Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: kWGOsjsGA7sqwmL4djCyyR4HAX20vzIHNylKBj0Was0=
Subject key identifier: 0E:53:C7:7C:11:29:28:62:38:57:2D:E9:E2:7C:EF:13:4C:26:6D:6C
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 01969560BFB0C74126C1AC8B2FB51869AEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 1254
Signing time: Sat 03 May 2025 09:01:07 +0000
Manifest this update: Sat 03 May 2025 09:01:07 +0000
Manifest next update: Sun 04 May 2025 09:01:07 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: A2eAvdj3VTWBe3Ajvn2gga54wvMDvVYvhUlQqPm2Uk8=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:bf:b0:c7:41:26:c1:ac:8b:2f:b5:18:69:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: May 3 09:01:07 2025 GMT
Not After : May 4 09:01:07 2025 GMT
Subject: CN=0e53c77c1129286238572de9e27cef134c266d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:16:cd:04:20:9f:18:1e:8e:f7:c3:2f:6f:
67:0a:3d:3f:f2:92:35:24:eb:f7:bb:c6:74:c4:11:
a0:ef:44:89:44:c0:1f:ea:7b:29:e1:11:fa:a5:5a:
ea:7a:c9:c8:16:fb:c6:0e:96:06:8d:c7:62:c3:a7:
68:55:f7:57:15:ef:18:32:d7:74:9b:3c:59:af:33:
59:3b:dc:52:e6:65:8d:1b:79:30:9d:42:ce:2f:d4:
48:9b:cc:a5:c2:ff:54:96:e1:b4:3a:e3:bf:9c:be:
ee:f2:dc:e7:71:66:72:c9:73:c0:85:95:92:3e:03:
6e:66:eb:92:be:78:39:6c:51:fa:ad:97:06:90:f8:
c5:e1:43:b7:b6:28:6b:94:09:7b:5d:7f:ea:ac:78:
d0:6f:21:85:f2:3b:d9:9b:f4:4c:36:de:22:5e:4c:
ec:36:72:62:08:97:82:56:e7:58:97:7a:2a:61:85:
6a:32:9a:e6:f6:05:c6:69:a1:e1:b8:2e:fe:7f:7a:
ee:3f:ce:dd:d7:23:3d:b1:eb:dc:81:f8:21:79:e6:
18:f8:03:45:51:18:9a:ef:5f:3e:55:df:54:8f:dd:
02:75:61:dc:07:df:25:80:a4:8c:15:40:a4:16:bb:
1f:e3:e5:9e:07:d0:a0:7e:49:32:83:10:85:86:50:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:C7:7C:11:29:28:62:38:57:2D:E9:E2:7C:EF:13:4C:26:6D:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:0a:bf:51:22:03:49:d6:8f:4a:b5:39:1f:bc:86:09:4c:
22:35:51:ed:ee:a5:2c:2b:0f:25:ca:e6:ad:84:24:e2:07:0e:
b5:6d:f0:94:a8:16:07:f6:e4:34:51:19:8b:27:31:16:55:78:
93:b7:3a:c1:8d:f7:48:cc:50:77:ff:a1:a0:c3:ef:9a:bc:25:
b6:d2:33:12:7b:bb:ae:1e:8b:8e:1f:76:81:b3:25:8f:94:42:
04:37:dd:59:b6:da:a1:c1:66:52:e3:d4:cf:9b:35:f8:71:c6:
49:cc:92:23:7d:d8:00:0e:19:07:8c:1e:f0:15:79:97:91:e5:
75:bb:9c:59:6e:f6:24:3d:00:a9:d7:31:19:48:dd:d3:c1:2f:
df:67:a7:cb:42:63:eb:64:71:f4:42:31:11:1b:f6:e7:0c:ab:
aa:fb:65:97:54:18:47:a2:b6:f4:3b:74:10:17:3f:a4:9e:54:
b5:28:0c:00:ec:96:aa:e1:82:ac:10:44:cc:32:8f:d3:f0:a5:
c7:44:39:e6:10:64:71:2a:2a:8f:f8:73:0b:b8:f3:f2:dc:61:
fd:ac:8f:d1:61:01:93:e1:54:1f:31:9e:11:60:de:f2:b9:c9:
aa:61:fd:04:56:c0:e9:9e:bb:ad:78:e0:ca:aa:a6:a2:60:d7:
2f:88:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:30:20 2025 by rpki-client