Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 8fu+HcDwnVGNeZQff6gbHWwFV67nv2dBeq9bnPoNbXA=
Subject key identifier: 55:9A:4B:7A:46:13:68:DF:4C:72:14:3F:74:D0:FA:AA:22:75:A7:62
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0196B9DA723B8266EC4CFCB9EA6A5495FC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1471
Signing time: Sat 10 May 2025 11:00:23 +0000
Manifest this update: Sat 10 May 2025 11:00:23 +0000
Manifest next update: Sun 11 May 2025 11:00:23 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: zNY91N8cJGqtS1SfFg1Q/GNr+Nn5YeC9DOSpDMxE7YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:72:3b:82:66:ec:4c:fc:b9:ea:6a:54:95:fc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: May 10 11:00:23 2025 GMT
Not After : May 11 11:00:23 2025 GMT
Subject: CN=559a4b7a461368df4c72143f74d0faaa2275a762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:99:2a:d0:4b:f6:bf:ec:e6:2d:fd:c0:e3:
65:fa:50:33:03:9e:11:a4:8b:e7:14:74:9d:9c:31:
ee:e1:e0:66:d6:db:17:c6:e8:04:f3:9d:e0:56:3b:
ae:1a:0f:aa:22:2c:1a:08:f4:43:76:40:ff:e3:13:
67:d0:aa:f4:a7:60:61:79:ca:02:d2:be:7e:e6:ea:
5e:fe:04:b9:2c:4c:61:06:82:c5:48:be:aa:74:22:
fd:45:07:83:64:20:60:fa:92:75:47:e0:7a:ea:3d:
4a:1c:dd:12:a1:92:6a:b1:ba:df:09:19:ef:1a:55:
34:13:32:b1:6a:1f:09:be:2c:8a:07:81:f6:62:30:
3f:69:98:ba:bb:57:7f:c4:a4:9a:0e:ec:b9:e5:55:
0b:de:16:2b:9c:b9:a1:67:f3:20:e0:61:02:77:16:
5d:c0:d0:e3:44:4d:ef:8f:9b:78:69:13:2b:44:04:
98:a4:80:cf:a6:0e:ee:f7:5a:48:36:40:db:e2:55:
38:05:31:9c:29:e9:92:89:b5:63:00:15:19:88:69:
63:fe:58:92:44:48:21:75:90:5a:fd:12:6a:03:c1:
ab:4e:4c:da:d3:a1:bd:03:6f:1e:b2:69:6d:9a:7e:
de:54:fc:46:ef:a5:95:b0:32:b2:b3:e0:b9:a1:06:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:4B:7A:46:13:68:DF:4C:72:14:3F:74:D0:FA:AA:22:75:A7:62
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:1d:bf:1b:a9:eb:db:b6:b4:3b:f6:5a:74:f4:03:06:ea:
7b:33:95:c2:e7:c3:43:0a:93:fb:96:bf:01:98:5f:71:fd:c1:
2a:01:37:6e:d9:79:9a:f7:b5:5b:3f:9e:3e:56:14:37:ed:f2:
09:3f:18:84:e9:25:91:5a:97:12:00:90:d2:a1:f8:bd:a6:83:
0d:76:ae:73:cd:92:97:24:85:cd:c2:d1:4c:ad:25:40:ea:30:
f8:cb:87:40:32:61:c3:29:e5:3e:0d:b2:f4:4e:8e:44:2f:3b:
16:b5:90:bd:ce:3a:84:c8:65:f8:75:23:cc:3c:dd:b2:d4:d3:
bd:a1:49:a5:d8:c8:af:c7:af:88:2e:ba:21:83:73:0e:a7:9d:
be:a2:3a:77:83:8e:6b:67:05:64:83:f0:f9:f8:72:9a:97:95:
c0:68:e6:6c:a1:10:05:98:8f:c0:d0:70:1c:1c:a8:a3:61:f9:
1a:bc:86:f3:b8:69:1f:2b:1e:3d:49:cc:c2:96:cb:24:c4:e4:
f3:97:da:96:a2:ee:75:b2:93:06:bb:f6:35:1e:dc:d9:d8:26:
65:b7:8a:1e:1d:cf:73:eb:34:28:bd:1f:c5:32:99:82:ef:69:
34:96:95:78:ab:35:fd:d7:ee:6b:b5:a3:ce:5b:be:cb:94:c5:
1b:51:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:38:07 2025 by rpki-client