Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: 2ginnl0R+rw/qL6afDq9eackDa4jvTZxkoCiD5WDQyw=
Subject key identifier: 31:E6:63:7E:0C:4A:F0:97:C5:1A:07:D6:2B:C1:54:1A:54:4A:01:32
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0196CD6167DE4DF8C1F575B81C1DBA41D6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 0B6D
Signing time: Wed 14 May 2025 06:00:34 +0000
Manifest this update: Wed 14 May 2025 06:00:34 +0000
Manifest next update: Thu 15 May 2025 06:00:34 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: GDBL7NZ4VUw4wm64dDBGQgub1YEhmzzADQK2UJMtZ9s=)
2: V-SPBonH-GE9ewbFSO5NODHxd8U.roa (hash: pNam+wwq47C4Qg+Kyg4fIGCIT+ztn7vo1w+K7kvIl84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:67:de:4d:f8:c1:f5:75:b8:1c:1d:ba:41:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: May 14 06:00:34 2025 GMT
Not After : May 15 06:00:34 2025 GMT
Subject: CN=31e6637e0c4af097c51a07d62bc1541a544a0132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:e2:e6:c1:1a:7f:50:17:0b:33:44:fc:5b:
71:a0:65:ae:46:1c:c8:8c:ff:20:11:6b:fa:0c:e2:
7c:63:a1:92:b8:c2:8b:66:41:cc:49:b6:67:7a:cb:
5e:4d:b1:03:cf:b7:ae:fa:a7:f4:c8:be:e1:91:df:
18:29:64:e7:f8:8f:94:f9:e5:39:3c:4e:12:2f:51:
43:3f:d0:3c:14:84:65:50:d7:15:f6:0c:16:22:6e:
ce:f8:ee:6d:6d:76:4e:66:3a:d8:9b:a8:90:05:ed:
72:c1:f3:da:f9:33:01:1c:94:29:2d:35:96:ee:f5:
c1:23:78:bd:2d:d0:e2:fa:3a:f0:eb:aa:1b:79:63:
7e:2d:78:be:4d:e7:70:a7:4f:6c:13:78:ac:4b:5c:
6c:2d:ba:22:d7:48:df:82:4c:99:c9:ef:17:b3:a3:
7e:5b:b9:28:33:15:47:2e:b4:c6:69:8a:f5:d5:de:
72:a8:e6:3a:6e:e1:de:71:81:bc:ce:c4:f3:fc:e3:
24:2c:5e:ef:20:f6:48:99:3c:9b:21:7b:25:9f:c6:
49:fc:71:fd:97:0c:89:8e:2d:3e:10:c5:0b:eb:90:
a0:5b:a7:98:93:8c:40:c0:b0:b1:a2:46:31:d7:ad:
5b:2e:0b:df:20:ac:69:4d:50:3b:09:c1:62:4a:04:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:63:7E:0C:4A:F0:97:C5:1A:07:D6:2B:C1:54:1A:54:4A:01:32
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:aa:ba:25:0d:68:fc:4e:e6:07:4f:f5:41:3c:7b:d2:f0:
c3:b4:e1:35:1a:04:6c:b1:cc:39:a7:42:5e:85:c9:52:64:91:
ac:3f:37:1a:7b:27:04:70:f8:7d:9f:de:f3:55:ce:0d:24:4f:
fd:c6:73:50:57:36:0f:78:07:a4:10:a2:14:11:35:be:a2:4f:
10:c6:98:ef:08:9b:e3:60:2b:3b:e8:12:e9:ac:b6:91:25:fc:
53:df:3c:66:61:33:9f:50:7d:69:57:3e:3e:a2:44:78:92:9c:
b1:88:c9:f0:83:f7:42:da:9b:74:c6:93:f9:80:bb:6c:29:d5:
2b:8d:15:d0:7b:6d:11:3b:b9:07:65:19:51:a5:03:46:b2:a0:
88:ab:7c:00:cb:f2:95:7b:ac:20:bf:f8:cc:94:60:69:c7:4e:
68:91:a5:6a:9c:e4:ba:9a:65:57:73:9f:05:03:68:f9:c6:59:
d0:5e:a5:f7:f5:61:e1:75:14:10:ae:9e:0b:0b:e4:2a:dd:57:
aa:83:b8:55:c0:c9:e1:5f:70:82:ba:de:11:0c:6d:20:a7:bc:
81:cc:31:bc:6f:32:e0:e2:88:21:28:08:b5:51:d8:14:8c:cc:
bf:a9:c2:ec:40:75:f7:16:9d:d8:0d:3b:67:c0:b5:d3:1d:17:
f3:51:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:14:54 2025 by rpki-client