Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: l6TUs98y3uh/omiR0pE/ITG5tvZFLD+Y3gos89BmR64=
Subject key identifier: 0A:20:A3:BC:9F:F0:59:DE:BE:03:DC:93:41:2A:4F:93:9C:60:72:D7
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 0196BD80D92BA0719F6F66044D8EAFD96B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0E20
Signing time: Sun 11 May 2025 04:01:00 +0000
Manifest this update: Sun 11 May 2025 04:01:00 +0000
Manifest next update: Mon 12 May 2025 04:01:00 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: ZU7mcbf1LiCXV1T0VVSloXXTbhc4gICaCGTqfXw5AQ0=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:d9:2b:a0:71:9f:6f:66:04:4d:8e:af:d9:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: May 11 04:01:00 2025 GMT
Not After : May 12 04:01:00 2025 GMT
Subject: CN=0a20a3bc9ff059debe03dc93412a4f939c6072d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:25:48:2c:59:ab:21:aa:23:55:e8:ae:3c:
1f:4f:25:16:da:2b:e0:b4:6f:10:04:7e:a1:c5:0f:
2c:8c:66:49:dc:76:96:bd:b6:e3:42:f8:8e:b3:7a:
35:97:5f:cd:89:f1:80:c8:8b:ca:35:b4:5a:2d:5b:
32:08:35:84:79:aa:24:81:5f:a6:a5:8d:d3:a9:18:
5c:ef:cd:2a:82:1e:b6:28:61:3f:33:e9:c2:c6:6e:
1c:54:23:c0:e2:73:cf:75:cc:fe:3b:70:97:c3:fa:
be:b2:0c:7b:ee:d5:66:51:e5:7b:80:ef:4f:cd:e0:
8c:3e:2b:35:d2:ab:2b:91:ec:ee:f7:e4:4d:cd:d2:
1a:ee:c1:87:8a:71:e7:6d:df:27:9f:bc:86:a8:92:
c6:a8:40:39:8e:6d:1d:b0:58:80:00:16:98:68:35:
a8:9e:18:3d:36:42:4d:4e:f6:6e:5f:98:a0:e5:39:
8f:ba:90:13:c3:58:38:61:d3:b4:f0:09:78:9c:88:
5b:75:7a:8f:c3:c0:9c:d4:09:89:05:df:07:fa:39:
ea:72:75:88:1a:89:88:41:f3:a1:ca:11:22:bf:d2:
a5:68:98:fb:fb:7b:28:7e:38:3d:51:0a:6b:68:a8:
d7:cb:15:5d:89:7f:95:fe:6b:65:7a:36:e7:65:ec:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:A3:BC:9F:F0:59:DE:BE:03:DC:93:41:2A:4F:93:9C:60:72:D7
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:8b:e4:1a:7a:1e:ae:9f:2d:1a:04:a0:79:c4:21:15:5b:
10:9b:58:10:0c:2a:b7:01:77:36:80:ce:dc:c2:00:4c:8f:75:
19:49:54:c8:ac:3f:a8:33:3f:1a:f1:e3:42:0a:3d:81:7e:a1:
f6:77:9d:69:a9:71:6d:41:a1:ee:85:09:ad:af:a7:76:54:38:
26:7b:4b:a1:02:8c:9e:9f:f4:ef:ed:06:ff:49:1b:49:b3:f7:
99:ab:6e:2d:cf:32:94:0b:2e:82:6d:91:4c:2e:f8:b8:c8:b5:
01:84:5f:b3:05:9c:0c:2d:0a:38:1d:c5:1e:ab:72:d4:c2:15:
a4:d6:75:b1:3b:05:d3:17:6b:5d:13:2c:e8:fd:35:b3:84:57:
a4:3e:c0:39:67:58:76:a4:1f:c1:4e:c6:be:0b:cb:9a:75:a2:
85:24:e5:1c:20:88:03:31:bc:c5:46:5c:a1:d9:5b:96:58:b8:
94:7f:33:68:3f:9f:1c:7b:87:9e:e2:9a:06:51:fd:4d:6c:60:
a3:54:b9:d2:20:a3:1b:97:d8:19:aa:39:05:fc:dc:90:b7:82:
32:87:74:5b:1d:2a:53:33:c2:ee:80:9c:55:4b:10:2e:18:7a:
5a:5e:a9:a8:a0:7a:f3:2c:e2:79:22:86:a9:18:64:8e:cc:fd:
5c:22:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:36:11 2025 by rpki-client