Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: T7qpWmSxKng24CROi+gh6nXRFzzx/RaLJ9uwOUrDzPY=
Subject key identifier: B2:E0:28:9B:5B:A2:61:DF:0A:EA:B1:4C:01:2F:75:AF:68:01:6E:B0
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 01964632CCAB3DA4E8EE817794DEBBC4FA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 122B
Signing time: Fri 18 Apr 2025 00:00:56 +0000
Manifest this update: Fri 18 Apr 2025 00:00:56 +0000
Manifest next update: Sat 19 Apr 2025 00:00:56 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: G5XZcvqTg5jo2clvV0UY5oR1aEIQCrhulbGufl3/EHE=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:cc:ab:3d:a4:e8:ee:81:77:94:de:bb:c4:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Apr 18 00:00:56 2025 GMT
Not After : Apr 19 00:00:56 2025 GMT
Subject: CN=b2e0289b5ba261df0aeab14c012f75af68016eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:44:a6:06:1f:65:5a:27:56:25:49:f8:4a:
e9:c8:57:34:35:62:de:f4:bd:71:21:18:ff:37:fa:
45:2c:69:84:d0:c9:8c:7e:61:ce:0a:50:3d:42:b1:
39:47:08:c4:96:c2:cc:77:98:0f:d8:f4:13:12:d3:
01:af:79:7d:ae:23:d2:5d:3c:03:d4:5b:19:12:95:
7f:e7:7a:96:56:f9:3d:ef:7d:6d:18:38:7b:fb:fa:
62:05:68:43:6c:0e:66:4f:be:80:da:5b:4f:cb:ef:
ce:d6:d8:a1:1b:75:58:d1:5d:95:1b:46:ab:6a:6a:
8f:ce:2a:1d:30:84:8d:31:18:a3:4f:3f:95:4e:3c:
d1:78:b4:70:28:51:ca:1e:c2:73:3f:8e:79:c9:25:
5a:46:43:01:ab:93:d1:87:f2:d5:74:d4:e1:b3:18:
ea:6c:c4:9a:bc:8f:b8:c7:a1:bc:da:7b:11:c0:b1:
2d:1b:e3:f3:09:51:1d:7a:03:6b:ad:f8:2f:d2:be:
25:bd:e0:4a:07:b5:fe:30:0e:b7:28:51:64:1c:70:
67:12:8e:95:a8:5b:fc:99:f6:ac:c9:6c:4f:c5:a1:
79:16:ff:28:69:f2:55:91:2b:e2:1e:ce:e2:cb:33:
de:97:df:30:26:bf:c5:b0:31:f9:ac:84:f0:da:f0:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:28:9B:5B:A2:61:DF:0A:EA:B1:4C:01:2F:75:AF:68:01:6E:B0
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f3:46:91:96:2d:66:ed:7a:cc:d3:f4:94:a4:10:2a:3e:4c:
d8:95:18:d0:08:73:a2:9a:0e:8d:1c:e9:55:ee:42:7d:6f:47:
0e:cf:d5:d3:5b:2e:0c:9b:ae:9f:50:83:70:3d:ef:cc:a8:5c:
a3:2e:32:ed:50:60:4c:46:12:d2:ab:1a:a7:f5:cc:ec:fc:b3:
bb:ba:7b:18:17:bd:d9:c7:22:79:09:62:76:40:1d:8c:df:ae:
9b:57:dd:a6:1b:40:25:6d:7f:26:e8:cd:5a:03:1a:ba:5c:04:
12:e2:b9:bd:6b:b4:fc:2f:a8:a1:c6:aa:9f:13:08:ab:9a:a0:
4f:c0:75:6d:17:14:15:03:a1:ff:38:78:89:72:62:cf:c7:90:
14:ae:37:17:d5:a7:ac:f3:a5:53:27:d7:04:6d:09:b2:b1:1a:
e2:10:a3:c3:ac:c5:1e:85:b7:a5:2f:87:15:9a:3a:2e:10:a8:
7e:dd:f0:46:0d:72:b8:f7:b2:20:e8:21:b4:2a:e2:1d:a2:d5:
29:56:d3:37:6a:74:18:d9:d2:61:0c:92:34:00:bd:4d:57:ac:
b8:6f:5f:a2:83:67:1a:cf:83:6b:a0:20:c3:96:e4:3d:48:06:
38:62:ee:f2:70:e8:b7:f3:89:36:1d:9c:41:c0:51:2c:46:45:
7f:b7:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:47:25 2025 by rpki-client