Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: bzGSFyMLVwu51znl83/gkFgoCZg/doUDx5iiayB+gn8=
Subject key identifier: FB:E8:D4:53:B1:63:04:38:BA:3E:E9:8D:0E:91:4F:E0:13:34:F6:BF
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01965EA8B036B8ACE8C16CBBF61B4EBAE811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 1480
Signing time: Tue 22 Apr 2025 18:00:35 +0000
Manifest this update: Tue 22 Apr 2025 18:00:35 +0000
Manifest next update: Wed 23 Apr 2025 18:00:35 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 1Zoc2dxXzvSQrb+KyD9qI3+9xCncg6xkq0yxHc1H1GI=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:b0:36:b8:ac:e8:c1:6c:bb:f6:1b:4e:ba:e8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Apr 22 18:00:35 2025 GMT
Not After : Apr 23 18:00:35 2025 GMT
Subject: CN=fbe8d453b1630438ba3ee98d0e914fe01334f6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:76:21:fa:5a:01:1f:a4:a8:07:43:51:cf:
ad:ec:15:27:b7:a2:3f:c3:0f:21:4a:8d:e7:7f:74:
84:31:80:0e:c9:30:c9:c0:ae:08:3b:39:25:3d:78:
f7:7e:c6:10:b3:a5:34:fd:fe:ff:0a:73:a6:25:43:
9d:ff:fc:52:0c:5c:06:48:12:93:3b:00:12:b6:3a:
c1:09:c1:99:a8:ea:4b:4c:cd:8e:d4:bf:33:32:f7:
8b:1f:5a:09:21:b4:96:50:be:ea:6e:b0:0a:e8:97:
5f:af:70:1a:bc:d3:66:83:12:9c:06:2b:8d:c4:5b:
51:63:3b:80:20:58:7f:53:2c:80:96:ed:69:d0:01:
86:92:6d:10:ad:3d:ff:c0:01:a3:e1:6f:25:4b:cd:
9d:71:b8:83:b0:e0:39:13:2a:7e:53:e1:95:0d:38:
34:10:e1:de:35:c8:a3:83:1a:05:7b:6d:c7:c1:8a:
f8:9c:5a:61:ea:ab:e5:60:9e:4f:44:98:a7:32:cb:
a6:1e:26:23:9d:fc:04:1c:1b:57:bb:25:7f:f0:e1:
b1:13:77:e8:2c:ec:d6:ee:3e:e0:13:70:c9:f6:88:
14:09:5e:85:2c:eb:4c:21:40:45:45:45:4e:66:1c:
cd:2f:45:b4:c3:cc:52:16:b9:a3:51:61:61:e8:9d:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:D4:53:B1:63:04:38:BA:3E:E9:8D:0E:91:4F:E0:13:34:F6:BF
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:11:d3:8b:03:28:6e:60:00:a1:51:79:e6:2d:b2:22:31:0a:
10:3e:76:89:bb:91:59:6a:a8:31:b1:c6:78:1a:60:3c:77:73:
f8:e7:32:61:a5:3a:be:43:af:11:f3:99:1a:83:59:b3:74:9b:
9c:7c:30:01:67:63:ce:b3:73:46:5d:37:72:b8:80:c3:7e:eb:
2b:ba:e5:a3:d9:37:fa:89:3d:99:01:b1:ea:21:9c:0a:82:b7:
a4:d5:bb:96:c0:32:96:30:59:93:cd:1c:57:83:3b:31:e8:e9:
34:b5:b3:a9:f8:2f:ae:fa:92:78:6f:8c:e0:db:b1:52:67:2b:
24:05:ea:97:d4:85:17:3e:1c:bf:61:79:85:24:50:be:ab:53:
6c:c1:cc:f9:b2:31:d6:22:ec:48:88:fa:0b:6e:b9:30:8b:7e:
4a:44:e4:47:5e:5d:c6:d4:42:5d:8a:dc:64:2d:de:a6:2b:ad:
1b:e9:e8:f7:9c:84:a3:78:1e:fa:7f:1b:f8:85:f8:5a:e2:e7:
ef:95:5f:59:f4:4d:11:c2:85:ff:0b:37:75:68:e4:d3:2a:fe:
31:b6:82:37:3d:56:4e:72:8e:80:59:da:db:8b:27:c0:d3:0e:
7b:58:b1:3a:70:34:96:8a:5b:4f:41:d6:5b:7d:7d:8e:4a:f2:
f5:4f:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:08:28 2025 by rpki-client