Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: bVyTBsLAGtwIs7Sxqg/iKi4etdGip1vOHGXt0bYoq3c=
Subject key identifier: 37:8B:27:51:C4:13:85:B4:FD:7E:15:C6:F8:30:01:0F:C8:18:9F:E9
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 01965D5F25977131914EDE4EB5578F0AA041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0B33
Signing time: Tue 22 Apr 2025 12:00:38 +0000
Manifest this update: Tue 22 Apr 2025 12:00:38 +0000
Manifest next update: Wed 23 Apr 2025 12:00:38 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: RXgIMbqHKyjWBehKZkL07U8uXbkf0gTmve6qDFqXgbY=)
2: V-SPBonH-GE9ewbFSO5NODHxd8U.roa (hash: pNam+wwq47C4Qg+Kyg4fIGCIT+ztn7vo1w+K7kvIl84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:25:97:71:31:91:4e:de:4e:b5:57:8f:0a:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Apr 22 12:00:38 2025 GMT
Not After : Apr 23 12:00:38 2025 GMT
Subject: CN=378b2751c41385b4fd7e15c6f830010fc8189fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:fa:35:73:e4:14:73:a5:fc:74:14:30:12:
e0:fe:e2:ba:1c:51:29:61:57:ae:60:32:bd:86:4c:
08:d0:63:98:6d:3a:88:5b:9c:46:f1:8e:58:7c:cf:
0f:48:29:14:66:25:b9:e4:3f:92:23:8a:1f:04:34:
a5:41:16:58:38:1d:54:6a:21:d3:01:2f:88:44:35:
63:17:95:3c:32:c7:f5:dc:d0:58:a3:22:1a:a6:87:
90:6c:65:e3:5f:67:9b:6c:4e:4b:91:91:b0:85:ad:
a5:56:85:b6:8d:e4:70:e2:a3:b6:6b:c0:c6:95:c8:
a6:3b:30:16:f8:9d:da:ff:ea:eb:6f:27:b4:db:96:
ea:67:ff:4d:ce:f0:88:bb:b5:0a:a1:98:7b:18:76:
7a:90:a0:00:66:16:b8:19:41:f1:e7:f1:18:21:2f:
fb:ca:94:49:b8:72:fd:42:f8:0e:74:26:d4:bb:27:
f9:79:0e:bb:73:84:da:66:b8:86:aa:1b:15:9d:fe:
19:80:8a:3f:23:b7:e9:77:a3:83:50:e0:cc:c4:80:
6d:dc:df:07:c1:d1:d4:e7:b5:88:e0:bb:21:6a:0c:
d2:dc:e8:7c:29:a6:5c:39:f6:36:93:18:23:3d:c6:
a8:3b:6f:e3:44:71:23:b0:5e:52:22:9c:2c:ce:c9:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:27:51:C4:13:85:B4:FD:7E:15:C6:F8:30:01:0F:C8:18:9F:E9
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a7:4c:42:ec:b9:28:ca:9d:82:07:1c:4f:84:70:69:15:b9:
4e:c7:84:df:5a:34:48:46:78:b9:9c:c3:af:14:88:22:84:88:
35:f0:e8:23:f4:56:83:72:f2:b8:eb:34:06:df:b6:02:8f:02:
31:77:db:b1:37:19:3a:bb:74:7f:61:56:98:c4:49:14:0a:81:
eb:5e:74:25:cc:a8:09:8f:6b:0e:30:88:5e:de:99:90:2f:18:
71:16:29:04:fa:84:4b:df:e3:5d:e0:5f:6a:cb:7c:2f:b0:10:
52:57:60:45:b2:3a:ce:e2:cc:84:6e:be:fb:93:f6:3c:3f:62:
03:76:f2:84:53:2f:29:86:b4:0e:47:1f:d5:e7:3a:65:d5:e2:
5d:d4:92:8c:32:53:b7:02:94:55:eb:30:10:92:64:de:53:d0:
21:5e:52:21:68:b0:a5:39:2e:19:b2:a4:b5:6e:f3:6e:d1:be:
df:59:51:89:18:b7:d8:f0:37:0c:4b:05:1b:34:73:04:8e:b8:
ec:93:e2:ca:98:5f:5e:a7:13:70:dd:f2:49:06:ae:5f:a1:a9:
31:52:ae:64:f2:58:ce:c9:23:fa:c6:7a:f6:14:55:9b:47:ce:
0b:63:cd:41:f4:1a:06:3c:c5:b1:7e:b5:53:99:f0:b6:45:35:
95:1b:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:20:51 2025 by rpki-client