Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: s3uz6EmnhPLATtWiniohJsynXHw2l4gMQX9U8nAFigE=
Subject key identifier: 72:33:FC:D8:9E:C4:AE:9D:26:61:CC:EA:88:05:74:D4:A6:16:CE:AA
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0197BA7EA08EDCC52C57B77187E666161611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 1055
Signing time: Sun 29 Jun 2025 07:02:30 +0000
Manifest this update: Sun 29 Jun 2025 07:02:30 +0000
Manifest next update: Mon 30 Jun 2025 07:02:30 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: ianzlfhFZfegRgkfJFQ2tZ2u25KR+kciJypQRk47L4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:a0:8e:dc:c5:2c:57:b7:71:87:e6:66:16:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Jun 29 07:02:30 2025 GMT
Not After : Jun 30 07:02:30 2025 GMT
Subject: CN=7233fcd89ec4ae9d2661ccea880574d4a616ceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:a1:5e:68:33:ac:fe:5a:c6:27:94:f7:4d:
a8:92:10:37:06:8c:c9:37:b8:d7:0e:30:aa:69:0a:
6e:db:eb:00:38:b8:19:64:97:b3:f3:34:81:e8:2b:
87:d1:af:3e:92:8d:ec:ad:61:2a:d5:70:18:62:d0:
0e:67:51:94:c6:62:83:c6:ce:17:56:bd:23:78:3a:
d3:72:59:52:a7:98:6e:4b:c8:82:ed:da:6e:66:39:
5e:ac:dc:5a:4a:35:c7:6d:f8:0f:71:51:7d:2b:c3:
1e:bd:a6:3a:85:e6:c3:06:5c:1b:16:cc:a0:4b:59:
1c:9f:38:70:7b:51:75:ee:48:b7:8c:b5:dc:20:f9:
6d:7c:e6:c3:13:3f:55:c7:63:d4:39:06:e6:b9:d9:
9b:e5:5e:4a:0b:3b:b2:f1:50:50:af:ca:43:d1:ab:
c0:74:65:fd:c8:17:02:80:48:d3:97:c8:84:e0:ec:
85:b2:e7:7d:0b:8b:a6:9f:11:13:e9:2e:19:08:a7:
a0:59:2c:51:71:36:16:bf:5b:97:62:89:9e:e2:40:
ce:f3:e4:db:6f:e6:7e:db:e1:b7:14:79:37:75:f9:
d7:b7:d2:21:c1:ac:66:a3:10:4d:66:37:33:81:e8:
8a:1f:f2:73:68:f3:70:cb:f9:c5:07:e3:a0:48:74:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:FC:D8:9E:C4:AE:9D:26:61:CC:EA:88:05:74:D4:A6:16:CE:AA
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:f8:40:fc:50:ec:97:e3:d2:d0:c1:c3:67:7f:5b:d3:c7:
ba:8f:e9:b4:bd:a9:45:e1:3c:5c:93:b6:fc:a9:ae:89:0a:d9:
f6:46:78:80:03:ba:8a:dc:db:e6:a0:7d:50:76:d4:5a:da:06:
63:16:23:6e:93:36:52:e9:8f:b1:de:cd:f2:7d:08:4a:ee:0f:
2e:ac:f4:a5:39:b1:7d:94:11:92:0c:98:e1:07:13:01:f8:83:
ff:36:54:2d:8c:d9:7f:59:24:7c:e0:ee:bf:12:15:1d:7d:c7:
19:4f:26:14:11:b1:2a:a9:62:36:3a:38:56:4e:fa:85:a0:19:
49:f5:28:e1:9b:53:dc:e5:04:44:8a:eb:2c:0e:95:a1:6e:3f:
96:34:36:2a:af:7e:1e:33:2a:d7:cf:18:a0:56:b0:b1:b9:e1:
eb:47:4b:ef:68:ae:4b:33:09:af:36:cd:d2:4a:e3:1a:e9:29:
f2:9b:1e:5b:ee:75:86:5b:d1:fb:58:46:c2:c4:01:83:93:fe:
9e:b2:00:4d:fa:2b:bb:b0:29:16:be:0a:0e:49:24:af:fe:7f:
23:72:e3:6c:a7:a7:ed:9e:c3:54:08:82:92:3c:6c:ef:05:52:
c0:f0:21:69:6b:20:63:dd:47:ab:51:ca:aa:b4:e8:77:66:fa:
85:77:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:39 2025 by rpki-client