Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: 0UmjRGFufI3R9VhKkLPE8+mKiKcP88L9UxTKOd3gQfI=
Subject key identifier: BE:C7:6C:E8:B5:43:14:37:7A:39:7D:90:04:2D:D5:64:CB:96:92:F3
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 01965C83557EB9C6EAD005F6BD8107E684D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 08:00:32 +0000
Manifest this update: Tue 22 Apr 2025 08:00:32 +0000
Manifest next update: Wed 23 Apr 2025 08:00:32 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: A3wZr6RJQKOS3Td9CAT1uf34aEWe4K0fXTtlxksxqtI=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:55:7e:b9:c6:ea:d0:05:f6:bd:81:07:e6:84:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Apr 22 08:00:32 2025 GMT
Not After : Apr 23 08:00:32 2025 GMT
Subject: CN=bec76ce8b54314377a397d90042dd564cb9692f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:b5:96:2b:f3:04:91:4e:72:f5:f4:66:f2:
6c:43:8d:a7:d7:24:c3:7d:e0:42:04:cf:bb:96:2f:
21:a7:ed:c7:fa:85:d2:46:dc:c4:9b:60:8f:35:5d:
a1:5b:a4:30:ca:3d:3f:1e:cd:ac:1d:0e:cf:fb:9c:
50:56:fa:62:2c:ac:42:aa:cf:34:49:48:15:9c:2f:
22:79:3f:5a:be:e1:68:0a:a2:42:af:ce:87:b7:5e:
48:8a:c6:df:16:7c:d9:66:61:d2:96:ba:58:56:e1:
c9:fd:20:a9:9e:0b:1c:a8:f5:ea:e7:38:18:0c:73:
42:81:e7:0e:ba:d0:56:b4:48:9c:0b:25:7f:ec:7f:
14:fd:e9:e2:b9:70:3d:7c:10:6a:ea:05:74:4f:29:
8b:be:10:22:99:a8:d3:9c:b3:79:9f:e4:9b:d0:84:
21:62:3a:3f:69:c7:ee:c5:5a:48:34:d3:d2:c3:bb:
8d:4b:76:0f:17:56:d7:68:81:6a:45:05:75:56:a2:
10:15:a6:69:c9:98:15:0e:7a:53:6d:e6:c0:e4:8d:
9e:e7:fe:b9:07:d2:e3:b0:1a:78:63:df:ec:c0:97:
f7:46:31:ae:e3:bc:d3:82:1e:5c:d5:db:d9:f9:72:
f4:bf:e0:a8:1f:cb:a2:b8:ef:fd:36:f0:0d:7f:b4:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:6C:E8:B5:43:14:37:7A:39:7D:90:04:2D:D5:64:CB:96:92:F3
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:57:9e:07:04:88:5b:f2:3a:36:42:b5:8e:b1:1c:26:81:
06:e9:82:24:93:3f:c4:c6:ad:61:7e:38:86:e2:e1:ad:21:10:
a7:d7:a4:16:ee:f1:75:63:ff:0d:e4:ea:80:55:dc:34:99:9a:
55:58:50:a8:45:2d:4b:9c:30:70:6d:2f:19:76:90:cc:8d:45:
ba:de:80:92:6a:d5:70:a5:89:98:cb:2e:4e:59:36:d0:d4:5e:
32:25:f0:2f:a2:d9:77:b0:3e:b4:e6:46:56:ce:e6:4e:7c:e2:
f2:eb:93:4e:e0:ea:9d:22:1c:45:92:b3:f1:bc:cf:13:f5:f4:
c7:f2:28:66:76:c8:3e:ec:a0:37:a8:71:d1:21:5e:fc:12:ea:
f8:50:1a:21:74:a0:53:71:ca:c0:9b:15:f2:96:ad:69:74:97:
72:89:9d:08:ea:93:5e:6e:ec:96:d4:23:86:34:6d:05:ee:2a:
37:b3:b0:85:0a:16:3a:63:91:5e:f3:13:dd:9d:1b:1b:42:d5:
77:89:1f:58:a3:2f:b5:de:bb:93:7b:8e:53:16:c0:77:96:98:
3b:2e:c1:d7:03:cc:5a:c6:ab:88:7e:91:54:53:fc:f2:0f:a9:
6e:dc:9d:b5:d9:ce:c9:ce:49:46:12:67:ce:93:a3:1e:7d:53:
3f:83:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:13:27 2025 by rpki-client