Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
File: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft (raw, json)
Hash identifier: X+9Bw4tkK+CLJcJg6YOE4B/Mg5WXSsxgGPpnkXZo1Tg=
Subject key identifier: 0A:97:D3:ED:B8:1F:FB:53:5F:63:58:E8:53:C5:7B:10:93:2A:F0:D8
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 0196CA97207B034A20E5811613B89A683CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 17:00:23 +0000
Manifest this update: Tue 13 May 2025 17:00:23 +0000
Manifest next update: Wed 14 May 2025 17:00:23 +0000
Files and hashes: 1: FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl (hash: +MOV5LRfFqW4nOga+4DPcGOV9KGawej39H55oYZ8hNM=)
2: gWBn1z5wJ573-A_JCrTWoUMVcwU.roa (hash: eRnLQ0R/etEfmVAViRE9PujI2pbJzVSTqcsk+ucvQDM=)
3: gf-ztZnGBMD3gis8NYuG9N92sfw.roa (hash: ehCASISZ7Fk/s7piTjFKUNtpfPH5xpu2BhLg9f7INf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:20:7b:03:4a:20:e5:81:16:13:b8:9a:68:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: May 13 17:00:23 2025 GMT
Not After : May 14 17:00:23 2025 GMT
Subject: CN=0a97d3edb81ffb535f6358e853c57b10932af0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:fa:83:33:41:a9:8f:91:53:1a:e0:6f:81:
ee:de:a7:f7:4e:e7:1d:1f:54:92:05:f3:68:4a:c9:
31:49:0e:b0:09:87:80:2a:07:73:34:42:a8:1e:3a:
d6:94:98:d6:7d:41:9e:ba:de:db:5a:6a:ee:d1:0c:
ca:b3:5e:d0:61:7a:99:6e:98:3b:9f:99:b3:cd:ac:
6d:ab:83:5a:eb:29:dc:1f:40:c1:9c:48:65:8b:27:
f3:fc:d2:aa:4f:ce:26:88:01:9e:98:a8:bb:07:ee:
9f:8b:ea:94:c5:9f:5a:e6:82:53:f4:f5:ad:73:68:
13:72:6e:b2:e4:c2:ee:05:ee:96:23:94:1c:d7:32:
57:dc:8e:d1:eb:b5:7f:3b:c5:39:79:2a:28:bb:07:
86:4c:6e:91:9d:92:88:6e:44:83:b1:e4:31:7b:db:
38:46:81:85:44:72:81:d6:9e:7b:03:68:e8:66:d1:
dc:f4:07:e1:48:20:ea:51:4c:b4:d3:36:b2:60:0d:
6b:b4:23:fc:84:d2:2c:dd:2f:61:5a:0c:e8:35:4a:
14:4f:94:59:ea:9d:58:a8:aa:81:c6:04:d9:dc:eb:
0a:fa:da:f4:a5:4f:80:ac:b2:22:da:20:89:c3:10:
e3:1e:9b:26:76:6a:4e:37:1f:36:75:0b:7d:aa:3e:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:D3:ED:B8:1F:FB:53:5F:63:58:E8:53:C5:7B:10:93:2A:F0:D8
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:ef:50:18:81:83:c1:11:71:35:3b:93:de:0e:96:b1:fe:
b5:9d:b8:35:71:4e:55:4e:45:0b:5d:63:94:6a:7a:1a:74:20:
70:df:03:8a:67:c5:2c:8b:47:9e:32:dc:2c:35:fe:90:6d:da:
1a:cc:62:ed:82:0e:e6:40:3d:28:8c:4f:7f:af:0a:16:73:32:
f0:25:0d:3c:14:0f:a7:30:ec:8d:a6:36:89:b7:e3:1f:58:9a:
71:e4:17:44:99:b1:91:2e:2e:b6:bc:4f:f1:b1:39:21:c5:99:
ae:cf:c7:44:25:10:6c:77:1b:b2:d6:4d:ed:a5:92:19:b3:53:
7e:b2:7c:21:66:8f:da:ea:80:11:28:a7:f6:e2:27:79:d7:eb:
43:3c:d4:73:20:38:14:88:22:17:8c:46:97:5c:aa:ca:c0:0c:
d7:31:5b:d8:fd:31:cb:6e:a9:b5:f3:96:4d:c5:10:b9:e7:d3:
22:2e:b2:4d:19:80:28:8a:d9:94:ba:83:87:d7:bd:bd:62:4d:
9e:50:be:64:04:76:e8:51:08:4f:ad:b2:17:d1:a1:73:ac:14:
44:d7:c0:78:1d:92:84:dd:1d:88:59:46:af:d7:7c:9c:11:0a:
56:a5:e6:78:aa:d4:09:e1:f0:48:d7:12:84:b5:0c:76:04:68:
34:c0:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:17:02 2025 by rpki-client