Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: 9c4zoqThw6odf0OYab/iuyZsgzNFUYd5H4/PL44xvQ0=
Subject key identifier: 6F:E7:FF:4F:ED:1C:15:E7:78:6E:F8:60:97:85:10:65:50:3A:81:0F
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0196AC1F8F176F516E4809CCAB9CBF6FBE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 0FC9
Signing time: Wed 07 May 2025 19:01:11 +0000
Manifest this update: Wed 07 May 2025 19:01:11 +0000
Manifest next update: Thu 08 May 2025 19:01:11 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: RJTZ4mPiV6mkCViYrYnYQRtXCpwdAfdQ2nfXhvIlRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:8f:17:6f:51:6e:48:09:cc:ab:9c:bf:6f:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: May 7 19:01:11 2025 GMT
Not After : May 8 19:01:11 2025 GMT
Subject: CN=6fe7ff4fed1c15e7786ef86097851065503a810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:f9:e4:26:7a:84:ed:52:2a:a6:4f:ff:09:
25:ba:0e:3e:ae:f8:70:01:d2:2f:8f:1e:5f:02:4f:
99:0e:fc:e7:bc:92:1f:13:a0:8a:89:b6:f6:d8:78:
7e:fb:5b:13:58:db:5f:80:05:31:81:7c:59:ae:82:
be:20:c6:d6:05:83:4b:ee:54:2f:73:52:bf:37:ee:
86:6b:45:82:34:7c:4a:5c:30:15:4b:62:c8:12:07:
66:45:e8:70:6d:cb:05:08:a0:ef:d7:8b:77:6e:a1:
08:56:b9:9c:43:2d:f8:8f:4f:be:f1:31:c6:e3:ef:
a7:60:06:48:e3:1d:39:f4:d0:c1:b8:5b:24:89:be:
3f:ba:af:d5:91:44:91:bf:4e:be:32:19:eb:ab:43:
fc:c1:44:ea:57:a8:e8:45:3e:2e:c1:c5:54:21:2d:
f4:f9:f0:0a:a0:90:74:53:3e:a8:bb:fa:87:6c:fd:
9d:4f:0c:14:40:1a:fa:e5:a0:9d:f8:31:27:5c:7f:
b0:58:14:e4:0c:08:61:5c:f1:46:a0:7e:b1:3d:a7:
1a:8d:5b:4e:a6:4a:c4:91:a6:f6:13:c0:8c:32:d0:
67:29:26:ff:e2:bc:c2:e3:f2:d2:9b:98:22:cf:eb:
3b:94:43:79:6b:fc:17:44:2a:db:b8:05:52:41:23:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:FF:4F:ED:1C:15:E7:78:6E:F8:60:97:85:10:65:50:3A:81:0F
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ff:36:f0:88:b7:4a:99:98:e6:c0:aa:f3:11:40:d0:56:54:
b2:3c:cb:73:29:0c:32:81:7f:bf:c1:4b:0a:4c:c1:a3:7c:cb:
b9:07:b5:24:ca:6b:9b:bd:17:7a:5d:27:65:98:51:28:b7:61:
bf:48:34:d3:48:72:bc:fe:3f:9c:88:d4:53:1e:8c:21:1f:fd:
4e:96:16:90:12:99:9c:35:0c:49:03:e4:6d:ac:6c:3c:cb:c3:
9b:30:1e:78:58:d8:b2:43:26:69:ea:8a:eb:80:5f:e7:d5:13:
76:2d:3a:94:50:2c:76:dd:a7:13:90:a8:c8:01:cf:c3:43:f8:
1e:61:36:69:32:c4:89:6e:23:59:a8:7f:96:dc:58:a3:9d:67:
dc:71:e5:58:ef:1c:50:91:d3:1e:45:36:03:d9:72:6e:fc:2c:
2e:b7:5c:00:cb:1b:ce:ba:06:2b:73:5f:22:d2:57:73:77:c2:
af:fd:51:64:0f:13:24:87:3e:6d:91:dd:5b:82:00:d2:8a:c1:
07:ba:2f:c8:f6:0a:85:c3:c9:eb:81:77:ff:01:cc:fd:82:38:
20:29:63:19:41:76:c6:5a:d3:75:50:5e:29:de:bb:4f:5e:5f:
17:16:9d:99:f8:81:f1:93:5d:c9:ba:a0:02:c6:8d:80:6d:77:
9f:13:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:25:01 2025 by rpki-client