Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: UfgNRKTOJQ/Xd/L00ql7OylcPhdvtpAEDemKw/pgHCo=
Subject key identifier: 1E:89:37:09:D7:14:8D:FF:EA:CF:7B:3A:C9:1F:8C:EC:BF:3D:B8:48
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 0196A68A9A6B29362637880CFF3909DFBB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0DED
Signing time: Tue 06 May 2025 17:00:23 +0000
Manifest this update: Tue 06 May 2025 17:00:23 +0000
Manifest next update: Wed 07 May 2025 17:00:23 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: MTK/dI+rifj7cY5TxTErmCYPjzGKO81tIMFA7H3zEiU=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:9a:6b:29:36:26:37:88:0c:ff:39:09:df:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: May 6 17:00:23 2025 GMT
Not After : May 7 17:00:23 2025 GMT
Subject: CN=1e893709d7148dffeacf7b3ac91f8cecbf3db848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:23:8d:46:51:f2:00:4e:b2:3f:78:80:59:
79:d2:9a:ca:c4:df:f1:5a:2b:98:73:b7:e4:9e:aa:
b6:4b:9d:ad:68:ea:80:1d:fa:66:48:2e:c9:0b:08:
27:c2:cf:24:ba:97:30:38:83:d6:60:f5:1f:96:bf:
2d:fb:11:3e:22:c5:1d:99:04:79:e1:42:20:9b:4d:
ad:a6:35:b9:ef:4c:25:dd:59:76:66:ad:bc:fe:a5:
be:6a:e8:85:e8:74:30:b4:8c:ec:d9:3d:58:72:c9:
8a:a5:e5:9e:b9:fc:35:80:f4:b6:3a:bc:77:37:e5:
5a:97:4c:90:3e:82:ed:a0:cd:4d:7d:a7:84:2a:44:
9f:f3:29:f5:dd:a0:78:56:5d:05:23:90:cd:ad:7c:
a4:65:48:7c:50:cc:39:ef:5c:be:36:74:96:ea:d6:
4c:e9:59:b7:a8:99:e6:fd:b7:2d:ad:94:fc:75:44:
95:46:1f:6b:fa:29:fb:7f:72:93:05:30:8b:3a:92:
fd:34:43:51:64:a4:db:fb:6f:16:0b:28:dd:4c:1f:
5c:2b:15:fa:74:4a:63:10:fe:b0:5f:b0:cf:38:40:
7b:df:a1:72:9d:38:ba:e7:c8:f3:69:99:05:08:37:
60:ad:1f:59:00:f2:74:27:5a:52:84:8e:f5:6b:3f:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:37:09:D7:14:8D:FF:EA:CF:7B:3A:C9:1F:8C:EC:BF:3D:B8:48
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d4:b2:49:f5:48:b3:cd:75:5b:6b:f4:d9:9b:da:64:7a:ad:
15:99:76:5b:64:7c:9d:c5:64:10:72:1a:f9:94:34:fe:5c:d5:
c8:f4:1a:00:c4:54:33:0d:47:b4:6a:9d:cf:8a:51:0d:f9:22:
c3:cf:29:4e:06:3a:67:62:7e:aa:8e:01:9f:e2:dd:65:ea:0c:
ed:55:5f:ae:5c:81:81:37:95:5a:ed:39:78:23:4f:2e:b3:ea:
b7:82:6a:52:fd:4b:f8:2a:63:05:58:43:e5:3b:2a:e5:c8:96:
0b:47:e7:22:0a:e7:72:29:57:fe:6d:9e:f2:b3:eb:1b:8e:24:
dd:a6:aa:66:c3:50:10:62:10:cc:8c:f7:a1:36:39:9c:e2:37:
1e:4d:b7:b8:66:97:da:68:1d:e3:b2:90:a0:0f:8b:a3:08:9b:
20:e2:ea:22:89:b9:7c:8b:6f:c8:ae:47:78:36:68:d3:2f:44:
88:b4:b6:c6:05:1e:4c:10:de:29:20:01:c4:25:24:c1:90:64:
da:f7:63:eb:2c:ef:eb:54:fa:9a:f2:2c:f3:27:29:9a:18:c0:
5d:8e:f5:85:a1:3b:76:e2:94:92:0d:6b:20:63:2d:d0:e7:a3:
b3:9e:12:e1:eb:6f:b2:11:9a:88:83:20:0d:6e:8b:4a:b4:8d:
78:76:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:15:03 2025 by rpki-client