Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: ponEerw8qEeoJKbfVZ1051RZtXg6v106gHAa1jPAXQM=
Subject key identifier: 44:21:46:F9:C8:40:61:2D:46:1B:E9:04:C2:BB:AC:95:71:DA:1D:ED
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019648C5772023D8202D4FF5BAC2061C17F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 14DE
Signing time: Fri 18 Apr 2025 12:00:22 +0000
Manifest this update: Fri 18 Apr 2025 12:00:22 +0000
Manifest next update: Sat 19 Apr 2025 12:00:22 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: McQPs4udio/tUvtRgdLh9BGA1p51halbO0Nmh6xo1GU=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:77:20:23:d8:20:2d:4f:f5:ba:c2:06:1c:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Apr 18 12:00:22 2025 GMT
Not After : Apr 19 12:00:22 2025 GMT
Subject: CN=442146f9c840612d461be904c2bbac9571da1ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:34:65:b9:f0:3e:f2:79:b4:b1:88:dc:2a:
4e:c0:b6:52:0c:58:a1:a6:ba:73:99:7e:36:f5:49:
21:f7:84:ea:93:ed:89:fa:bb:57:85:a5:97:97:77:
69:34:fb:bd:d2:a3:b3:f1:b3:27:74:47:4d:1a:ae:
a5:89:c3:6e:c3:d9:4d:9f:64:94:ee:37:90:ad:78:
7b:4a:63:eb:e3:a2:27:1d:d6:47:65:da:5f:58:7d:
27:93:95:43:18:0b:29:c1:98:5f:78:03:06:91:b6:
97:a5:df:03:b8:f5:97:5c:2b:8d:8b:7b:a7:41:08:
1f:a9:bd:8f:42:aa:0e:44:44:4c:f6:3d:9e:07:32:
ae:ed:19:86:b8:b3:73:30:03:19:3d:14:d0:88:5d:
27:48:c7:13:f2:81:d1:82:91:93:ba:d9:10:50:8a:
7a:33:39:b5:e8:80:8e:d8:b9:6c:95:33:a3:fc:4e:
c8:75:04:55:e3:02:39:87:4b:05:21:6f:31:65:99:
d0:c4:a3:92:17:0d:8e:89:e1:7e:36:4d:12:5f:53:
4e:77:88:74:bb:ff:d4:57:90:0d:90:76:c9:69:4b:
51:16:97:a9:6f:cc:e0:7a:3b:5a:5d:44:9a:35:49:
74:0a:c6:10:f0:14:b9:b0:8f:62:85:08:f0:82:bf:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:21:46:F9:C8:40:61:2D:46:1B:E9:04:C2:BB:AC:95:71:DA:1D:ED
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:7f:ee:72:a7:cd:97:cd:28:18:34:4d:8f:ea:60:f8:88:
9a:dd:d8:95:30:54:53:40:0e:c5:6d:b2:2d:5c:7b:89:40:14:
60:e9:e6:73:25:66:90:6d:54:c6:ad:c0:96:b4:2a:c3:5c:b1:
ec:0f:b3:21:f3:7a:3b:87:d5:26:c6:47:9b:68:70:ad:c7:a5:
97:5f:f5:00:34:20:b2:6c:e5:10:39:2a:4e:0c:cc:eb:8c:13:
f4:15:62:c7:e0:82:da:77:6b:b3:14:05:9c:92:f3:bd:22:8a:
64:17:19:b9:54:0a:de:12:3a:09:20:90:a7:1e:42:d9:02:f0:
fb:57:0f:12:f5:76:af:39:54:39:a8:f8:65:9c:23:47:9f:c5:
06:08:73:89:e1:2a:4b:71:c5:91:88:ad:ef:d9:18:27:dc:6c:
39:0e:f6:ab:2f:19:36:d5:4f:e4:aa:97:d9:c7:99:43:24:8d:
f0:ab:0d:d9:f8:16:e9:d3:c4:8c:1d:52:96:3c:17:0c:71:5c:
a0:57:71:82:c8:82:35:0f:4f:42:85:67:41:95:76:cd:ec:fb:
a6:d7:ae:bb:50:63:f1:e7:b0:69:fe:6c:d5:77:5e:52:a8:81:
29:3e:2a:56:c1:c8:58:57:08:e0:94:50:88:7d:53:f5:a4:3f:
57:d3:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:06:43 2025 by rpki-client