Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: evgxbcbMCHqvwhGd1LIZ7QN1NqirlwI1zpPS2gibsNg=
Subject key identifier: D9:D2:D6:39:08:D2:F9:AA:F3:F8:47:A8:3F:72:66:7E:34:92:62:72
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 0196729DD15FA063133E34CA2CBCBB996335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0200
Signing time: Sat 26 Apr 2025 15:01:07 +0000
Manifest this update: Sat 26 Apr 2025 15:01:07 +0000
Manifest next update: Sun 27 Apr 2025 15:01:07 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: zv2o2T0jVpolO8yb6leIvFjg39zEa4jQcYrMCLzLgDY=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:d1:5f:a0:63:13:3e:34:ca:2c:bc:bb:99:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Apr 26 15:01:07 2025 GMT
Not After : Apr 27 15:01:07 2025 GMT
Subject: CN=d9d2d63908d2f9aaf3f847a83f72667e34926272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:71:a5:3c:8d:01:e7:b1:11:65:02:b7:2c:
25:9e:a3:b1:4f:cb:75:58:1b:77:92:f8:84:20:85:
fb:aa:f3:2a:b6:87:75:8f:4c:7e:66:13:81:80:c0:
3e:94:62:b4:6b:d5:cf:f9:19:69:58:6b:1f:55:c3:
b7:c1:55:b8:f3:56:4a:99:8e:43:21:61:1e:a7:7b:
4f:e0:35:1b:c5:29:4e:df:61:73:6f:7c:3a:82:91:
c6:15:79:f0:3b:b4:c0:30:5b:56:20:ed:29:1e:d4:
5b:36:88:1b:8c:86:3a:32:bf:52:c6:8f:5b:99:50:
86:fa:96:94:1e:0e:ae:17:af:ff:0e:15:41:34:12:
bc:5e:fd:82:19:89:cd:b7:ed:7f:6d:5b:a6:98:2a:
b8:50:04:68:b6:ed:1b:d7:5a:56:af:49:5f:5f:ee:
b0:1a:d5:93:68:c8:6c:cc:ca:91:a8:90:0f:8a:c5:
85:5a:34:c1:78:79:13:bb:0e:1c:38:50:fc:6c:98:
f8:4d:38:2a:fd:a6:96:db:4b:a9:b5:37:ac:47:7c:
7a:d8:68:42:03:70:58:2f:91:66:d6:fd:57:0e:44:
18:94:1c:df:44:92:0c:99:58:84:40:68:95:a8:b6:
5a:2d:00:ad:ae:6f:7d:0c:28:fe:6a:9e:e0:7e:41:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:D6:39:08:D2:F9:AA:F3:F8:47:A8:3F:72:66:7E:34:92:62:72
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f8:c2:40:95:1f:ee:70:94:a0:82:da:f2:6c:ff:b5:a7:9b:
b7:f8:85:64:36:a3:c0:78:0f:35:7e:60:d4:84:67:72:3d:e5:
21:04:e4:c4:0b:b0:c2:ff:6a:e2:99:da:21:3b:65:bf:9f:93:
1e:1e:7f:d5:e8:b5:d1:2b:68:b5:d2:2a:fe:0f:c8:96:8a:f1:
99:7c:06:88:7c:d8:87:1a:25:b9:43:3a:2c:71:0b:f6:79:d2:
c8:9c:9f:5e:53:7f:04:d6:89:a3:0d:5d:05:1b:37:1c:b4:43:
48:f7:eb:4f:bc:c5:06:69:ac:3e:a2:17:b6:87:ac:b9:e4:4f:
d1:38:d9:c6:7f:0b:84:1b:f7:0d:ea:f4:96:66:65:d2:5a:90:
42:47:fb:4c:54:dd:7b:f2:11:95:79:49:ef:85:5d:7d:88:6c:
a3:1f:9f:e4:61:10:8a:4b:df:cf:cb:6c:60:7a:45:38:18:5a:
39:fe:d3:f2:4e:b2:3b:5c:11:da:73:9b:fe:bd:64:0b:05:dd:
29:fe:b6:92:dc:57:fa:60:20:f7:1e:8a:61:8c:93:af:21:14:
e4:6a:ff:42:f5:b5:fa:95:c2:0d:e8:4f:00:7b:4d:30:17:34:
1d:6a:6f:91:8d:e3:12:7d:e2:9b:71:bb:67:95:e0:bb:7e:4d:
39:a6:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:17:10 2025 by rpki-client