Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: M9zJMQSL2m1XDHsMOro32513JVQI8a5CX/aFhkHYOeQ=
Subject key identifier: 29:E8:64:28:36:EA:86:12:E7:17:7A:BB:46:C6:DE:28:08:45:30:78
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01967A201DC02E627C94E8B87D8E5A604D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 0567
Signing time: Mon 28 Apr 2025 02:00:47 +0000
Manifest this update: Mon 28 Apr 2025 02:00:47 +0000
Manifest next update: Tue 29 Apr 2025 02:00:47 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: DfIJvEOTP3+HNSDJ/zhQUogyt2s2hphXmEebgtpHJ04=)
2: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (hash: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=)
3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
5: XTWjD9RxeC6l3_NvTHQsET8rn-c.roa (hash: ykYdh3sbXe1rY2ZTlD70M1ZUp3zC5gCXzNGTNEV3S/E=)
6: i0G4rbaluY4hsTsMZnJk3iIOMWE.roa (hash: CiK52+AdXFUQok8ZcOo1/t7ZFlrVVCsMaQ9KmIRXLe8=)
7: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
8: q38p2dL7t029dWFRdSznRG0UCDs.roa (hash: SER6fNtd8df23hWn+6WZezoP9krSPn/CNMhUjqtk/v0=)
9: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:1d:c0:2e:62:7c:94:e8:b8:7d:8e:5a:60:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Apr 28 02:00:47 2025 GMT
Not After : Apr 29 02:00:47 2025 GMT
Subject: CN=29e8642836ea8612e7177abb46c6de2808453078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:2e:35:eb:8a:4d:af:40:b1:15:5e:79:f2:
31:2b:6f:85:58:b0:82:2c:df:ae:5b:41:b8:80:6b:
b2:70:7e:3b:e5:3e:23:49:df:51:60:d5:ee:2d:30:
bb:e8:33:33:66:ca:73:5a:75:ed:23:b5:95:67:85:
f4:fc:bc:60:6f:29:ef:f3:b4:78:86:82:f6:ee:c2:
56:2a:d3:e0:0c:b4:23:9d:7f:48:ed:c5:90:d8:6a:
22:cb:72:29:c6:5a:0e:3d:d0:da:34:e0:eb:d2:84:
ce:4b:70:62:8b:87:fd:c2:f2:af:ca:a5:a6:68:23:
aa:8b:09:5a:1c:f2:6a:8e:f1:ec:7d:10:19:b8:3a:
b2:98:74:62:cf:3e:d2:7a:b9:1b:5b:b4:91:5b:d2:
31:1f:cb:dc:59:2d:67:af:da:d7:01:ba:17:02:c5:
bb:07:11:6b:39:26:5a:39:13:3a:42:0e:8b:28:4c:
a4:1f:75:90:1b:dc:0f:69:1e:1a:f0:3d:c1:b1:fe:
20:7d:3b:c5:88:1c:54:1d:60:42:77:7a:d8:d1:44:
42:a5:3d:b4:a2:a5:95:1b:51:ad:38:2e:14:5b:92:
16:68:37:17:06:c7:0b:2a:5a:10:4e:73:5c:f2:ef:
68:a9:45:61:d9:2b:d1:e1:77:6a:de:08:33:16:ec:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:64:28:36:EA:86:12:E7:17:7A:BB:46:C6:DE:28:08:45:30:78
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:1d:61:4e:6c:aa:83:9b:ed:28:40:8a:f7:ea:fa:bc:65:
a7:6d:5f:4d:02:3a:0d:36:6c:98:d5:ba:da:12:02:ca:10:3c:
a4:a5:61:3e:f5:72:fe:0f:75:61:11:dd:7f:12:18:cb:c6:3b:
1e:b5:86:9b:48:14:b6:72:15:d4:0d:c9:d4:6a:2f:58:ca:bc:
7f:c4:b3:21:c0:4a:19:27:6b:1f:b0:0f:1d:65:f9:af:32:ea:
4c:67:81:e4:50:1d:00:ff:57:e9:51:5c:f1:0d:74:20:f7:f0:
a5:7b:1d:f3:e8:55:18:b2:09:2a:ad:cb:4b:8c:dd:03:bd:fb:
d2:c6:11:a4:74:17:f7:34:99:a2:3c:ec:00:80:20:f6:f5:2c:
67:42:47:ac:85:2e:a5:72:5b:d6:fc:f9:8e:16:eb:66:09:cc:
76:91:62:e5:41:73:c5:4e:e2:8d:f3:3e:b3:62:d7:3f:64:b4:
34:d0:ed:d2:c1:ba:a9:05:cf:fd:fc:7c:ac:df:05:e0:3b:bb:
4e:cc:ae:92:c7:5b:40:a4:d7:53:76:79:19:f5:39:4f:66:81:
71:47:f1:49:22:83:f6:d6:e1:8d:e0:d6:66:e7:d3:53:ba:82:
e3:89:f2:b0:75:29:e2:3b:f5:1f:d1:33:ad:9b:9b:59:cd:8f:
f3:98:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:44 2025 by rpki-client