Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: mdyNchZ6AreQ32hQdT/79ABFfLPPlhC536afSS78+W0=
Subject key identifier: FE:94:23:82:74:AA:55:EE:1B:06:BD:F5:0A:76:A8:A2:BF:FB:72:B4
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 0196451F9A73F032B0009A6C8A514A8FA883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 19:00:21 +0000
Manifest this update: Thu 17 Apr 2025 19:00:21 +0000
Manifest next update: Fri 18 Apr 2025 19:00:21 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: C9iQYSM797L6qSwblsye7rkLUr46sw3XLeOnJAoAU6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:9a:73:f0:32:b0:00:9a:6c:8a:51:4a:8f:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Apr 17 19:00:21 2025 GMT
Not After : Apr 18 19:00:21 2025 GMT
Subject: CN=fe94238274aa55ee1b06bdf50a76a8a2bffb72b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:65:a9:a3:df:5a:61:37:32:3e:f5:cd:28:
e3:f1:03:36:de:84:c0:4d:57:d8:e8:a1:c8:de:d0:
e5:1c:ad:03:07:34:4e:24:b5:5a:c9:cf:cb:18:76:
35:da:72:2b:42:00:01:07:30:cf:af:32:10:70:9a:
7a:e5:58:a0:83:f2:b3:6b:db:86:c0:9b:4e:04:b4:
49:13:80:9d:71:b5:2e:45:9a:cb:d5:cb:54:bb:1b:
77:77:6b:86:15:09:e4:cc:41:a0:5c:f7:f0:2a:c6:
be:82:bd:fd:4c:67:5e:d8:78:8e:c6:00:3a:a6:b6:
63:f5:37:d8:e3:44:c9:13:05:c3:fd:0a:7f:4c:b8:
1e:50:04:6a:a1:86:bf:96:2f:8c:81:0a:ce:03:e7:
42:83:be:40:62:a6:03:cf:3d:7c:9b:90:33:85:89:
c0:52:c3:16:ad:7a:cc:81:73:8a:93:eb:bc:55:9e:
51:e7:ac:42:2f:67:39:96:cf:b6:c6:27:56:8e:42:
aa:9a:01:45:81:79:13:dd:2a:53:08:5d:07:d3:37:
6b:b7:a0:84:e9:61:5a:ea:6f:d4:87:94:02:51:93:
36:05:33:25:00:73:e6:1b:cd:39:38:09:fd:97:b4:
a1:4c:12:a2:10:7c:3e:54:f6:5f:4b:fd:3d:f5:04:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:23:82:74:AA:55:EE:1B:06:BD:F5:0A:76:A8:A2:BF:FB:72:B4
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:87:b8:ec:97:07:00:2d:1e:37:80:83:c9:71:be:59:9d:
fc:a4:4d:ce:37:6a:98:52:68:95:11:f7:a1:94:42:79:a4:52:
3e:e5:4b:13:43:e8:b9:28:1e:9d:ef:ef:4e:af:b1:dd:5a:db:
31:77:af:7e:f8:15:89:ad:2e:22:c1:0c:7f:50:6b:0a:0c:78:
a6:a3:98:8c:db:07:11:3d:97:15:62:77:76:0f:26:45:31:ff:
5b:dd:2e:f7:58:e0:7d:fd:d6:5c:36:00:de:27:6e:73:a1:6a:
25:d9:12:44:0a:4f:ee:dc:4d:cb:c3:10:c4:ae:b0:3f:8d:76:
4d:28:64:18:38:dc:c6:71:db:fb:ba:45:d8:6b:f0:e8:45:54:
16:74:82:19:56:6b:0c:f0:54:ff:a3:fb:63:03:b0:cc:85:e7:
07:07:6e:3b:bb:41:3e:47:ce:c2:4f:9a:10:db:78:6f:2a:ac:
61:06:c3:30:9d:7e:af:1a:d9:c0:d7:74:7c:f3:c7:1c:01:4e:
a9:7e:5d:a1:df:24:74:95:fa:37:d2:6d:e4:2b:63:4c:7d:72:
e1:4d:e8:e8:8e:0a:ba:7d:28:36:ec:d8:9a:6e:3b:af:66:0a:
96:03:4c:1c:9f:4a:e0:5a:4b:78:1b:b3:fc:9b:e6:7a:f8:44:
d3:99:31:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:48 2025 by rpki-client