Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: Og9/W4IojfN2H0jbzRxPya3aKjD+da99uUaXas5gLnw=
Subject key identifier: 52:A5:A3:C8:88:1C:A6:72:85:98:6F:69:9D:DA:4A:6D:C2:2B:D3:5C
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0196C4CC1B791416CAD1597A58F5E30CCF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 14:00:32 +0000
Manifest this update: Mon 12 May 2025 14:00:32 +0000
Manifest next update: Tue 13 May 2025 14:00:32 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: TAh5NuSMR17e3r1sSF/fOxIYXdAQfyHx1JNSpuz8hdI=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:1b:79:14:16:ca:d1:59:7a:58:f5:e3:0c:cf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: May 12 14:00:32 2025 GMT
Not After : May 13 14:00:32 2025 GMT
Subject: CN=52a5a3c8881ca67285986f699dda4a6dc22bd35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:4f:10:bd:00:5b:08:32:36:19:8c:b1:27:
64:4e:19:68:df:9e:f5:b8:92:69:b0:89:82:96:68:
d0:4f:f7:e4:25:78:9d:0b:da:16:f8:35:47:a6:91:
d9:2c:54:0a:61:93:c0:42:0e:51:3e:9b:75:1e:e0:
a2:d5:44:98:6c:37:c1:da:34:5d:5b:f2:b6:73:c6:
58:b6:e9:a6:34:ba:0a:16:51:7f:4e:86:43:50:9c:
4a:90:63:be:33:c2:ab:61:1d:d8:7e:99:24:ff:33:
8d:33:57:12:c7:81:b3:81:24:05:c6:9e:77:f1:de:
f0:ca:6d:46:c2:24:54:13:28:29:7c:70:f7:93:9c:
b6:67:36:df:50:7d:bb:aa:d2:62:d3:c0:21:21:ce:
45:8d:85:51:56:47:73:42:9f:69:21:53:7a:40:c3:
d2:21:af:a4:9c:e4:b6:40:07:f6:1a:fe:06:87:d5:
82:e8:6f:ca:e0:0a:ff:3b:a5:c0:9a:c9:00:17:a1:
09:a6:70:cd:b4:4f:18:9d:10:e0:ca:a8:d6:ee:09:
f0:82:f8:40:fd:58:e7:c5:be:a9:d1:fc:28:d6:85:
00:bb:10:92:41:83:12:63:44:ee:cd:53:2b:ef:8f:
ea:a3:2f:39:36:4c:4e:57:35:50:2b:12:e9:4a:d0:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:A3:C8:88:1C:A6:72:85:98:6F:69:9D:DA:4A:6D:C2:2B:D3:5C
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:57:b3:d0:dc:e4:d4:3d:7e:a9:3a:6b:bc:d7:c8:a7:c7:
42:fb:87:57:4e:9b:b7:d6:fd:59:8a:4a:be:be:2a:ea:28:30:
95:52:b9:10:8d:a8:82:62:58:35:9c:66:66:2b:97:ab:89:26:
4c:1f:52:4b:1e:df:1b:75:9d:07:dc:b1:db:76:57:16:c4:fa:
36:aa:ba:1e:38:27:6e:b3:fd:9c:0d:43:60:44:c2:14:9f:af:
c6:66:80:01:b7:5f:0a:d7:fd:18:7d:0c:30:82:e4:74:19:20:
c5:16:da:04:48:fa:32:f4:19:cf:e9:78:34:ea:91:85:0b:22:
0a:b5:4e:c3:62:44:66:2b:ce:e9:d6:df:2c:f0:5d:4e:75:57:
d8:2d:c9:3c:1b:c3:22:23:29:14:42:84:e0:78:6b:c6:ed:93:
5b:1d:64:1f:03:2e:29:7e:f0:17:67:8c:8a:80:93:ea:fc:8e:
f0:46:07:20:da:b6:a1:d2:19:56:80:ff:c9:06:8b:1a:9e:fe:
ea:0e:0f:c9:7e:85:60:1a:49:a8:ce:53:2a:c1:85:bf:9f:57:
78:b1:20:de:46:57:de:49:2d:92:c3:67:9a:ba:54:45:4f:87:
91:d7:f3:38:05:7b:c4:4c:1a:9e:43:1b:1c:a4:13:2a:6f:fa:
d6:b6:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:04:00 2025 by rpki-client