Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: Gtu2FcckxwDvgtxaKMbd8+m+aUeHn/spk7Cvc6Rb3ZI=
Subject key identifier: FC:0C:7C:48:FA:0C:A1:4F:59:D7:5D:A3:E6:0B:A0:45:73:D2:66:F7
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01967BA095FFE819FED879B87E677B3C78F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 09:00:43 +0000
Manifest this update: Mon 28 Apr 2025 09:00:43 +0000
Manifest next update: Tue 29 Apr 2025 09:00:43 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: N44uA35nMz1770PUAFV6fr3KwEXDwYScvDnfOpGUWcE=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:95:ff:e8:19:fe:d8:79:b8:7e:67:7b:3c:78:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Apr 28 09:00:43 2025 GMT
Not After : Apr 29 09:00:43 2025 GMT
Subject: CN=fc0c7c48fa0ca14f59d75da3e60ba04573d266f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:f6:0d:3a:df:8e:c1:25:f5:ca:8c:6a:ec:
43:9d:67:ed:68:0f:21:b1:07:d3:06:34:fc:b3:3e:
c8:79:e3:7e:84:9b:98:92:f8:02:65:ca:e7:1c:57:
ea:12:2b:37:a3:b3:71:be:15:b1:86:2b:c5:03:f0:
4f:0a:e0:2c:fa:47:26:da:75:0c:68:80:1a:59:ec:
4d:41:2f:f0:58:29:45:70:ac:7d:44:c7:4a:92:7b:
01:35:d7:66:fc:28:e5:c1:86:77:14:17:ec:9a:22:
d4:4e:a0:c5:26:6d:a9:80:70:63:99:0c:7e:f3:71:
88:cc:6c:11:e1:3d:d3:02:5b:31:64:b4:8b:c1:ad:
c6:61:9d:c5:ff:61:ef:08:d9:bd:71:61:f4:a1:9f:
2a:a6:31:c3:2b:58:bb:14:f4:1a:23:0c:36:10:f1:
6d:b8:d0:76:6b:bd:b2:1d:2b:42:54:c1:d6:c2:ad:
34:0c:03:32:d3:45:da:73:b6:14:95:8d:4b:2a:94:
fc:96:71:9f:c6:e1:a3:d7:14:5a:ca:92:18:b5:3c:
8f:da:ec:dd:5a:8e:e1:e0:77:b8:2d:cd:d1:fc:1b:
aa:15:c8:c8:8a:da:09:dd:59:84:a7:76:c0:d6:0d:
5e:d5:f4:1b:80:9a:03:1b:c3:c6:74:0c:6f:0f:bd:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:7C:48:FA:0C:A1:4F:59:D7:5D:A3:E6:0B:A0:45:73:D2:66:F7
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3d:f9:2e:e2:5a:47:1d:c9:39:c7:6e:f2:e4:04:17:93:ef:
76:bd:0d:d6:ae:07:2e:c2:f6:61:ed:f7:3c:a9:cf:69:bd:c8:
19:20:07:23:61:99:e1:0b:e3:62:8d:aa:27:3b:9d:01:8b:81:
e4:f5:7e:9d:bb:70:ef:48:e5:bc:ce:94:cc:20:5d:22:df:59:
b8:10:c9:bd:d1:9d:4c:dd:27:cd:58:6b:99:45:dc:ca:36:c5:
e9:08:c7:e7:cc:29:71:87:ee:0a:32:31:28:27:1b:b0:97:58:
00:eb:38:20:97:9e:6b:5b:70:76:69:e4:8c:78:ef:e4:55:c4:
43:0b:bc:e3:65:48:3b:28:97:c3:ab:ea:cb:54:3a:c8:c5:cf:
11:c4:d7:9c:c8:55:e7:81:cc:1e:f6:bc:78:27:10:94:1f:55:
05:1e:6a:7a:a5:1b:1b:42:89:fd:b2:b1:7b:22:6f:87:f9:a3:
0e:27:2f:d2:b5:10:de:30:53:a7:37:0f:95:e0:d6:d8:0b:85:
83:bb:7c:f4:5d:18:50:09:34:9b:16:b9:0b:f9:7e:92:52:fd:
51:b2:ba:58:29:00:c3:33:b7:fc:4f:69:50:cb:24:0a:d6:75:
a6:8f:6e:86:12:d8:1b:4f:7e:7f:d4:3d:61:9f:e7:5f:17:c2:
5a:8a:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:31 2025 by rpki-client