Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: GnaBCk+rmZITedx/Jh5moc5nn9PWdjCyPk6jDoiUqVg=
Subject key identifier: FC:1B:96:CE:5A:0F:C3:3C:D1:C5:48:D0:03:AF:AC:11:21:7E:62:28
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 0196B82388107A2E2609552D7D3731ABC40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0438
Signing time: Sat 10 May 2025 03:00:58 +0000
Manifest this update: Sat 10 May 2025 03:00:58 +0000
Manifest next update: Sun 11 May 2025 03:00:58 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: XejbSE+E3aQONgS8IE34ola7O2G3wvXsEYBb/PapnfY=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:88:10:7a:2e:26:09:55:2d:7d:37:31:ab:c4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: May 10 03:00:58 2025 GMT
Not After : May 11 03:00:58 2025 GMT
Subject: CN=fc1b96ce5a0fc33cd1c548d003afac11217e6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:81:9a:1e:c9:3e:48:12:19:75:f7:db:2a:
14:a1:84:6f:62:80:85:63:2b:3d:8d:36:9f:35:0e:
fc:62:fd:c4:10:af:71:56:6f:5f:82:8d:28:c1:b8:
b2:06:f9:79:03:a8:00:8c:64:78:a0:1f:1d:7c:1e:
34:5d:83:34:2c:f2:1e:5c:66:ae:81:28:96:cf:09:
d2:46:1c:cb:a7:f1:f9:84:c2:d5:11:94:fa:db:08:
af:1b:cb:0b:f0:9c:47:01:24:45:de:ac:4d:19:f7:
2d:05:03:ca:db:e7:18:37:0d:13:10:d5:5a:7f:4d:
c8:b4:fc:d6:a2:92:c0:f2:d4:d2:f2:0c:e1:64:a1:
1e:f2:e9:fa:9c:93:77:70:f1:c4:52:b3:20:d8:95:
76:82:58:5d:51:f4:42:c7:c9:45:ae:46:d6:56:ae:
57:2b:ec:dd:5e:72:d3:56:2e:82:4a:6c:c8:0c:bf:
87:96:9d:ba:7f:72:7f:b9:88:88:08:02:c4:41:0f:
5d:52:d7:13:e0:3e:bf:35:06:f8:f2:88:4c:4a:84:
3e:24:bd:30:9f:31:48:47:81:88:49:32:5b:61:66:
a0:1a:8a:45:ce:dd:50:44:da:80:e5:86:a8:cb:4b:
d8:1c:45:2f:b8:46:51:52:5a:55:0d:4f:c9:29:6c:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:96:CE:5A:0F:C3:3C:D1:C5:48:D0:03:AF:AC:11:21:7E:62:28
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:ed:00:3e:ff:9d:75:cf:6e:63:29:91:58:e5:94:01:ec:
53:2a:17:3e:a7:cd:b7:29:c1:54:9b:43:c2:a4:09:8b:4e:41:
fd:2b:e6:df:9e:e8:72:dd:ca:7d:98:96:b1:e1:f2:15:f4:01:
88:aa:b2:bf:b4:b7:7e:ec:e2:99:b8:e3:52:8d:7d:cf:34:bb:
ad:39:63:d3:d5:6f:ab:a4:4c:e1:da:c7:a3:73:20:95:27:cb:
24:a1:c3:e6:17:67:aa:33:01:0b:76:2a:66:7e:d7:68:a1:e8:
23:51:54:9c:da:54:43:58:62:6d:d5:12:30:a6:c0:82:f3:69:
2a:d3:51:05:8f:61:d8:30:76:3c:27:df:7b:c4:d7:c9:2e:01:
4f:60:b5:1c:4d:ad:9d:77:e5:1b:2e:ef:22:e4:61:a6:10:99:
31:a2:65:d9:cf:3b:d8:d8:92:22:e7:f4:31:08:be:7b:33:80:
39:b8:2c:f9:d6:0f:23:86:ea:ae:13:00:40:f6:3b:fd:d4:0e:
09:01:65:ac:97:f2:54:80:12:9b:da:fb:b8:52:5b:24:39:f8:
dc:91:57:c0:18:f7:08:de:93:50:f2:e8:b8:ef:8c:db:af:80:
eb:f4:1b:92:68:2d:31:a8:e2:b4:be:19:4b:e5:33:34:7f:b5:
9c:c3:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:26:47 2025 by rpki-client