Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: KT7UjZ9blE+bvu57SmeKku1iuNqWLFuhOo1F5xp2Xfg=
Subject key identifier: 5A:1F:E5:32:A9:E5:76:63:7B:2A:8C:A1:DD:3F:F4:9B:90:08:30:52
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 0196BBC8CCB0A0E4CA79A389BEB4B3ECF256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 20:00:21 +0000
Manifest this update: Sat 10 May 2025 20:00:21 +0000
Manifest next update: Sun 11 May 2025 20:00:21 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: XrZmtGg84hLNaM8Ehgrv4qSlhKdIfJzKdBzIEGoRbdk=)
2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:cc:b0:a0:e4:ca:79:a3:89:be:b4:b3:ec:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: May 10 20:00:21 2025 GMT
Not After : May 11 20:00:21 2025 GMT
Subject: CN=5a1fe532a9e576637b2a8ca1dd3ff49b90083052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:08:c8:e6:d5:fb:09:99:52:1c:1d:4a:71:
51:e9:ef:55:7a:51:56:1d:c8:ce:a9:1d:f5:5c:7c:
1b:86:55:ce:bd:87:5a:0d:35:3d:83:f9:26:10:38:
7f:0f:9f:c0:2c:7a:b4:68:df:51:82:d3:80:30:ad:
25:07:92:2c:ff:86:37:cf:6b:84:4a:ae:7a:57:66:
75:3c:1d:88:7a:00:ee:3d:6f:e6:db:21:9a:65:2f:
34:2f:3c:b5:15:83:8c:3a:7a:46:f7:ae:33:ec:23:
d5:7b:a1:d9:f7:24:6c:a4:06:4c:5f:fb:ac:6f:17:
53:47:8f:7e:64:0c:77:3e:76:ac:9f:8a:33:4d:6f:
29:cd:81:18:ab:b9:df:fb:b6:43:8b:45:0a:a6:6d:
7c:54:cc:58:97:36:1e:a3:a1:de:68:13:99:8d:3d:
e5:cb:66:d6:75:2e:75:53:9c:49:2c:55:cc:c3:89:
e1:90:fd:10:9a:ef:0b:6b:4c:51:26:a5:97:8c:e0:
ca:31:38:cd:ca:91:da:d3:67:99:af:9f:6a:28:c7:
e3:1b:7a:60:b2:05:b2:77:8c:a4:25:30:34:10:8f:
bb:93:d6:e1:3e:03:5a:3a:ef:18:dd:11:59:09:f2:
fa:a2:aa:5d:97:67:51:9a:57:4c:2a:69:8f:45:d9:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:E5:32:A9:E5:76:63:7B:2A:8C:A1:DD:3F:F4:9B:90:08:30:52
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d0:ee:cc:04:95:b0:e5:54:89:37:2f:f8:22:6c:fc:36:36:
9a:f7:2c:08:43:8a:83:13:e8:fa:a5:97:51:6b:23:0c:16:a2:
24:2c:b8:4c:e7:a1:27:f2:25:b2:86:fc:8b:da:d6:de:6b:28:
f4:0c:a2:01:26:7c:2a:ce:a1:69:a8:70:7d:64:3b:1c:c7:e3:
fd:04:d7:f6:4c:e7:7e:22:98:21:1c:83:12:66:80:fb:2d:c7:
45:6f:2b:02:9d:85:01:20:4f:6f:c9:30:c6:34:20:08:70:0e:
dc:cc:51:2c:66:e3:61:42:d7:58:86:16:27:f2:39:3e:7c:9e:
0a:9e:dd:a1:4a:73:3a:5c:db:18:74:42:a4:55:4d:a0:86:2c:
cc:af:ae:ba:f1:cb:d7:8b:04:57:a0:76:51:2f:80:fa:c4:9f:
97:4b:32:ad:0c:86:b4:26:7d:a1:00:c7:5c:eb:ff:95:85:4c:
76:21:88:94:92:13:8c:a7:87:3c:62:e4:03:a7:c5:78:17:5d:
82:ad:c3:b8:e4:3c:5f:32:d1:08:81:b8:7d:c2:f7:9b:6f:8d:
50:9a:de:cb:a3:96:53:62:73:f5:7b:fc:c1:53:65:82:7e:ed:
c9:73:ad:77:c7:f3:a8:94:6b:2c:68:eb:54:f0:cb:ae:a4:cd:
7b:a7:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:10:29 2025 by rpki-client