Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: n1YNExmmZR0Cubs1SRV8Xt8yuNmCOfSyTb4SZNTAbhs=
Subject key identifier: D1:7A:92:AC:9B:04:60:4A:52:BC:C9:C2:F1:7F:C1:37:55:0C:8D:DC
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01969F0864C85C0AD85A1A7E89BAABF31E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 06:00:49 +0000
Manifest this update: Mon 05 May 2025 06:00:49 +0000
Manifest next update: Tue 06 May 2025 06:00:49 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: FQ1JwELZUqdwyQ4Xjwa1nzQK2SZ37C67+WWpOI14VaE=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:64:c8:5c:0a:d8:5a:1a:7e:89:ba:ab:f3:1e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: May 5 06:00:49 2025 GMT
Not After : May 6 06:00:49 2025 GMT
Subject: CN=d17a92ac9b04604a52bcc9c2f17fc137550c8ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:c6:13:8d:6b:85:bf:e8:c9:f5:56:1a:a8:
fb:eb:22:7d:aa:e5:87:b7:f5:c7:56:97:93:9a:2c:
87:2c:6b:b6:43:52:5f:71:8f:3c:28:33:de:a9:79:
4f:f3:2b:86:5d:65:75:da:ae:47:9a:00:3f:6c:6d:
62:41:1f:bc:d5:89:97:d7:cb:fb:d7:3d:38:7f:ca:
b8:76:4c:3a:f4:90:83:84:cd:55:de:e7:ab:1c:c6:
4a:af:0b:55:04:21:a8:dd:85:d4:e8:af:13:c0:4a:
12:a7:dc:08:a4:c6:dc:5d:26:72:ee:e0:ab:f8:00:
9d:50:95:ed:47:39:91:a8:3f:86:87:85:13:46:41:
21:5b:ab:16:1b:83:88:f3:ce:ff:cb:66:ef:df:f7:
0c:29:ca:2a:d8:d0:8d:a4:f9:d8:30:ad:47:fa:09:
97:f6:23:2b:ac:43:e6:2c:ce:3b:c3:45:9e:ab:e4:
89:bb:d8:29:a2:31:66:7c:ea:f1:e6:4c:8c:e4:05:
d4:25:a6:11:93:33:fe:c7:e6:75:9b:47:45:5b:de:
b8:ab:4d:f7:ee:dd:4d:40:11:d5:37:30:1b:9f:ff:
4b:3c:a7:cd:8d:47:7e:d0:d8:17:f4:31:80:e2:e8:
c8:d5:0e:c6:f2:01:83:65:aa:53:33:82:d7:12:fd:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:92:AC:9B:04:60:4A:52:BC:C9:C2:F1:7F:C1:37:55:0C:8D:DC
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d8:76:cf:f0:b6:88:a9:92:b2:c5:ed:93:4d:17:8d:cf:58:
8d:7c:b1:98:60:9b:5b:2f:f3:50:79:72:7b:a8:31:3f:c8:f8:
73:5b:71:23:e3:e3:d2:14:df:da:e9:3e:29:70:ed:f9:28:6c:
fd:52:d2:8f:45:39:88:75:e3:e2:d9:ee:96:64:59:85:71:78:
5a:ac:af:59:77:87:07:02:eb:d2:e4:9f:dd:01:31:26:21:ae:
8f:bc:ee:61:aa:f5:09:38:ef:28:2e:b7:9d:6f:78:d6:40:73:
1b:00:60:ee:9f:38:b7:8b:0d:e1:33:4d:38:8e:c3:9a:6f:7d:
08:3e:0f:35:07:34:db:e4:ff:cb:aa:fd:b2:23:b5:fe:63:68:
93:cd:57:51:d7:ab:4d:d3:c3:52:54:04:1a:a1:1e:90:ad:1e:
6b:36:11:b5:dc:4d:fd:d6:80:43:31:56:71:2c:c6:2d:ff:ed:
00:8e:a7:8e:e6:51:be:bb:8e:56:c1:e4:78:52:8a:b6:c0:84:
f7:54:89:7c:aa:0a:37:b9:39:0b:d2:78:07:f3:bd:9b:1f:41:
20:48:fd:7c:42:3c:6e:63:68:24:4f:c6:98:5a:fe:a0:f6:91:
fa:f9:34:18:80:cf:bf:8b:92:61:2e:fc:5c:ac:7e:db:be:44:
9d:1d:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:01:05 2025 by rpki-client