Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 9rhO7oG6oUFpZei19I6d8OkZXa4/fyshXAIg5qaKCeQ=
Subject key identifier: 22:49:F8:0B:3B:45:F5:A1:76:6E:DF:62:CB:13:21:B8:C6:D1:51:51
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019655A642B9D073379AC476CAD7D79AD7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 01F1
Signing time: Mon 21 Apr 2025 00:01:21 +0000
Manifest this update: Mon 21 Apr 2025 00:01:21 +0000
Manifest next update: Tue 22 Apr 2025 00:01:21 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: AZAZuEj8RMTxoaPP0ebFnPI2iVEVXwTYBa3/vTmdFp8=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:42:b9:d0:73:37:9a:c4:76:ca:d7:d7:9a:d7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Apr 21 00:01:21 2025 GMT
Not After : Apr 22 00:01:21 2025 GMT
Subject: CN=2249f80b3b45f5a1766edf62cb1321b8c6d15151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:6d:68:98:c5:db:d5:16:58:2a:87:98:02:
50:04:3d:36:ea:55:7a:fd:72:b3:5d:f0:d3:ae:3d:
25:78:9e:80:1e:c7:51:bc:62:8a:d9:24:52:17:92:
c6:a8:01:dc:e2:0c:bb:89:65:e9:fe:b5:b8:0c:cc:
28:e9:de:2a:ce:b5:df:ea:37:5b:2a:13:54:80:f3:
b0:81:ba:48:7f:dc:18:f2:84:af:7d:fd:e7:68:e2:
fb:f3:5a:12:b7:37:93:3f:f4:b6:db:fd:fc:dc:ed:
4d:8c:a3:0e:7d:ef:32:64:11:e7:80:99:94:64:2e:
67:26:6f:ce:f6:65:78:d1:b7:8f:95:94:fa:d4:27:
d6:7e:2e:8e:30:2b:c5:47:10:12:53:97:d1:80:fb:
41:22:07:71:42:99:9e:65:d3:55:f3:31:6f:7e:bb:
18:06:14:c1:a0:7d:e1:09:d8:27:59:45:8e:a7:e7:
e0:ea:6e:f6:53:26:b0:06:2a:85:71:50:85:fb:8e:
bd:60:80:93:bf:cc:aa:96:ad:bf:48:7c:63:43:a6:
15:a4:70:85:96:6a:82:71:d8:04:cb:41:02:43:3e:
17:97:04:56:77:1d:fd:86:86:8c:f7:2c:a8:44:a6:
16:74:c3:6e:c7:6e:a4:e0:9f:02:fe:b0:32:f8:33:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:F8:0B:3B:45:F5:A1:76:6E:DF:62:CB:13:21:B8:C6:D1:51:51
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0d:ee:fd:f3:7a:e6:75:ba:bd:55:39:51:64:3f:c2:ca:e9:
fa:5f:61:c1:24:09:de:2b:6c:54:b6:45:d5:ce:12:16:cd:1e:
99:e7:1d:18:19:83:8c:03:34:23:13:8b:7d:b1:37:9c:81:a7:
83:a6:79:94:7c:4b:1e:f6:37:e2:5c:8f:68:fb:86:19:0d:cc:
c3:d2:de:0e:be:c9:6a:80:6e:79:c8:55:3b:c3:88:e7:f3:8c:
43:93:f1:9d:62:99:8a:ab:ff:be:75:0d:d3:26:c0:a2:c8:88:
14:65:00:56:08:b1:30:be:f3:49:88:b3:ed:37:37:11:0e:6d:
c7:c1:88:68:29:80:02:66:78:52:3f:d8:0d:82:9a:a5:87:52:
7a:c7:08:4b:b9:7f:a0:89:08:19:74:1d:55:f1:6c:83:1b:59:
ce:b2:1e:6a:cd:08:5b:60:47:76:79:ab:1a:42:fd:1f:17:38:
3c:7f:0e:ff:cc:b6:16:1d:0a:51:43:0b:37:43:01:bd:8a:8c:
41:d8:7a:d9:6b:28:4d:72:9a:77:3a:2d:2e:cf:14:03:f6:0e:
c8:52:55:92:f3:ab:19:3a:ee:87:e0:28:94:d7:6c:e3:33:4c:
a8:f7:64:7a:91:b3:8e:7f:b4:ef:fd:25:d6:e2:d4:7e:99:0d:
20:41:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:44 2025 by rpki-client