Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: 7GSL+1VtD5WD28If1IMJ7ZCVAZKiL59q0/SbEWOmoUY=
Subject key identifier: 24:1C:E9:C4:EC:38:1C:7F:6A:CC:74:E9:C5:14:C3:13:7F:A2:1C:5A
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 01964BFE15B6ACB5CEA4D60B28D8C693573D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 0EB7
Signing time: Sat 19 Apr 2025 03:01:04 +0000
Manifest this update: Sat 19 Apr 2025 03:01:04 +0000
Manifest next update: Sun 20 Apr 2025 03:01:04 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: 9ozGQIizmlnp5Y9i/F/PQKrqIMrg08dH3QQ5i6GqrmU=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:15:b6:ac:b5:ce:a4:d6:0b:28:d8:c6:93:57:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Apr 19 03:01:04 2025 GMT
Not After : Apr 20 03:01:04 2025 GMT
Subject: CN=241ce9c4ec381c7f6acc74e9c514c3137fa21c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:1c:37:b6:93:db:ed:3f:7d:fe:1f:ce:ab:
69:c0:49:5b:3b:f4:21:f1:9c:5a:b0:45:75:e3:1d:
76:e0:81:03:65:2f:4a:64:30:de:d5:1d:db:2e:46:
48:7c:d2:17:3f:3b:d1:f0:08:a3:2e:82:95:52:ae:
df:44:54:3a:6e:20:4e:87:78:6f:f3:e7:71:14:a9:
45:8b:3b:bf:e4:9b:35:0e:b9:1f:95:cf:61:d5:80:
9a:54:c3:bd:b0:d4:4d:cb:90:2d:8c:05:01:7e:8b:
68:ba:36:b8:23:18:43:8a:32:d2:2b:b1:98:0c:a0:
5f:25:68:b2:05:a5:6e:f3:e4:af:cb:d3:ab:46:ef:
ed:9b:64:d4:1c:7a:50:a0:84:81:ed:c4:c1:3b:9a:
cc:88:85:1f:fb:79:fc:29:70:e0:45:cc:1b:59:a2:
7a:f2:a1:35:35:bf:69:fb:c8:70:6c:f6:6c:63:26:
d7:60:2e:5e:7e:17:53:78:8e:95:32:77:2c:bb:64:
2f:da:bb:72:82:03:09:eb:ed:ae:e4:b6:d5:1a:74:
d3:30:13:f8:82:b5:7a:96:4a:43:8e:4c:5b:27:8c:
e4:83:c1:02:b4:f6:16:2b:96:29:dc:e0:c7:0f:bd:
19:7a:5b:e4:77:2c:06:4f:4e:ba:8b:da:bb:3a:29:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:E9:C4:EC:38:1C:7F:6A:CC:74:E9:C5:14:C3:13:7F:A2:1C:5A
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:74:58:ef:b0:7d:bf:ca:28:7f:78:60:12:ea:42:7e:b2:
48:99:ca:3a:30:dc:ea:4c:78:65:b4:75:01:e2:9c:3d:e4:e3:
b2:76:d5:50:f5:d4:f0:7b:c5:53:c0:bc:2d:23:f8:b5:d3:1a:
31:a0:a3:60:bf:c3:21:f0:59:d6:20:31:04:15:16:4e:d2:97:
ff:28:62:89:10:4d:8d:f2:f4:c1:53:6e:8f:dd:5e:5b:b9:91:
6a:b1:72:89:93:16:ab:31:c8:33:64:2e:b2:ad:7a:e3:bb:6c:
4e:2a:a3:47:ab:7d:5e:2e:2e:95:0b:8a:a6:96:de:fb:7c:72:
f9:80:4d:50:27:86:2b:dc:6a:6c:84:4f:21:35:b1:07:75:30:
ac:ce:b7:d8:3d:4e:5a:fc:30:b6:78:fd:a4:10:e8:52:e7:83:
b6:a6:61:0d:1f:59:c6:07:dc:25:51:db:01:e3:21:7f:cf:a9:
99:26:6c:48:d8:f7:3b:4d:b1:73:25:1a:7e:1b:9a:85:1c:76:
4d:ca:a2:31:06:d9:da:38:ff:f8:6f:07:cf:e9:75:01:21:e4:
aa:dd:f2:e1:b8:f7:b5:da:3f:e2:cd:20:e3:7f:60:e1:f2:40:
ca:0f:87:48:e8:3a:d4:7e:30:a1:e0:91:7c:72:aa:51:97:f3:
10:fd:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:37:22 2025 by rpki-client