Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: 1X5MRdjBAEtMJ/pm6HdM2w5fIHrKoHgVQ63dqwHFRds=
Subject key identifier: F1:0B:8C:13:14:2F:F5:D0:C2:90:C9:4E:34:65:D7:93:B7:4D:24:B8
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 01967F0FD3769D47CD234A750FF1BE0F3D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 08C3
Signing time: Tue 29 Apr 2025 01:01:05 +0000
Manifest this update: Tue 29 Apr 2025 01:01:05 +0000
Manifest next update: Wed 30 Apr 2025 01:01:05 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: psQHgr4EW8rk9pH5UZY4LC/Yfhv4UdDVemabL7JSRXg=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:d3:76:9d:47:cd:23:4a:75:0f:f1:be:0f:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Apr 29 01:01:05 2025 GMT
Not After : Apr 30 01:01:05 2025 GMT
Subject: CN=f10b8c13142ff5d0c290c94e3465d793b74d24b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:9d:fb:46:b8:ab:9c:ca:75:b8:2b:c0:66:
74:c3:21:bc:1f:f4:fd:14:99:64:a7:79:5f:89:df:
1c:88:3a:e1:91:b4:cc:e3:69:5f:ad:c6:f1:66:a0:
ed:e2:2f:35:8a:73:03:c6:8e:bb:d9:e7:c9:a9:7c:
ac:e0:a1:65:b2:42:53:27:a1:b6:82:d9:70:d9:48:
82:e1:d5:ba:75:fc:72:29:29:f4:df:6d:70:1d:93:
46:01:14:9c:04:3e:61:41:09:dd:f2:c8:fd:1a:32:
01:2d:e3:c3:7f:80:bf:cb:dc:14:1f:46:c9:38:aa:
7d:15:5f:04:a3:4d:21:15:64:81:23:11:db:dc:c9:
44:0b:b1:7a:bc:3e:a1:69:21:a0:d7:1e:8c:79:d0:
52:64:0a:c8:93:77:21:72:03:56:25:7e:e1:3a:2f:
9b:f9:bf:cb:7d:bd:1b:61:bb:be:6b:ad:d1:14:d9:
44:de:f9:a3:c0:86:c2:ad:ec:3d:fb:5d:bf:a6:1b:
7f:d5:66:f8:57:c6:04:a2:e1:26:ca:d6:fe:04:e5:
18:9f:92:60:fa:c7:38:c5:4b:1e:5a:66:9b:2b:20:
fa:1c:e6:ff:63:b5:52:4f:59:06:72:fa:10:fe:7b:
c8:4f:7f:04:96:93:9b:68:27:32:36:b8:74:24:b3:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:8C:13:14:2F:F5:D0:C2:90:C9:4E:34:65:D7:93:B7:4D:24:B8
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:fb:e4:5a:8f:2b:52:98:e1:b0:6b:c1:74:74:7f:70:98:
1c:3e:ee:3b:e4:db:3b:21:dc:e6:2e:73:50:7d:c2:72:3d:8c:
9d:cb:b3:2a:0d:81:05:3b:7d:34:b3:33:a9:e7:3c:f5:48:a8:
26:c2:57:d9:da:9a:6c:6e:20:2a:85:b0:ac:5c:24:03:e5:f7:
e4:1e:49:5a:6b:cc:a2:36:8b:6f:e0:15:50:20:f4:14:99:18:
81:09:f2:2d:aa:23:dc:46:31:fe:41:10:85:cb:8a:85:ea:01:
b2:88:16:c9:a4:12:10:2e:61:c5:79:44:f8:d9:3b:02:18:78:
6c:ae:7e:c2:83:33:a3:9f:cf:4c:ad:44:53:41:cd:94:1f:56:
38:26:56:87:e9:4d:34:6f:b1:18:d3:83:d2:f2:45:81:0b:c1:
cf:45:bc:d1:ed:a7:4f:01:30:6a:4f:32:51:f1:0b:e5:a7:2f:
cc:35:cb:7c:a4:97:1a:cb:d9:f9:7b:63:77:63:46:cb:65:54:
7d:9e:8b:c7:9c:d0:5a:61:23:0e:e7:da:a8:c4:2b:de:78:8a:
7a:84:85:0f:0a:ab:97:05:52:ec:06:e8:fa:f5:ae:0f:59:98:
fb:a7:3e:79:7d:4f:66:c5:3d:66:05:24:0c:46:90:b7:e6:59:
bf:56:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:11:04 2025 by rpki-client