Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: zrGB3SqI0nuDan1RZzGPYtlyGKdiJE6WGxktP4oQKBg=
Subject key identifier: 5C:38:EC:2F:94:DE:8C:D4:A4:B8:8F:32:6F:E8:67:18:2D:33:C9:C3
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 0196C9847CBB1BA12CDD60C146E3B39ECC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0D94
Signing time: Tue 13 May 2025 12:00:25 +0000
Manifest this update: Tue 13 May 2025 12:00:25 +0000
Manifest next update: Wed 14 May 2025 12:00:25 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: 6zvMkqjECSZ4ECf/HynlCkhAAnQxQxzhtzOPk9+qa1w=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:7c:bb:1b:a1:2c:dd:60:c1:46:e3:b3:9e:cc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: May 13 12:00:25 2025 GMT
Not After : May 14 12:00:25 2025 GMT
Subject: CN=5c38ec2f94de8cd4a4b88f326fe867182d33c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:d7:fc:3d:89:3e:6c:ec:52:cf:54:93:2f:
1e:9a:6a:ae:fc:a7:96:15:c5:b0:1a:59:ed:c1:da:
e7:13:5c:cd:a1:50:bc:0e:dc:7d:76:2a:e9:d3:7e:
63:ea:df:eb:f9:b2:99:78:1b:0d:8d:96:f2:23:ca:
c2:fe:7c:da:c7:15:d9:98:8f:91:09:71:f4:a6:bc:
59:bd:a6:e9:bc:1c:83:27:00:38:60:77:3c:bf:a1:
3a:ce:48:65:0f:39:21:71:bd:6a:17:ef:da:d3:6b:
60:36:bc:13:11:c2:98:15:a8:74:24:06:74:7f:b4:
3c:cc:f4:27:84:8a:f3:47:83:5c:56:07:2a:f1:a0:
58:62:3b:13:83:43:55:26:d2:29:cc:9e:17:f3:f7:
25:89:4d:44:32:31:07:ab:45:48:b0:c4:28:71:c0:
44:1f:e1:a7:8f:83:cd:2f:3b:e8:4d:3d:5b:da:21:
d7:6e:48:59:b8:b0:aa:9e:2f:e6:c4:a4:8d:51:df:
b2:ba:2b:bf:36:72:bd:6a:ac:a5:be:71:a2:e5:1e:
38:44:94:22:c3:88:18:de:ad:8c:1f:56:0c:6b:24:
e3:ec:4f:96:ce:a6:c2:06:e1:61:5d:64:1a:f7:0f:
f3:7e:85:c0:53:c1:68:c8:2b:ac:35:17:d5:29:1a:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:EC:2F:94:DE:8C:D4:A4:B8:8F:32:6F:E8:67:18:2D:33:C9:C3
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bc:8c:89:21:89:9e:35:10:82:eb:93:fa:2e:5e:ec:5f:51:
13:60:92:79:f6:36:7f:70:f3:ca:48:ea:88:2a:42:6a:9a:9c:
59:2b:eb:76:91:18:1c:f8:4d:df:8d:5b:9c:73:df:3e:7e:5f:
43:2a:d8:dc:b7:ac:22:b6:35:43:a0:eb:23:9c:e8:fb:14:f0:
63:3f:a9:47:a7:99:ea:d4:70:b7:81:de:5a:66:4b:c8:23:a4:
e9:44:04:23:16:93:2f:0b:1b:58:37:91:f4:76:fb:d8:22:86:
76:26:79:3a:86:d9:5d:f7:dd:83:db:0b:7d:bd:22:e1:d0:2a:
b1:78:e3:a2:0a:de:13:6a:f5:51:67:6c:61:cc:bc:7d:dd:8e:
3c:da:14:c4:c9:b6:86:b3:b6:8d:54:bb:ff:9a:c3:2c:49:2b:
c7:92:2b:f4:2a:3d:7c:95:0b:47:e2:40:46:c0:a1:40:4c:42:
9f:33:07:fe:57:81:17:e2:47:a6:51:cc:05:14:61:13:76:e9:
b8:59:3a:15:52:76:f6:1f:9f:57:a2:9b:8a:6c:6a:14:46:99:
86:2b:34:81:70:06:32:69:65:77:35:bc:51:5c:74:09:8c:c6:
3a:2a:f0:0b:ad:c9:35:68:56:df:e4:e1:b4:19:aa:17:13:7d:
68:6b:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:23 2025 by rpki-client