9a:23:53:8e:
24:00:ca:4e:1b:bb:51:46:be:23:78:d3:e6:9a:70:
9b:5f:68:dc:d7:34:07:16:9f:db:bc:5e:29:24:13:
02:36:4f:8e:39:20:79:92:5a:79:35:51:e4:85:65:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:0B:8A:49:0B:76:D0:A4:98:04:BA:93:8A:68:57:46:0B:76:0F
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:d8:31:28:0c:f2:e4:45:3b:e5:53:2c:51:aa:0d:4c:5b:
37:cc:6b:63:6b:34:a2:df:57:d9:dc:fb:89:04:ce:6d:36:8a:
c0:6e:bc:d3:3b:ec:0c:51:9e:89:81:e9:20:e1:ed:09:b0:9d:
7f:79:19:50:e0:26:3b:46:8b:69:0d:fe:23:55:b3:76:6d:0e:
d6:9f:cb:35:bf:85:ba:9a:e2:34:53:89:c0:74:0d:d3:3b:32:
68:5d:ba:76:4b:8b:9b:65:49:63:57:32:ee:4f:82:21:80:1b:
84:0b:29:e1:c4:e2:41:f9:58:89:eb:b6:4b:ef:9b:0e:1b:94:
26:72:ca:20:79:ba:a8:5d:13:4a:d4:35:6f:69:ea:14:83:8a:
2e:ff:87:28:e8:39:ff:38:f2:2c:5c:57:b8:74:55:df:01:9e:
42:54:0a:7a:b1:15:d6:b6:e1:82:d0:6c:47:32:5f:7a:0c:19:
11:6a:fb:42:c6:20:22:b0:a1:a2:2e:46:6f:b4:e1:79:ca:73:
ce:e3:23:a2:80:68:d8:a3:9a:b7:af:cf:96:6b:f9:09:49:c8:
58:37:cd:72:f2:a6:0c:1e:f0:49:a0:cd:dd:50:b4:06:05:71:
0c:5b:5e:4d:08:6e:e1:b5:6c:aa:a0:21:36:84:18:41:f1:41:
3f:c1:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:11 2025 by rpki-client