Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: 45Nl3jQxPPQvYvrDeMjxqF0wa1AXPhVvgXr3HJwUmL4=
Subject key identifier: 34:CA:8A:EE:85:3B:1F:54:89:3B:C1:8D:F9:40:69:CB:9C:90:4B:7A
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 0196726615A9F9B923F866B7B0AB61FEDACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0DD2
Signing time: Sat 26 Apr 2025 14:00:14 +0000
Manifest this update: Sat 26 Apr 2025 14:00:14 +0000
Manifest next update: Sun 27 Apr 2025 14:00:14 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: i8cutB7au5iTiQx9T1CH4t+TrGQqPNo1/Du1WoyyFis=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:15:a9:f9:b9:23:f8:66:b7:b0:ab:61:fe:da:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Apr 26 14:00:14 2025 GMT
Not After : Apr 27 14:00:14 2025 GMT
Subject: CN=34ca8aee853b1f54893bc18df94069cb9c904b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:14:1e:89:7c:ca:0e:d3:10:ae:fd:70:f5:
64:11:7d:90:3f:8a:26:35:30:62:58:fb:0e:3e:c3:
36:0d:01:e9:d1:3d:7c:41:4f:35:f3:b7:a8:f2:ef:
8f:45:c6:f9:03:ef:57:69:ec:fc:5b:3b:e7:22:8e:
4b:17:b6:ac:7b:e0:54:12:f7:de:f6:a7:51:3f:fa:
ac:7c:3f:72:88:eb:44:69:8d:49:15:ee:ab:dc:3e:
9a:8e:59:6e:61:f9:83:2f:99:d1:86:fc:38:a7:1b:
12:48:c2:43:d8:39:25:4a:a6:ce:80:f8:e9:12:35:
de:d3:cf:80:5d:91:c3:aa:1d:de:db:d7:97:8d:e6:
9d:ee:da:38:e6:a9:29:a0:dd:3b:56:ac:ef:07:2f:
91:1f:5c:7c:17:b9:43:64:dd:bd:9a:49:e5:fc:35:
01:de:ac:4c:40:c7:9d:4f:15:fa:71:70:45:eb:ac:
3b:c7:56:15:ea:23:42:72:bb:12:38:68:bd:79:fa:
4f:cd:3a:9d:5d:23:3c:be:65:e7:36:13:ff:64:62:
ee:7c:aa:40:33:2f:c3:5d:b8:bd:ae:a4:4c:1e:f0:
f1:33:25:37:6d:17:d6:ea:51:33:7c:b9:e6:c7:71:
b5:2f:f9:cd:01:2a:c1:a6:e3:e9:13:2e:4d:98:d6:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:8A:EE:85:3B:1F:54:89:3B:C1:8D:F9:40:69:CB:9C:90:4B:7A
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:04:78:fc:27:2d:51:65:2e:c2:7f:55:19:7d:06:a3:df:
99:6f:ea:9f:ae:ae:fe:ec:ad:97:3c:f8:e5:59:a7:50:bc:10:
45:43:4e:6e:36:da:29:2f:82:43:b0:52:74:23:11:d2:ff:64:
fa:07:1f:dc:dd:93:8b:ab:88:a8:e4:b5:36:64:50:6e:87:d6:
0d:89:c4:63:6a:b5:5e:c5:91:9f:0a:d1:c5:d0:f3:6a:d0:2a:
e7:d1:66:72:00:d6:30:29:6e:1e:14:eb:ef:61:96:bb:e2:52:
fe:96:ab:ad:3a:90:0a:fc:db:c3:9d:43:f8:3a:61:ef:31:35:
98:f2:38:83:a0:c3:ec:33:5b:02:1f:01:9c:43:a4:d6:68:17:
f1:27:16:96:33:60:63:47:3a:7a:95:28:d3:0e:b9:cc:67:34:
ba:e2:e6:a5:86:e3:98:e0:62:36:a1:b9:24:c5:b8:00:39:8f:
5f:db:e0:f6:1a:5d:bf:a9:b0:a6:60:39:6d:bc:9c:81:ee:7e:
25:9d:61:af:95:64:9b:41:5f:60:d3:e2:3f:bd:11:fa:91:96:
2c:b3:80:df:d9:6a:ea:bc:5a:ba:92:76:b7:97:74:4c:4e:86:
13:5e:14:e4:d4:ea:00:fb:a8:ea:75:f5:b2:1e:41:5e:f3:44:
a6:3d:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:57 2025 by rpki-client