Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: 1d7a9HNK1cIa5kBPN95XppwPPl/QGBsQMAqtI+OCpv4=
Subject key identifier: 5D:A0:AF:0A:45:50:7C:18:3C:D1:7C:03:DE:6D:20:C0:BF:63:AB:60
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 01963F8B9B9A68C5190399E81F2E62924D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0581
Signing time: Wed 16 Apr 2025 17:00:35 +0000
Manifest this update: Wed 16 Apr 2025 17:00:35 +0000
Manifest next update: Thu 17 Apr 2025 17:00:35 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: WHRBoRbd14+7cVrmAzDMqHBxXODcpLf2TnRsLN6IvRE=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:9b:9a:68:c5:19:03:99:e8:1f:2e:62:92:4d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Apr 16 17:00:35 2025 GMT
Not After : Apr 17 17:00:35 2025 GMT
Subject: CN=5da0af0a45507c183cd17c03de6d20c0bf63ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:03:90:ca:b1:ff:28:62:73:60:53:96:3c:
55:1d:7d:02:36:43:8d:14:28:0f:c8:34:27:22:7b:
4e:7f:d2:b0:c9:41:8b:6c:e2:90:5c:ce:08:b6:ce:
f4:f5:8c:79:4e:24:5b:c3:ce:f9:79:86:fb:32:ad:
34:b8:a5:69:55:bd:b2:2e:89:f6:b6:a9:a0:61:6a:
af:18:f0:50:ae:9e:47:1c:de:eb:a7:47:16:69:8d:
47:4d:a9:07:13:1e:d4:a4:b5:05:e7:21:95:15:37:
cc:36:27:52:5a:71:0e:39:e2:65:dc:43:cd:83:62:
96:db:b0:8c:93:0c:17:47:d7:4a:fc:43:01:2c:80:
a9:46:21:73:7b:52:13:3b:e4:2f:f4:7e:d1:99:37:
dd:60:16:a9:c1:31:c7:97:64:b5:0f:26:9b:af:59:
f0:95:23:71:97:ee:c6:2a:e3:de:01:42:b1:d3:5e:
4e:53:34:2e:b0:8c:ce:04:75:d5:e4:d3:57:9b:f9:
b7:bd:e2:68:ef:dd:c3:ef:a8:6e:48:55:cb:68:e5:
54:40:ca:99:35:70:9b:c7:c2:5d:db:7b:a4:fb:b3:
2b:20:6b:f6:cf:20:e9:62:5d:68:6e:06:1d:29:01:
51:1e:67:7e:74:0e:92:05:d9:ff:71:36:37:a0:72:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:AF:0A:45:50:7C:18:3C:D1:7C:03:DE:6D:20:C0:BF:63:AB:60
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3f:78:86:f5:24:86:6a:39:26:63:90:83:c9:97:7a:c7:24:
78:49:cf:2e:68:a5:96:90:b5:69:ba:38:b2:58:1d:4a:e0:2e:
0c:6a:8d:17:3e:2d:3b:7d:c7:5f:ca:53:bc:ba:a1:7d:9c:04:
f4:1f:5a:0f:a7:61:ec:c8:0b:62:bd:70:45:bd:72:0e:40:8f:
ed:75:1c:c5:09:74:82:40:e5:2c:66:b3:ab:5b:4a:3c:40:be:
10:fd:d7:b3:b1:7e:18:50:92:f6:e8:91:4c:37:4e:bc:2c:6d:
95:c8:54:8a:bf:90:87:0a:55:42:b5:db:6a:11:bf:74:9c:b1:
9b:a2:17:96:73:30:8b:9e:76:12:4a:cd:c6:05:5a:db:b4:ce:
10:2b:db:d5:90:5c:6d:52:75:c5:8f:94:2c:d9:2e:b3:aa:33:
94:6e:72:e3:5a:c2:c3:4d:60:9f:1a:0b:b2:f4:14:68:bd:75:
20:12:a6:a5:25:dc:18:26:ec:e3:b5:21:22:b9:62:0a:41:e6:
96:be:19:8f:ba:06:07:84:5f:cf:ef:bd:e9:1c:da:e2:c9:2d:
e6:8e:bb:26:c0:28:a5:2e:12:a2:10:fb:a6:85:aa:ee:4f:5f:
ef:4a:9c:4c:f8:85:25:23:8a:be:9f:a5:86:12:42:ed:21:cc:
0f:c1:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:15 2025 by rpki-client