Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: HrJjh3+xxCN2hQdUE55T9iycnWDT/8g5cG45uOHTKd4=
Subject key identifier: 8A:E0:A8:11:66:06:C8:E1:5E:A3:10:84:15:C8:46:A3:49:24:85:0D
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 01958BF247BA4369AEFB207245FD187AD5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 20:01:05 +0000
Manifest this update: Wed 12 Mar 2025 20:01:05 +0000
Manifest next update: Thu 13 Mar 2025 20:01:05 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: E/ekupZ1hp39qBr37FQ1DCHaWSsKYahgQEypKrzyiig=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:47:ba:43:69:ae:fb:20:72:45:fd:18:7a:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Mar 12 20:01:05 2025 GMT
Not After : Mar 13 20:01:05 2025 GMT
Subject: CN=8ae0a8116606c8e15ea3108415c846a34924850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:93:2d:4d:78:81:30:cf:7c:1a:f4:e1:57:
a5:d8:ce:f1:c7:ea:bd:40:11:78:22:12:1a:71:31:
7f:a1:1f:ee:f7:64:6d:3d:5b:25:41:a5:78:b4:a4:
32:a1:49:f0:93:2e:1d:ba:3c:d2:34:65:dc:da:63:
1c:c6:cd:42:4d:79:c1:03:43:9f:81:fc:4e:f2:71:
d9:c3:34:17:fc:52:ad:d4:40:e1:7b:72:9c:f6:a1:
f8:fc:a8:f7:ff:49:f6:14:cb:b3:f6:3f:89:bf:ea:
bc:ac:fb:39:0e:2e:18:05:1b:99:7a:b9:ef:2a:6b:
d7:93:be:68:37:a1:5d:e8:18:2d:3b:d9:28:31:32:
2f:6f:4d:8f:74:7c:6a:17:da:12:59:6f:30:11:2b:
76:4e:ee:ed:34:6c:5a:05:a5:d2:15:d3:6f:d3:82:
60:e0:06:67:55:1f:b1:33:ae:51:bd:54:17:c2:4a:
62:61:f6:04:24:8e:1b:b6:ff:ee:cf:9b:b8:c0:46:
8a:bc:c1:e3:5c:16:d1:56:8e:d4:66:d0:99:ed:9f:
91:b8:26:e2:b6:9b:d9:9b:f1:34:e9:23:01:4f:b9:
81:38:2b:b2:fd:4e:87:e9:d1:c2:7b:a3:72:d9:14:
d1:cb:e7:d0:ea:9b:96:44:5c:2e:4b:01:0b:d9:30:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:A8:11:66:06:C8:E1:5E:A3:10:84:15:C8:46:A3:49:24:85:0D
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:55:8d:87:2a:01:8b:7d:5f:fd:10:61:d4:dc:41:c1:23:e7:
72:c2:4c:6c:8f:84:03:1f:ed:52:4d:19:fd:29:35:3e:a6:6f:
7c:2a:4c:67:ba:05:7a:50:43:9d:2e:25:71:59:b0:cb:be:80:
09:b8:65:2a:28:d3:0b:4f:e1:b9:99:21:03:7d:7d:a5:43:02:
f1:9f:e3:9e:e4:f4:a4:16:2c:8e:86:46:08:e1:46:77:6f:bf:
cb:b2:73:a8:f7:00:c4:94:04:f3:26:f7:20:2d:06:4f:47:0f:
a3:8d:83:ab:64:58:34:7f:f3:af:20:c7:86:83:7f:e1:34:0a:
2f:76:ca:f1:e0:39:20:8f:a0:57:46:27:e9:d6:d8:ac:10:27:
f9:2e:12:59:47:96:41:32:85:f8:5f:9e:4b:88:31:4b:ed:64:
9a:fe:07:ae:17:e5:47:c4:ab:11:00:a5:f7:02:12:3b:7f:ec:
8e:f8:4d:fa:c3:d2:3b:34:a2:e2:8e:14:52:29:64:0d:36:d2:
f2:6b:06:87:ed:4d:e3:fa:ff:53:49:df:af:12:d3:f7:b2:5e:
9a:fc:90:fe:1c:78:1f:a6:e1:a8:e8:09:3d:c6:06:a8:06:87:
aa:a7:d1:7d:8f:37:82:b4:8c:c6:34:11:e5:99:60:25:a3:cc:
15:7f:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:52 2025 by rpki-client