Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: 8MwUoVaTLcvH4rrohMvmYqeoCHheKQJTa5TOAQVF35Q=
Subject key identifier: 35:89:BD:68:6A:1B:CA:A3:BA:71:9C:46:D3:58:F2:C7:16:DF:2E:BB
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 01968CCAA373A84B1A3A1F9A6D06CCBA5841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0C11
Signing time: Thu 01 May 2025 17:00:12 +0000
Manifest this update: Thu 01 May 2025 17:00:12 +0000
Manifest next update: Fri 02 May 2025 17:00:12 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: xrynu4jZY2jSJxV5v0/dWqoAY6t14mn8E8pX0o21gvY=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:a3:73:a8:4b:1a:3a:1f:9a:6d:06:cc:ba:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: May 1 17:00:12 2025 GMT
Not After : May 2 17:00:12 2025 GMT
Subject: CN=3589bd686a1bcaa3ba719c46d358f2c716df2ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:f6:25:44:95:ad:d1:95:18:ab:b5:ec:4e:
91:f3:41:66:46:29:e3:42:6e:d2:ed:98:70:36:34:
b3:53:a0:06:33:01:47:61:d7:5f:41:3d:b3:64:01:
fa:db:5f:f8:93:0d:98:c1:42:6b:aa:16:68:be:5a:
26:de:d0:24:d1:16:04:7d:86:06:47:0e:60:f5:35:
19:f4:2c:09:d0:1f:ba:af:b5:03:a7:90:8b:35:b2:
7b:54:1b:c5:21:9e:f1:5d:35:5f:b5:a8:5a:92:ea:
d0:be:01:cb:76:e2:3d:0d:97:c8:c7:7b:23:4c:37:
73:4d:a2:fc:7e:a1:fd:7b:55:67:46:ff:36:2e:af:
4f:ba:d9:f9:41:22:81:a7:54:98:96:7c:3f:b7:f1:
7d:9e:29:64:ef:e2:a8:b0:e9:72:de:8f:6b:6f:1f:
30:5f:77:b8:1a:00:5c:96:0b:c6:e3:6b:c1:d9:13:
ad:e7:9e:a3:92:65:2b:88:ab:0a:12:fb:19:f8:10:
2c:12:bf:9a:97:02:ca:24:e3:fe:01:37:98:9c:2e:
a3:b8:fa:83:66:53:09:9c:50:57:53:92:40:40:bb:
b1:13:0f:eb:2c:2a:c9:39:e1:75:4c:14:e6:51:f4:
b1:89:fa:73:ec:e1:7d:6b:ed:90:9b:42:fb:0a:db:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:BD:68:6A:1B:CA:A3:BA:71:9C:46:D3:58:F2:C7:16:DF:2E:BB
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:4b:25:34:5e:25:08:ac:c4:9f:cd:3a:b1:76:34:f0:04:
6a:05:d2:3b:a1:af:98:cb:71:fa:31:3f:05:48:74:22:a1:fe:
d8:65:3a:6e:85:61:5a:19:93:20:b8:e6:64:74:ea:c0:0d:cb:
14:52:60:cc:89:45:5d:70:66:bc:d2:2d:fc:2a:31:39:7c:ec:
1f:ab:5b:fd:ff:f4:ae:05:e9:c4:62:dc:e1:b7:06:20:a1:85:
47:1f:07:e0:b7:15:f8:9f:e0:6e:27:ed:30:82:59:90:65:a0:
c2:4d:da:21:4c:00:84:17:4a:7d:16:91:88:a3:89:09:16:09:
de:8c:ac:56:fd:b7:b7:5d:23:e3:d7:dd:10:3b:81:97:c7:5b:
ca:b6:6b:88:6a:57:ca:72:e6:54:95:83:a9:18:4d:7c:3e:9c:
25:61:b2:fb:3a:8e:a4:04:4a:51:87:6c:fb:1f:ac:14:b7:ee:
d0:c3:53:96:be:7c:2e:39:0d:9d:60:25:d5:b4:d1:bf:d8:86:
58:ec:f2:30:1e:16:20:03:08:73:9a:8b:c1:e3:c8:7b:87:c6:
09:05:9d:0e:bf:e5:29:20:2e:40:f0:3e:56:c3:29:05:c7:09:
a5:ff:7d:dc:7a:05:12:ac:e7:79:e2:8f:32:96:27:a9:2f:0b:
ea:83:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:26:10 2025 by rpki-client