
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: /gbOkepU0mIGTjzJ0sCJO1Vs0L78u8jQivPwIEZzNl4=
Subject key identifier: F7:05:C9:C0:BF:CC:2D:87:F8:E1:A2:0B:D1:F2:74:35:E7:75:D2:B9
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 019659F054F9A254EF2ED90D452431FAD41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 20:00:44 +0000
Manifest this update: Mon 21 Apr 2025 20:00:44 +0000
Manifest next update: Tue 22 Apr 2025 20:00:44 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: HbzbV/4XZuX+mEVIyaW1SEy8CKuvPo+sNW1eg/cOc4A=)
2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:54:f9:a2:54:ef:2e:d9:0d:45:24:31:fa:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Apr 21 20:00:44 2025 GMT
Not After : Apr 22 20:00:44 2025 GMT
Subject: CN=f705c9c0bfcc2d87f8e1a20bd1f27435e775d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:92:95:5e:e8:6b:e2:28:0d:42:65:fa:99:
58:8f:70:49:3b:f5:6c:b9:1b:f2:62:3d:4e:18:a8:
1e:bf:ae:27:53:d9:27:61:2e:c5:92:64:7b:bd:6b:
17:a2:8d:28:35:1c:da:ee:28:78:25:99:62:19:e0:
6f:d6:eb:ca:8b:87:7a:a0:6c:a9:3c:93:8b:78:61:
e9:47:48:ef:45:3f:1b:e7:4b:e1:a2:6e:80:9e:07:
a6:17:da:7a:a6:ab:9e:78:0a:7a:69:ca:3e:11:9f:
16:a7:aa:eb:51:e5:ea:23:53:f1:80:53:b4:af:61:
22:90:71:5e:5e:5b:20:e0:b1:65:99:b6:9c:23:65:
bf:0a:44:45:ab:2b:8a:60:55:b8:70:f3:63:66:ae:
97:69:ef:f6:e0:62:fa:de:c0:ad:d9:fc:8d:49:34:
a4:d2:04:3d:cf:e0:4b:a0:0a:7d:b0:f4:e4:08:c5:
55:98:c2:ae:68:3e:11:ce:2f:43:9a:3e:c6:d2:c0:
db:51:14:f4:c5:96:a3:d9:32:ae:67:7e:50:c2:c1:
9e:e5:b3:59:5d:ff:27:72:3c:58:da:c5:0d:b5:b2:
18:f9:7d:17:85:74:c7:e4:f8:e7:65:b3:d3:ae:fa:
6f:5f:95:7e:7c:ac:33:ce:d5:1e:f3:07:76:80:7d:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:C9:C0:BF:CC:2D:87:F8:E1:A2:0B:D1:F2:74:35:E7:75:D2:B9
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:dd:e2:ec:2d:d4:49:60:61:71:f4:fc:c7:b1:6e:71:aa:
d2:5e:5f:64:49:36:e9:a8:92:05:c9:77:5a:55:b9:c8:88:28:
f9:42:3d:fc:50:08:b2:86:fe:b4:90:de:c4:84:65:9e:2a:8e:
5c:05:67:ea:c7:66:68:19:8b:fb:cc:65:0e:e9:38:b7:10:ec:
2e:2b:60:42:79:24:c2:25:67:eb:1f:7a:02:b7:7e:07:77:b3:
0a:9b:ec:55:86:02:87:05:b4:41:22:e7:ad:f7:5a:f8:a2:ca:
d7:34:a3:5a:c8:f7:dc:28:c4:c7:ca:59:53:b7:22:6d:75:3a:
8f:c7:40:c1:17:57:1a:38:c9:57:7e:02:81:b0:72:22:45:10:
7f:ca:81:4f:5b:1a:db:89:fb:73:8f:e1:f0:96:05:1f:46:f8:
94:be:8d:3f:01:8c:9a:7c:6d:00:ea:8f:a0:c8:aa:7e:76:36:
2c:9a:13:df:f0:89:9d:61:a4:3f:50:60:77:18:85:e0:10:85:
37:4b:29:44:11:99:c4:0c:73:d7:ee:3c:0e:fe:85:97:d8:8f:
8d:3a:60:0a:87:1d:6d:ed:6e:bd:77:62:2d:0a:f1:bc:a8:2c:
1a:ba:56:88:4c:74:82:23:2c:fe:f5:0d:79:f0:21:bc:4e:79:
e9:d3:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:39:07 2025 by rpki-client