Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: N0GPPWyg6Mk5bbnY2OoRF3zvA6W1QTvgtxTKcElKTkw=
Subject key identifier: B3:DB:D2:F3:60:5A:E0:92:ED:76:21:1A:E2:2A:66:F2:56:CD:14:F0
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01960C0CC3F37C775021AF3CAF74944C2F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 052E
Signing time: Sun 06 Apr 2025 17:01:25 +0000
Manifest this update: Sun 06 Apr 2025 17:01:25 +0000
Manifest next update: Mon 07 Apr 2025 17:01:25 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: dJ+Hz8dKQVHbti8siaqv9AJjYixExF7AQIlXI0a90Mc=)
2: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (hash: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=)
3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
5: XTWjD9RxeC6l3_NvTHQsET8rn-c.roa (hash: ykYdh3sbXe1rY2ZTlD70M1ZUp3zC5gCXzNGTNEV3S/E=)
6: i0G4rbaluY4hsTsMZnJk3iIOMWE.roa (hash: CiK52+AdXFUQok8ZcOo1/t7ZFlrVVCsMaQ9KmIRXLe8=)
7: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
8: q38p2dL7t029dWFRdSznRG0UCDs.roa (hash: SER6fNtd8df23hWn+6WZezoP9krSPn/CNMhUjqtk/v0=)
9: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:0c:c3:f3:7c:77:50:21:af:3c:af:74:94:4c:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Apr 6 17:01:25 2025 GMT
Not After : Apr 7 17:01:25 2025 GMT
Subject: CN=b3dbd2f3605ae092ed76211ae22a66f256cd14f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:aa:52:9c:fc:d4:f8:5f:90:17:1b:6a:ed:
aa:2a:f2:0b:0d:a8:ba:bf:56:51:02:10:00:21:36:
dd:03:fe:12:ed:ad:5d:e9:f8:8a:12:20:4b:a1:c8:
12:f8:b2:51:ae:9f:b9:75:8e:9a:8b:5a:55:2e:74:
ce:6e:1a:79:ca:61:4b:1f:0e:32:7d:e9:7c:2c:5c:
4e:de:32:2b:b9:1e:1a:b7:cc:3b:85:b2:77:4d:a6:
9d:48:c8:60:a7:54:a7:ca:b8:fb:bf:1b:b7:9b:29:
02:1c:f7:f8:a3:43:63:30:4d:b0:8e:64:29:fc:48:
85:fb:67:0c:17:b8:08:51:58:47:0a:67:44:90:93:
f0:0f:1b:99:ba:34:89:b0:62:14:00:47:09:8c:c0:
00:fd:d8:9a:83:5f:14:14:ad:b6:40:d1:a7:12:25:
ed:88:51:54:73:13:a0:56:c3:d5:d9:ae:29:61:f6:
1e:63:32:57:41:fb:0d:88:8d:4c:76:d5:71:8b:3c:
9f:9c:24:b3:d2:67:29:06:07:89:95:98:4e:10:34:
fc:96:dd:7f:11:59:a6:93:93:a5:da:9c:9e:64:dd:
c6:ce:af:42:d1:83:62:51:8a:2f:c2:75:b2:25:fc:
a7:62:a2:f2:f4:db:a0:2e:eb:ef:03:db:3c:21:49:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DB:D2:F3:60:5A:E0:92:ED:76:21:1A:E2:2A:66:F2:56:CD:14:F0
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:64:f2:4e:47:f0:c8:64:82:92:62:63:ca:58:7c:cf:52:
1f:19:ff:33:b0:ad:db:41:4f:37:f0:10:30:ed:6d:ec:ea:a1:
63:5a:6e:d3:9f:91:ff:00:7a:57:2a:ac:f0:d3:4a:54:bf:b9:
da:02:1b:4b:44:9a:bf:a4:0a:20:b1:61:88:3d:f9:60:4d:56:
9a:54:c6:81:84:5a:ac:22:f8:5a:a6:d2:58:4d:ed:c1:5d:80:
55:20:6a:07:12:26:89:a9:98:1b:e8:7a:fc:bd:11:b8:3e:49:
20:b2:44:de:55:b5:6c:12:d1:ce:2d:ac:38:81:97:c6:8b:d9:
dc:85:ae:f4:e4:e7:25:b4:be:b4:81:8b:d9:14:b7:96:89:bd:
67:4f:27:ce:08:f3:fd:b3:7f:be:c7:4c:b7:d6:3c:91:c3:2a:
0f:ef:f6:4d:d9:c0:e2:f8:2b:07:9d:3a:59:5c:95:c3:4d:4a:
1e:2a:61:20:3c:2b:09:cf:b8:7a:04:14:17:53:c2:fb:d4:6b:
77:f3:44:83:fa:eb:62:59:4c:55:2a:1f:78:00:e2:b0:b2:50:
fa:a3:ca:0f:8f:c5:05:9c:3f:6e:bc:bc:08:c5:c2:13:a7:74:
ae:11:55:69:2b:89:dd:ca:c1:1b:3b:36:f9:0b:c2:51:a7:0f:
cf:54:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:52 2025 by rpki-client