Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: KeWda1hdDmD00jcrNmInldSGEE4RTyTKyvu4pRi6qW4=
Subject key identifier: FC:8C:88:5A:F8:39:73:11:63:0B:1D:D4:96:D3:C8:DE:D6:45:9E:F2
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0196A6F88504288163115EEA32CBC5248ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 0FF3
Signing time: Tue 06 May 2025 19:00:26 +0000
Manifest this update: Tue 06 May 2025 19:00:26 +0000
Manifest next update: Wed 07 May 2025 19:00:26 +0000
Files and hashes: 1: WntehPztUAsCnfsYWJyPGRUsUHM.roa (hash: 5/L8DbJ4CG3bN8z8g844cMQvNk+i0ElV2AgHgE9q718=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: cXy0YzmQG8l0x2fDS8xthbUhffZlS/Mf/oOuzEJTvmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:85:04:28:81:63:11:5e:ea:32:cb:c5:24:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: May 6 19:00:26 2025 GMT
Not After : May 7 19:00:26 2025 GMT
Subject: CN=fc8c885af8397311630b1dd496d3c8ded6459ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:ab:9d:7d:6e:ae:1e:40:ae:0f:d1:61:6b:
2a:2c:69:ee:59:07:65:d4:3d:a8:ea:ab:1c:b1:89:
f4:a9:7a:17:a0:26:8f:d2:39:2d:24:cb:2b:28:ec:
d0:aa:70:23:3b:c2:5e:f1:a9:07:d3:0e:92:e5:f4:
91:32:51:ed:c4:40:d6:d1:b8:f8:2b:dd:80:66:ca:
83:9c:8f:99:15:cf:aa:81:d0:a7:9d:86:f2:c5:da:
9e:a5:10:b0:04:95:9f:92:46:9f:a8:c4:e3:08:f1:
d3:ac:07:27:e1:23:cf:31:ed:93:77:7d:6c:98:54:
e6:d6:12:ab:a9:0d:a1:60:1f:66:35:a2:2e:c3:62:
b3:12:32:c7:25:33:a3:6b:f5:2c:65:a0:b4:89:8c:
ba:4f:c9:da:a6:1b:ed:03:0d:f6:2c:de:a8:69:e8:
16:56:59:0c:26:53:69:ee:e4:54:84:d3:5d:96:e0:
04:9a:f4:af:c8:cf:80:d5:cc:5d:be:04:20:72:53:
64:d5:44:90:69:de:ff:af:78:7c:a0:aa:c5:83:59:
22:98:02:f7:12:d0:fe:0e:b6:62:bd:c7:84:0e:6f:
7a:55:2c:96:db:d5:23:9b:45:73:6b:7e:f2:65:1a:
e8:54:2f:03:cb:e0:62:25:ed:f4:02:d1:b8:77:aa:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:88:5A:F8:39:73:11:63:0B:1D:D4:96:D3:C8:DE:D6:45:9E:F2
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:2c:f4:7d:ca:cd:6d:a1:42:42:f7:a1:8f:70:8b:49:f5:
d9:da:cb:24:13:2e:e4:ac:8d:7f:cb:e3:f8:01:b9:23:6d:97:
81:a2:a0:cd:14:34:9a:95:a4:46:52:a4:29:68:7d:13:b5:c8:
ed:45:45:9f:0c:75:b6:5a:62:b1:52:7e:1b:61:88:61:f5:1f:
ac:e2:b5:57:e6:5c:97:ef:9f:1d:69:32:78:11:b1:e5:ad:e6:
1a:5d:85:03:75:8a:ac:eb:be:90:5a:92:4a:d5:6b:05:79:ae:
49:0d:5c:fd:ef:e4:5a:3d:65:89:8a:c6:2f:63:fe:77:9e:88:
d3:b9:2f:fc:be:65:73:11:dd:1b:9a:96:16:e1:70:e4:da:5f:
b0:7a:4f:68:18:8c:b7:3a:01:d4:ad:c3:de:ee:1e:fb:af:e9:
45:63:3e:04:63:d4:25:b3:22:7f:10:a4:0c:23:e0:ff:5f:84:
1c:50:5f:d0:2c:b5:bd:bc:3b:c0:f9:fb:46:83:ee:05:d2:77:
41:7d:e3:a3:b4:1b:e5:fb:fb:cd:96:be:c1:3a:43:75:b3:4f:
74:2d:1f:f3:11:11:7c:21:ad:dc:e1:a5:56:06:1a:34:6b:0a:
fb:ca:ec:cb:b1:34:12:aa:73:f4:f1:de:2f:ed:59:80:df:d4:
2f:7b:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:43:50 2025 by rpki-client