
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: CCr398CyaB7tAeNIn4xBq/5RiZemIepAvmBo7KO5L1c=
Subject key identifier: B3:0E:BC:AC:9B:00:D6:CB:37:C1:9C:49:AF:EB:6A:41:C8:96:FE:35
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 0196CF18D76E243DBB75B218FB968C95C12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 0F5F
Signing time: Wed 14 May 2025 14:00:33 +0000
Manifest this update: Wed 14 May 2025 14:00:33 +0000
Manifest next update: Thu 15 May 2025 14:00:33 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: KKLbFW7cwhKI2xvJoKjSIgQdjQ3sMbn17bwM24VFAJo=)
2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:d7:6e:24:3d:bb:75:b2:18:fb:96:8c:95:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: May 14 14:00:33 2025 GMT
Not After : May 15 14:00:33 2025 GMT
Subject: CN=b30ebcac9b00d6cb37c19c49afeb6a41c896fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:4b:c3:e2:c9:53:4f:c0:b7:83:3e:21:4e:
cf:c9:85:41:c9:cd:5b:66:e2:75:9c:00:a3:d8:17:
2c:c1:6d:7b:b0:23:fe:28:66:5f:a0:76:1d:f5:21:
fa:67:7d:6e:9d:93:a1:8f:f7:43:0e:7e:67:73:70:
7e:38:6b:74:fe:93:cc:46:ea:d0:cd:90:f0:93:3c:
16:dc:14:af:52:6f:5f:bb:fe:03:c3:36:5c:be:44:
93:17:50:5b:ed:43:b4:dc:97:5a:68:1c:ba:5f:05:
a9:52:83:b3:82:a8:c1:7e:8d:fe:f4:a2:bd:22:81:
5f:81:a5:4e:24:dc:e9:18:48:34:00:e1:7e:43:2c:
b6:8a:23:18:b7:67:59:c0:40:af:fb:37:bc:44:58:
09:2a:e5:48:84:ba:c1:0b:64:e6:b8:35:ea:c1:6d:
56:a8:47:16:48:bf:cd:49:14:46:94:ad:9a:2f:81:
cf:6f:04:31:1c:29:8b:b7:d4:1b:44:97:46:d7:95:
d3:01:86:17:37:53:47:65:3d:ad:d7:ab:28:48:25:
5b:c3:fc:aa:7e:1a:83:94:1e:4d:f0:d3:45:c6:fe:
72:e5:08:ea:07:71:7a:a7:f2:64:36:e6:b5:d1:41:
6e:a4:b4:13:61:1d:8e:09:31:7c:fa:79:79:fc:38:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:BC:AC:9B:00:D6:CB:37:C1:9C:49:AF:EB:6A:41:C8:96:FE:35
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:0c:cf:52:ed:92:ad:ba:8a:48:46:7f:2b:52:09:b5:90:
6b:76:be:05:10:1a:08:cb:6c:6e:7f:65:85:32:cd:b8:79:f3:
13:a4:18:a0:ad:30:e8:46:08:6a:e8:14:8e:6d:59:44:df:ce:
9c:58:f5:10:6d:31:e6:70:f6:d8:50:6f:b8:b3:de:a8:d0:a2:
ec:6d:76:80:00:f2:0b:c0:2b:87:31:10:d3:37:33:17:e3:40:
f9:c3:24:50:04:e9:aa:d0:3b:f2:cf:6e:4c:d3:23:80:3d:97:
bb:f3:56:ac:e5:9e:20:e1:e7:73:2e:79:ec:60:c3:6d:e5:5e:
3c:9a:7d:36:5a:e9:fe:63:25:88:e0:c5:e7:b9:74:4c:ea:67:
97:80:b6:c0:98:fb:f1:13:8e:44:8f:e0:ff:ee:bc:a7:d4:5e:
26:cd:ec:9d:ea:35:b8:89:32:11:4e:b4:ac:e7:1a:da:5e:68:
c5:e1:92:89:8f:19:36:07:c7:86:77:2e:55:2f:2e:54:7c:0c:
86:50:7a:a8:93:10:87:24:21:56:6b:8b:c9:1f:81:01:53:d2:
77:e8:73:d9:41:81:a8:a6:d1:41:5d:64:e1:0f:b6:63:c5:fb:
b4:2c:46:fa:cf:a1:89:fb:40:da:8d:09:7a:a4:f1:24:3e:ed:
ca:f3:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:27:54 2025 by rpki-client