Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: QgAWYdrGA++uEpWJVz6GeHaNJ+4FVgS8UgM1k5bwSPk=
Subject key identifier: 5C:CB:82:94:18:22:F7:21:61:9A:B4:A8:FD:07:68:02:D5:B2:D2:C7
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 0196C53B00BCA4C8ABDE5A9637D09B681019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 16:01:40 +0000
Manifest this update: Mon 12 May 2025 16:01:40 +0000
Manifest next update: Tue 13 May 2025 16:01:40 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: wllUGgIhvF54L9kxlHFCdzuvP7NcUXQKq9nfiLG/8k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3b:00:bc:a4:c8:ab:de:5a:96:37:d0:9b:68:10:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: May 12 16:01:40 2025 GMT
Not After : May 13 16:01:40 2025 GMT
Subject: CN=5ccb82941822f721619ab4a8fd076802d5b2d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:ea:a9:1c:f8:fd:53:c3:48:15:f8:e6:77:
25:44:ee:3b:d1:00:4c:05:e1:49:c1:81:1b:5e:e6:
1f:90:5c:93:cc:b0:3b:2d:53:6c:ed:b7:4d:81:79:
d1:73:3d:4e:b2:9f:1f:68:5f:e1:6c:51:47:18:a2:
f2:57:79:2e:45:9a:9e:b8:d4:34:c6:f0:69:da:85:
65:d5:58:ee:79:80:46:30:57:c5:b1:e2:c2:fb:46:
3d:7c:e3:f4:cc:10:ff:dc:fa:51:89:61:23:33:d4:
92:51:21:9f:63:fa:45:64:09:b5:b7:76:09:58:65:
d5:dd:0c:ed:7d:d1:0c:9e:06:de:57:71:f8:0a:d3:
08:3d:10:ec:a5:f9:36:95:78:7e:ed:14:2a:e1:d1:
41:15:ce:c1:68:7a:da:e7:d6:89:13:df:1f:bf:96:
50:1c:8f:a2:ed:e0:f7:31:24:13:49:d9:37:6d:49:
bb:88:55:92:e8:b1:e0:0c:09:28:d7:c9:15:42:9c:
05:69:92:cf:49:f9:75:d0:8c:05:88:50:d1:97:78:
f1:15:d7:b6:cb:6f:7d:cc:89:a3:ce:bd:d1:e7:7f:
5f:b0:1b:6a:4e:d4:ab:3b:27:a0:c2:a9:0b:ce:d0:
d9:63:2e:da:8b:bc:1b:4b:58:01:1a:48:d7:4c:50:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:82:94:18:22:F7:21:61:9A:B4:A8:FD:07:68:02:D5:B2:D2:C7
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:26:2b:c4:b7:35:0b:74:ba:23:98:41:5a:95:68:27:46:70:
19:73:00:2d:41:ad:aa:5d:00:38:be:f6:42:24:8d:98:e0:09:
29:35:46:12:28:49:47:1e:1b:40:e0:27:57:ef:ba:47:e8:1b:
94:86:22:83:27:38:3b:fd:01:45:f0:66:8f:2c:19:97:ea:78:
c7:ad:f6:71:4e:0d:02:0d:40:02:c2:87:c2:c4:8f:18:3b:5f:
b6:1d:1b:af:11:08:a3:d3:ab:96:b9:d3:72:12:ec:76:8a:79:
16:75:b4:bd:da:1c:66:4b:0e:ba:80:1a:93:b0:d9:2e:48:11:
c8:5e:ac:51:aa:d9:ad:44:99:eb:ed:0e:b4:dd:73:d3:26:9c:
65:24:92:06:98:4b:1c:ba:51:96:0f:0a:51:df:ec:cc:38:37:
92:be:59:6c:8b:fa:a8:c0:4f:ba:d1:a8:54:c1:93:64:26:3b:
97:b7:ab:56:b9:a3:8d:61:04:e6:0f:a9:34:7e:8e:fa:aa:25:
67:ae:11:49:f9:50:57:51:c3:fc:33:30:cd:fb:03:e5:61:b0:
f6:50:58:7d:f9:a4:45:80:f0:96:69:be:20:83:3b:bc:5c:b1:
d8:7d:60:69:cd:b3:36:b6:85:38:54:f5:f4:ee:a3:20:28:4b:
d7:92:58:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:37 2025 by rpki-client