Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: mG8t9jC94aneiTag2fgQjmSgl7zZa8hzTqEJIajgoPM=
Subject key identifier: ED:D9:20:53:83:7C:4C:7A:39:13:3A:6B:88:EB:83:C9:49:F7:33:73
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01968021F14FA6593947DBD57E1E8BFC1294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 06:00:30 +0000
Manifest this update: Tue 29 Apr 2025 06:00:30 +0000
Manifest next update: Wed 30 Apr 2025 06:00:30 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: DQ1tehP46ZKi7g/qs3wMvpRxMuQFMC+DhR72/q1fyJU=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:f1:4f:a6:59:39:47:db:d5:7e:1e:8b:fc:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Apr 29 06:00:30 2025 GMT
Not After : Apr 30 06:00:30 2025 GMT
Subject: CN=edd92053837c4c7a39133a6b88eb83c949f73373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:31:e1:d0:5c:46:10:b3:ee:d8:e5:d0:54:
ff:d4:24:80:0a:0d:c4:c9:7f:9b:67:6d:7f:52:10:
ec:36:e9:e4:bb:3d:d7:b2:bc:50:d1:39:21:cd:6f:
cf:47:e0:83:a6:52:5a:d2:d6:72:a9:6a:bd:55:e2:
36:3a:2f:cb:bf:5e:8c:b6:d1:a1:f3:7e:56:bb:be:
e4:e9:ad:66:e9:c4:4b:9d:84:f8:e2:e5:c4:2b:36:
40:8c:c8:bf:16:92:36:7b:ad:aa:ae:d8:7d:61:b4:
c4:57:6e:35:11:b7:84:66:19:8a:90:ef:97:21:27:
08:68:2a:dd:fb:84:ca:e5:17:53:1f:73:14:05:02:
6d:c1:e8:fc:ee:7f:c3:37:7f:8c:83:2f:c9:35:0f:
fd:ce:10:ce:cb:46:16:ec:6d:66:d1:e7:59:6d:0c:
76:a4:45:b1:1b:d4:1d:61:a2:cb:1e:88:ac:16:c8:
42:11:76:4d:66:70:d9:f8:0c:e4:61:ce:1a:eb:88:
c7:67:52:6c:39:c1:ad:51:1d:4f:4d:e4:24:00:94:
b4:1e:b1:cd:36:67:43:e5:d1:f3:ff:07:94:a8:a6:
0d:50:2f:a1:66:01:36:a1:34:e7:1e:da:11:e2:ff:
90:ed:a4:a5:73:17:58:a3:aa:54:12:15:85:34:87:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:20:53:83:7C:4C:7A:39:13:3A:6B:88:EB:83:C9:49:F7:33:73
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:05:5c:f5:b1:54:a7:c9:39:c3:ad:5a:95:56:f8:80:f7:2f:
22:ce:e5:22:df:65:89:99:8c:73:c2:64:c9:a2:f8:be:f6:c7:
8f:40:01:c2:b2:e6:74:3f:a6:85:d9:3a:a1:53:da:8d:b0:e5:
9f:c3:90:63:fb:e5:55:f1:1f:5b:86:8f:99:79:60:43:f1:32:
15:1d:d7:70:9d:03:7f:34:94:1c:8d:c1:e0:bc:0e:af:30:16:
fe:c8:19:99:f3:92:d8:fc:e6:4b:00:0d:73:a6:a5:0a:ca:9e:
a0:4f:78:47:45:d3:64:e1:4f:71:19:06:52:d9:64:90:d5:ec:
7b:82:ca:a8:03:ee:0e:ef:88:15:01:2d:bb:bd:93:17:44:9e:
d3:3d:15:b9:e4:9d:db:8b:f4:13:7c:1f:ea:1d:cc:ea:2c:0b:
e4:a1:e5:03:11:1a:76:48:39:49:37:21:c3:7a:42:1d:ef:e8:
b1:fa:f5:5c:de:c2:54:b3:0d:b2:b9:f3:c8:3f:e1:72:d7:82:
80:0b:d2:4a:26:77:75:fd:6f:e3:81:63:dc:75:d6:c4:ff:99:
cb:68:a7:f7:90:09:aa:bc:14:34:c7:16:30:ed:fb:a7:ad:07:
93:fb:08:fc:30:cd:dc:f5:a1:06:48:48:58:68:0d:2f:d5:ff:
9b:3a:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:20 2025 by rpki-client