Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: meykeN0OR1WVaZ089ZksLJxKzwANqMOGbGHGQK1tYPo=
Subject key identifier: 12:D7:B4:1C:8E:F5:75:7B:01:42:AD:A1:2A:A6:F1:4C:E5:09:F8:28
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 0196575CB1FD1E9ED11F0AE65132136EC5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 0F21
Signing time: Mon 21 Apr 2025 08:00:14 +0000
Manifest this update: Mon 21 Apr 2025 08:00:14 +0000
Manifest next update: Tue 22 Apr 2025 08:00:14 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 62zb4UTlZ20DRxukQIP6YDJmSYLES4ybWR3SnnSy/ZY=)
2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:b1:fd:1e:9e:d1:1f:0a:e6:51:32:13:6e:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Apr 21 08:00:14 2025 GMT
Not After : Apr 22 08:00:14 2025 GMT
Subject: CN=12d7b41c8ef5757b0142ada12aa6f14ce509f828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:96:5a:4b:f5:d6:ce:d9:92:ad:8d:53:a0:
20:af:c3:73:9e:77:a9:e4:be:99:11:45:bd:24:e0:
b1:3e:b6:7a:08:f4:da:e6:20:f7:4a:43:23:c1:fa:
0c:91:20:d1:bc:29:0c:b9:66:46:f9:f2:08:e1:c9:
12:95:2d:79:62:9d:00:3f:1e:4b:9e:4b:6f:1d:6d:
1f:0c:af:cd:cc:79:a8:e7:eb:df:5c:82:53:08:ce:
cd:a1:1b:e5:4b:29:d9:e6:fe:62:2d:04:24:16:dd:
fe:3c:e9:90:24:f7:5a:39:90:b6:1e:e4:b5:b0:c1:
84:6a:20:7c:48:7f:b7:5d:a9:6f:61:41:d2:9c:0e:
f8:1d:48:9d:eb:23:bc:2a:31:53:5c:4c:b5:4a:d7:
cf:7a:4d:bc:ed:cc:83:78:b3:a8:36:a2:01:d9:a0:
9d:26:01:f5:46:cc:aa:8f:0c:21:fd:1b:e1:ac:fc:
5b:b4:81:97:c4:a8:c9:6e:d3:35:0e:df:27:95:17:
df:1d:43:ce:f8:63:ab:b6:ee:5c:88:15:2f:c7:8f:
bd:a5:11:0c:1e:29:f9:1e:04:40:83:98:e8:dd:ac:
bd:8f:63:60:06:28:a3:2d:11:e4:19:19:88:72:0d:
b3:58:85:07:ce:c8:aa:e6:9b:36:2e:ca:92:91:89:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:B4:1C:8E:F5:75:7B:01:42:AD:A1:2A:A6:F1:4C:E5:09:F8:28
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:90:a1:72:c6:d4:0b:ea:30:bd:de:a3:35:4b:4d:5a:d1:fc:
d6:aa:dc:c0:b9:16:ef:23:b2:be:f1:ec:8b:16:6c:9a:76:42:
24:17:bd:4b:9b:24:8e:5a:21:bb:13:28:2e:e2:cf:6d:43:0f:
b3:e4:ab:64:44:fb:e5:75:80:2f:00:bc:5e:56:fb:70:bd:d7:
20:03:2f:07:f7:dc:99:6b:51:83:1e:fe:15:96:c6:e6:8a:1f:
f1:56:75:59:ae:32:5e:91:fb:0a:46:a9:cb:c4:f4:88:5f:7e:
2a:e7:8e:c4:67:e9:d7:5d:01:6a:ac:ce:36:f2:7e:16:50:39:
0d:6e:02:88:43:e0:7d:9c:c2:b2:28:d7:c8:eb:a3:d1:75:14:
28:4e:32:70:12:c1:c2:e2:a1:2b:68:4c:75:5a:ce:92:51:ae:
10:67:c7:1b:60:d8:bd:02:6b:31:f6:3b:35:ea:d0:e1:7d:99:
26:b9:19:01:41:fc:bd:83:dd:20:89:b5:ad:b6:7b:35:ff:a7:
be:10:67:eb:28:c1:95:e7:bf:8f:61:ae:f8:8f:51:6d:c9:71:
8e:20:92:b7:6a:65:4c:96:b3:c0:a9:5a:72:37:bb:9d:d2:2b:
21:4f:34:a2:91:3b:ec:2c:b5:3f:ac:c4:4b:7c:7a:a8:32:09:
83:ae:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:09 2025 by rpki-client