Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: Qej0WObiaAcoheHuQPKXj1fi366yzxldhW37DCprNF8=
Subject key identifier: C1:FD:8B:3F:E1:3E:E9:48:28:34:36:24:E8:2C:FF:F1:F4:E1:B4:2B
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019676E7E9E1D1B1F26AA464F1235600F07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 0458
Signing time: Sun 27 Apr 2025 11:00:32 +0000
Manifest this update: Sun 27 Apr 2025 11:00:32 +0000
Manifest next update: Mon 28 Apr 2025 11:00:32 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: Bg5bGmYA4n8xkQXnG/V9WnXKdxGQs3BEd91n27RPBtA=)
2: ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa (hash: cwXAi1sfFPfN04wsw1nczJfstzqjCt7igbtZqfyu1Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e9:e1:d1:b1:f2:6a:a4:64:f1:23:56:00:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Apr 27 11:00:32 2025 GMT
Not After : Apr 28 11:00:32 2025 GMT
Subject: CN=c1fd8b3fe13ee94828343624e82cfff1f4e1b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:a6:a7:b8:a6:f6:04:2c:de:2a:ae:b4:7c:
c2:52:61:86:b7:c2:50:18:49:ba:dc:15:a1:e7:68:
4f:d7:40:16:17:35:7e:16:fe:8a:16:a0:da:83:29:
44:df:35:34:02:9e:e6:b2:86:e3:56:b3:58:70:ea:
08:f8:f5:11:24:89:da:73:30:5a:b7:75:52:bb:9e:
f0:aa:80:8e:cb:85:b5:92:e2:35:d9:ca:07:e9:ab:
67:51:96:8a:07:97:c2:71:d1:6b:dc:46:d2:0e:09:
58:10:1b:eb:84:55:ce:a6:80:4a:b4:f0:bf:8d:6f:
cf:96:8a:0a:1e:8e:89:63:cb:99:a9:b2:5a:1d:47:
96:59:cf:cf:bb:ab:b0:e6:82:30:02:99:23:bb:92:
5e:85:a0:0e:fb:bb:60:83:ff:b3:bc:05:68:a3:0b:
79:6b:a1:8e:8d:a8:41:3b:80:fc:e0:67:01:0e:b7:
61:b1:4b:fa:22:c3:90:60:23:d4:ec:3c:2d:fa:08:
df:49:91:68:b6:f1:41:6a:cd:16:c3:fe:4b:68:37:
a7:04:db:64:79:b0:c9:51:1d:de:ff:42:ad:4f:27:
12:5d:5a:79:99:a2:ee:f0:23:c8:99:83:32:15:ad:
31:3f:1c:ce:10:47:e5:0e:1b:5e:64:d1:a3:0f:dc:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:8B:3F:E1:3E:E9:48:28:34:36:24:E8:2C:FF:F1:F4:E1:B4:2B
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:b9:95:93:f1:bb:1b:a6:2e:a4:54:f9:bd:ce:a0:cc:b8:
4c:7e:c0:b3:9e:d8:47:9a:44:e9:11:6e:f8:21:44:a8:ff:3a:
e2:47:7b:fc:41:d0:bd:82:68:b8:3b:1a:26:4a:01:73:e9:41:
2c:d2:79:4c:2c:ff:42:31:59:40:95:48:d0:0a:63:ca:7a:7d:
9a:84:3b:5a:19:e1:5f:75:bf:01:f8:9b:f9:8c:84:f6:da:52:
8f:28:ea:9d:53:e2:c8:91:e1:77:cf:d8:67:52:fc:a0:e4:73:
8c:95:43:d3:fd:4a:d9:40:58:aa:11:e7:33:cb:9d:7b:ba:aa:
21:0b:6f:b4:fc:29:33:34:13:d6:43:d6:db:04:6a:9c:ad:b7:
63:d0:8e:98:a8:6a:5a:e6:d6:4d:7e:78:e1:84:35:ce:ad:a2:
3e:d7:70:c6:01:4e:36:d7:d2:0a:0a:4d:c3:17:75:56:ef:1a:
6b:df:ee:80:3a:10:ac:03:f6:8c:47:40:c2:da:6e:b7:72:70:
b2:c4:b0:15:3b:62:be:cd:6c:8c:aa:da:ae:97:c9:5e:4c:1e:
80:30:d9:b3:70:ee:a4:fb:12:63:5a:6f:e6:b2:21:1c:0c:65:
97:80:39:31:d8:1c:34:11:ff:4e:51:3e:16:37:66:af:2a:f5:
a5:39:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:59:55 2025 by rpki-client