Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File: fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier: CwYhMJ9RiKcbR14ltw46EL7JGrh/U5i9VfutWdQeUJ4=
Subject key identifier: 02:98:BA:42:32:CE:49:20:85:10:73:FC:25:90:FA:83:C7:59:93:62
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0196B96CFA0517DC3DD390EE18311CDDD805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number: 154C
Signing time: Sat 10 May 2025 09:00:48 +0000
Manifest this update: Sat 10 May 2025 09:00:48 +0000
Manifest next update: Sun 11 May 2025 09:00:48 +0000
Files and hashes: 1: 7F80jFSbPxmTTmjOi6-hGfFW9n4.roa (hash: lyxsHymrKrQFQN+O0COTPx++o5VdqW80Bft0/kvFeDo=)
2: ATAXcZqjug_OpJ5XGTmLoPMGEOc.roa (hash: qD5faLkjHPVXEYY6RoVKIKOshkTkJFAi6AIDTmlkjhM=)
3: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=)
4: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: KKvk5iLPTb3cg4OiBXz/aejPW/fmz8fAjjur1GLz7pc=)
5: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:fa:05:17:dc:3d:d3:90:ee:18:31:1c:dd:d8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: May 10 09:00:48 2025 GMT
Not After : May 11 09:00:48 2025 GMT
Subject: CN=0298ba4232ce4920851073fc2590fa83c7599362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:4e:11:39:12:8a:d8:bf:c5:69:be:88:60:
4f:38:85:4d:ed:56:3e:ca:09:b9:77:76:43:df:93:
e4:b1:0d:23:8c:36:97:96:a3:54:d8:94:c6:5b:c8:
78:7f:e1:57:bb:6a:bf:52:76:f9:dd:74:22:8c:e9:
1b:36:c4:2f:7d:72:70:0d:67:85:ca:60:e2:83:f7:
b4:c8:f7:cb:b2:ff:fb:8e:c7:1a:39:45:2c:15:ed:
7d:02:9a:e5:76:54:77:89:6d:33:8e:de:54:82:9f:
57:d8:8e:6a:9a:38:56:97:f8:7d:ec:40:51:41:76:
ec:de:60:a4:f0:55:8b:92:dc:d1:2d:ab:af:d3:96:
99:b6:a1:84:b9:09:e0:0c:47:d1:fe:d2:2b:cf:47:
bc:4e:d4:e0:db:fd:fa:67:8d:f7:4f:62:cb:c0:20:
4b:4a:99:35:65:c0:5f:10:1b:34:cb:d1:fa:a7:53:
a4:0b:8a:1a:38:dd:72:c9:35:c0:0d:b3:32:b5:49:
4d:23:5d:9c:98:2e:32:96:71:8d:ff:16:25:a7:b8:
09:f2:61:b3:88:d5:46:76:21:e1:e6:2b:fb:e0:0b:
41:88:f2:20:06:be:aa:93:f1:39:3e:cf:b3:12:0d:
26:42:18:93:32:ad:c8:fd:ae:1b:18:6f:27:98:14:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:BA:42:32:CE:49:20:85:10:73:FC:25:90:FA:83:C7:59:93:62
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:ab:1f:54:16:e1:97:7e:99:8c:1a:18:12:21:65:23:7c:
5a:60:89:4d:08:46:23:e8:d8:df:3e:c5:d2:ac:bf:15:1d:3a:
38:56:da:01:7f:b4:9a:7f:db:95:b0:63:09:75:63:d4:79:b2:
50:79:86:8c:f2:23:e7:9f:5f:bd:d7:ec:4b:4f:68:70:f3:bd:
85:ff:39:bb:9b:83:bc:a2:d8:df:5d:ac:73:91:ce:96:88:18:
c1:73:62:1f:36:e7:02:f9:65:42:97:cb:8a:f0:ad:1d:68:60:
7e:da:b9:68:af:db:f0:c4:f4:e3:42:cd:21:17:8c:6a:4e:a8:
96:d3:49:dd:b5:4e:3e:9e:07:30:94:43:11:b9:5c:8c:79:a1:
ef:a5:cc:3c:1f:f3:3b:66:80:8d:90:a2:b8:bb:60:79:46:0a:
bf:13:93:e7:23:8a:66:13:36:22:98:c2:ba:6d:4a:ba:b5:93:
5c:1c:98:d1:5a:36:fc:8d:fb:15:d9:54:e1:ae:00:cc:b9:26:
38:03:ad:0d:3b:54:66:a4:f1:5d:bf:01:90:39:c8:a9:19:27:
47:81:63:8c:4a:71:1e:6b:c7:c4:bc:38:81:d2:64:35:29:60:
f2:f9:83:3c:75:63:94:14:b6:06:58:93:bd:2d:f9:4f:a9:b0:
5d:0f:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:18:41 2025 by rpki-client