Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: EQ1SZbIxxYT2fZg1+fNrpW4Ew62YcH9b9i+Yg8BpgZc=
Subject key identifier: 0C:48:90:4B:DD:83:2B:C6:64:0D:CA:F2:32:A4:11:BE:54:8D:0F:AE
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0196989847803CD111C2696ED2A30D7BDDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 00:00:38 +0000
Manifest this update: Sun 04 May 2025 00:00:38 +0000
Manifest next update: Mon 05 May 2025 00:00:38 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: xfeT0yy7WUXhNwGwxK1XsldsErDT0KKrdW/XrBMstGk=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:98:47:80:3c:d1:11:c2:69:6e:d2:a3:0d:7b:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: May 4 00:00:38 2025 GMT
Not After : May 5 00:00:38 2025 GMT
Subject: CN=0c48904bdd832bc6640dcaf232a411be548d0fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:c1:85:d6:ff:bf:12:43:38:fc:fc:7c:b8:
c3:60:5d:c9:3b:27:b7:a8:c4:b4:38:1d:1a:0d:1f:
22:e3:da:74:15:12:aa:c7:1e:00:c9:85:d5:70:64:
9d:4c:8e:c6:b1:da:47:bd:60:23:02:ed:b9:19:c2:
c4:8e:2b:2b:4e:c3:c8:b9:38:4c:66:d3:ce:e8:55:
2c:34:e0:3c:53:df:c4:95:10:0f:93:1e:17:de:3f:
0f:9a:d0:25:98:5c:e8:ee:4d:d9:89:e6:91:d6:3d:
9b:82:6b:f1:40:cf:da:12:e4:6c:0b:f2:30:70:b5:
e4:0f:25:2e:f3:29:42:4d:4a:20:e9:c6:00:d9:e1:
4b:e9:ae:6a:d9:6f:1d:79:85:ce:50:e7:97:b7:33:
90:2a:94:7b:56:e9:f4:cd:7d:21:10:12:ba:aa:87:
87:21:02:8d:df:43:99:d2:db:9d:9e:d5:d3:56:d7:
1a:cd:89:5b:c0:59:7d:59:4f:d7:ab:d1:76:0e:da:
aa:39:7b:ad:2f:e7:83:8d:32:3f:4c:4d:d2:87:6c:
4f:f8:b7:f4:2c:d3:67:9f:ad:dd:6c:f1:38:fa:5d:
e3:75:e4:84:bf:3a:f4:2d:66:fb:9c:02:71:68:a9:
22:6c:1f:73:90:a9:27:d1:71:15:08:c7:37:40:ea:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:48:90:4B:DD:83:2B:C6:64:0D:CA:F2:32:A4:11:BE:54:8D:0F:AE
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:28:d7:db:8b:a8:00:9e:d4:54:f3:18:c9:73:16:04:8a:b9:
1d:d9:30:0a:d9:73:0d:d3:4d:cb:e7:1a:98:35:93:1a:1f:90:
39:4d:96:d6:ea:25:ac:7b:b5:1a:0a:af:8f:a3:00:73:f0:dd:
70:47:d3:ca:f4:56:dd:b5:23:0a:74:14:55:be:f0:15:bb:fe:
dc:c4:e2:3e:b0:30:c3:fb:75:67:2b:1d:3a:ca:6e:23:7a:a5:
d9:87:66:3f:c0:bd:4f:39:f5:17:72:8b:91:7f:be:ed:c1:89:
2c:2e:44:d1:47:f1:23:51:2d:85:43:62:ba:35:82:17:80:57:
24:a9:4b:49:3f:88:2a:32:51:a7:f1:ff:41:fd:01:66:bc:6a:
a5:b5:0c:88:43:fd:5e:3f:4e:c3:9f:21:a6:05:35:e3:64:b6:
40:3f:20:e7:37:72:94:cc:c0:48:cb:26:53:bc:1a:4e:13:d0:
f7:a5:e1:32:1e:b8:22:50:7a:79:d6:a1:99:75:c5:72:d6:09:
d3:86:bc:d6:f4:c9:cf:bd:a7:55:b7:2f:ef:8c:8a:a2:f2:fb:
42:70:09:93:1b:b8:cd:6f:90:ed:22:a7:10:35:a5:4c:44:63:
b0:27:62:71:55:51:f3:12:c0:64:e6:8e:65:07:20:49:0e:5a:
77:92:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:26:42 2025 by rpki-client