Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: Bzz1/J3fuxpz+xmnOiQFDGB3zaMytpxSnrRLj8Qh06E=
Subject key identifier: 94:8E:11:EE:C3:11:F0:51:41:0D:0D:26:3B:9C:F7:AA:63:48:6C:F1
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 01967F461AF4EA8C532C91D5E594BEFFC0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 02:00:22 +0000
Manifest this update: Tue 29 Apr 2025 02:00:22 +0000
Manifest next update: Wed 30 Apr 2025 02:00:22 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: Qo2v0twfGthAgVy7KO/yoYfsojUTcgnm9o9g96M4wVI=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1a:f4:ea:8c:53:2c:91:d5:e5:94:be:ff:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Apr 29 02:00:22 2025 GMT
Not After : Apr 30 02:00:22 2025 GMT
Subject: CN=948e11eec311f051410d0d263b9cf7aa63486cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:eb:53:68:79:4a:d0:66:e9:5e:fc:45:82:
84:a2:8a:73:aa:21:36:ed:f9:a0:85:32:39:af:c4:
3e:c2:ea:36:03:0a:13:b2:d4:22:2f:43:b5:f6:09:
16:39:a0:f6:aa:5f:8c:ca:1f:80:0e:8b:05:7c:a5:
d2:19:21:26:7c:57:ea:85:3c:a8:42:74:59:af:ad:
15:e6:52:43:83:50:40:82:b9:d2:1b:8d:aa:f2:55:
a9:4e:17:03:64:78:7d:aa:3a:6a:95:fd:2a:b3:8e:
ad:42:90:4b:3c:cd:6d:19:69:11:a6:c7:8f:f5:82:
3e:4d:8a:76:f3:b1:94:ed:cb:b6:15:77:2b:33:ad:
80:23:22:c6:3c:54:48:c9:26:62:1f:d1:77:07:40:
3c:dc:bd:e3:e3:f2:d1:7f:e0:9b:7c:d4:85:cc:86:
45:5d:aa:e4:ea:96:64:87:9c:52:e6:4b:c4:24:c3:
15:72:1b:05:03:20:d7:0e:bd:78:a1:90:05:12:8f:
e8:9b:bb:58:26:b9:57:19:d3:48:cd:a7:b5:ca:7f:
73:28:30:80:4a:b4:19:67:82:66:12:38:2a:86:fb:
49:2d:4a:d2:50:a1:51:a4:b7:ef:51:56:d0:94:cd:
bd:78:5c:11:a7:3a:5e:24:41:3f:22:76:32:ad:10:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:11:EE:C3:11:F0:51:41:0D:0D:26:3B:9C:F7:AA:63:48:6C:F1
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:00:6f:dd:2f:bb:23:bc:06:11:1d:c3:42:e9:2a:fb:c6:
87:3d:8e:a3:72:d2:34:d2:ed:c1:43:22:59:9c:2a:e8:b2:15:
48:83:0e:1f:fe:9f:b4:d1:43:0e:09:73:ca:99:2d:0c:1e:76:
19:21:3e:74:65:6d:58:c2:c1:02:95:b0:67:60:88:b3:44:18:
10:85:9d:d0:79:48:a7:8c:0d:19:a4:3b:95:04:ef:bd:a6:4b:
79:23:b6:a5:cc:6f:42:ae:cc:c7:3a:6a:80:9c:6d:77:e4:ef:
f3:81:d4:e2:81:30:1b:a8:14:c8:ee:eb:7e:5f:9f:0a:0f:4b:
63:6e:4a:df:55:55:47:41:8c:70:36:a6:79:14:9a:9d:1a:bb:
22:07:71:39:e2:7e:f6:4f:a4:9f:7f:2b:ee:00:a2:af:91:9e:
63:6e:28:5c:d7:04:34:8e:b9:bd:42:87:51:c6:d7:8d:02:c4:
17:d5:3b:06:3e:2b:7d:ab:79:65:ac:ea:03:15:b2:b3:1e:c5:
d3:41:a8:b5:b8:c1:56:b7:74:c0:4f:8c:c6:47:2a:b3:b2:5a:
0b:aa:35:12:2f:ab:e7:74:24:dc:f6:cc:d2:1e:ee:09:b5:f6:
ff:1b:11:18:37:48:2c:07:be:eb:20:71:01:c1:a9:67:07:88:
69:1c:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:47 2025 by rpki-client