Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: 5VJzKBE/jCnjWAXnxyKh1BUItB78804ipwIMqgEd318=
Subject key identifier: B6:3E:21:3C:D1:35:B1:36:D3:BE:02:67:53:9F:96:9B:8C:1A:CF:62
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0196AD3195F424A92BEE3A17C6FA8071080F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 0582
Signing time: Thu 08 May 2025 00:00:29 +0000
Manifest this update: Thu 08 May 2025 00:00:29 +0000
Manifest next update: Fri 09 May 2025 00:00:29 +0000
Files and hashes: 1: 7DhaaEuOtOm2YkH-T6_b3X16mQE.roa (hash: brxCGHC3UPKZvLFobxYv0EMKJ38nxnYf9OdApkFjBd0=)
2: 8rC8qdt5a2u-NnBIW_WkKPveb4s.roa (hash: nr8axlZxRzfVtcHW0piztPPriufN5wxeVAb83AKIYoE=)
3: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: wb/R18NFjMYfLeW6LC2AHe5S7XLrs2jYaNtQSXMb1zM=)
4: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (hash: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=)
5: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
6: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
7: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
8: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:95:f4:24:a9:2b:ee:3a:17:c6:fa:80:71:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: May 8 00:00:29 2025 GMT
Not After : May 9 00:00:29 2025 GMT
Subject: CN=b63e213cd135b136d3be0267539f969b8c1acf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:50:0d:80:1d:5c:e4:5a:4d:92:9e:b7:73:
27:0a:9a:ac:6b:33:ed:4c:5b:c4:62:66:d9:7e:be:
c5:d4:67:73:b6:87:2e:f2:2c:6e:53:19:03:33:56:
ca:32:cb:25:2e:a2:5f:9c:24:12:1f:42:60:ae:eb:
1d:88:dc:04:8b:df:f4:6f:f3:1d:73:7f:d4:6d:aa:
10:f1:8f:3d:19:39:86:79:6c:d0:fc:98:b0:c6:6c:
2e:32:37:6e:2a:1d:71:e2:d9:9e:92:d1:32:39:10:
f3:84:78:b1:66:f4:f5:b8:37:53:f9:6a:2d:46:d3:
a2:a7:36:82:88:ce:3c:1c:b6:5f:74:ce:c1:4a:b6:
35:f1:09:c3:4e:8d:55:da:fd:6d:8d:56:af:b5:f0:
f8:33:25:64:8b:7b:d0:75:6c:d7:de:d4:db:93:fd:
ef:81:4a:f3:35:40:ed:da:8b:c6:9b:26:71:ad:de:
03:34:47:df:4b:4a:e6:8c:99:94:98:da:e8:f5:63:
80:f0:0b:f5:35:76:ce:62:ce:35:31:81:48:75:90:
57:65:80:00:46:97:f0:d0:67:df:df:f9:67:c8:b7:
79:2b:fa:c0:a0:76:05:b5:ba:96:9f:22:51:cc:74:
72:1b:03:32:30:ca:ff:99:ad:90:5e:0c:a5:18:bf:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:21:3C:D1:35:B1:36:D3:BE:02:67:53:9F:96:9B:8C:1A:CF:62
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0c:e9:d4:29:e8:df:ee:7d:85:d2:a6:a5:86:2e:9b:5c:81:
04:d3:d2:37:3f:af:14:33:2c:3a:69:f6:79:f2:59:7c:0d:21:
e1:95:57:89:ab:43:fd:23:8b:7d:e8:e0:65:ad:74:ab:08:0b:
3b:46:0a:dc:44:ec:2c:22:86:5f:26:45:9b:26:ea:bb:3c:c1:
85:0e:de:8f:eb:48:5a:f7:e2:a7:ab:07:90:40:d8:27:13:fc:
9e:73:03:6a:05:90:2c:4f:cd:b3:49:7c:49:7c:17:2d:cc:92:
22:cc:b4:07:10:37:9d:9c:9b:a9:e5:5b:be:f0:99:aa:10:15:
fe:10:f9:bf:dd:90:c6:46:e3:3a:35:5b:bf:8a:5c:11:5b:47:
4b:3a:98:5f:16:6b:cf:a5:30:d7:dc:17:d1:44:07:85:27:35:
17:6b:bc:28:2f:98:bd:c5:0d:ef:05:ce:7c:7b:3f:09:f9:94:
aa:f8:e3:ed:da:9f:6b:26:1d:af:3d:11:e1:12:c7:95:34:ad:
43:40:f7:d1:a3:eb:e5:56:1f:9e:1c:81:95:c6:bb:55:76:cf:
50:3b:66:51:8c:e9:c2:d3:35:42:16:00:03:bc:a7:79:bc:5c:
7f:b9:d4:54:33:3d:5f:1c:73:24:43:73:50:0e:25:28:05:7b:
36:9e:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:59:44 2025 by rpki-client