Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier: FxDCPIl/wNzsPdquM3Fn8bCy+93OvTNuBAv/HFm0m4g=
Subject key identifier: 12:31:DE:84:8C:D0:79:D5:37:27:39:D6:F8:1F:8E:5D:67:97:62:E7
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 0196B7EC3FB1398B49C5988FB70F591EB935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:00:35 +0000
Manifest this update: Sat 10 May 2025 02:00:35 +0000
Manifest next update: Sun 11 May 2025 02:00:35 +0000
Files and hashes: 1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=)
2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: d7K4NbSiIDOKbKV8ttuG7kCgZqIowhDp4HCrBrTJ82A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:3f:b1:39:8b:49:c5:98:8f:b7:0f:59:1e:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: May 10 02:00:35 2025 GMT
Not After : May 11 02:00:35 2025 GMT
Subject: CN=1231de848cd079d5372739d6f81f8e5d679762e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:4f:52:09:fd:4c:c6:18:e4:5e:cd:3b:2b:
27:e6:9a:0c:54:79:0f:20:ec:b1:c9:c0:4f:d5:06:
9a:32:ca:b9:28:64:82:bc:ac:63:cb:68:7a:7f:f7:
d9:8c:62:c3:a7:e4:32:4f:0a:ff:c2:18:66:5c:36:
39:34:59:53:f9:c0:36:de:59:a0:de:8e:07:f5:63:
c3:99:68:5f:da:69:20:9a:c2:27:cf:b2:3d:33:a2:
89:66:eb:1d:7f:37:d2:53:52:18:cb:d6:e6:c3:61:
d5:e6:54:07:ba:e1:ad:02:07:15:85:75:be:74:54:
65:99:cc:f3:96:01:cf:b7:e8:67:b6:54:6e:6c:57:
ad:00:2b:36:cd:d0:65:af:83:aa:e4:4c:53:b7:37:
b9:40:52:88:54:c6:1f:28:1d:0b:46:c1:62:16:88:
5d:88:66:35:85:eb:14:31:6e:43:cd:7f:2f:42:30:
5b:88:35:4f:4c:06:0f:01:5f:a1:2c:e1:d1:1f:9d:
14:7e:d4:46:3f:3a:ee:a2:26:bd:f9:ae:69:ed:fd:
88:f0:45:60:34:6e:89:02:75:e9:d5:12:42:e8:19:
7f:9c:d6:58:fb:d8:9d:91:68:a3:b4:46:60:31:d4:
03:27:42:57:fd:96:46:b9:a0:a4:39:39:9a:f6:8b:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:DE:84:8C:D0:79:D5:37:27:39:D6:F8:1F:8E:5D:67:97:62:E7
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:26:e5:ab:70:f5:b9:b1:47:82:6c:a8:9d:4d:21:dd:cb:
d1:73:b7:58:ae:a2:f8:e9:2d:04:97:78:42:64:da:9b:e2:ba:
c3:2e:7b:ef:29:a9:43:21:9e:7b:87:47:c4:5a:46:59:58:20:
06:23:5a:04:c7:e0:43:df:03:aa:7a:e1:14:9b:f1:39:ab:a4:
0d:5e:13:cd:ad:43:5e:64:f4:e4:c6:b1:a5:31:38:57:04:46:
cc:e9:f1:b1:5b:9c:35:a4:1b:4f:78:f3:7c:25:30:c9:9b:cb:
02:74:c1:18:53:b2:7a:7e:fe:32:bc:c0:85:7e:2a:fe:23:51:
83:e4:ae:32:d2:d4:33:99:bc:80:ed:8d:26:b3:02:02:5e:a9:
53:d7:33:a6:96:9b:f6:82:94:78:4b:9c:25:d4:b7:aa:91:8d:
97:36:3a:5b:bb:d8:f1:02:2f:4e:03:5a:65:28:27:e5:ae:92:
ca:2a:5e:fb:5c:65:c7:9b:15:08:80:20:77:16:04:17:e3:2e:
7c:4b:e3:62:76:ec:71:95:10:6c:c1:d4:ef:63:03:70:12:0d:
92:7e:69:1d:d5:1d:bc:43:99:95:bf:ba:5e:a1:31:7c:76:87:
52:31:cf:ca:80:25:07:02:31:ce:cb:c5:73:08:4a:2a:58:cc:
84:c6:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:51 2025 by rpki-client