Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: kd7aKa9yylWJYMVFfke8ED0P9cA1rr8mCO2/O1YGhbE=
Subject key identifier: 37:B3:2C:F0:28:EE:C5:A1:D2:06:05:A5:A6:CA:40:23:04:07:BB:A9
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 0196B0A0DD5EECB74DEFC820DAA45D457BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 16:00:54 +0000
Manifest this update: Thu 08 May 2025 16:00:54 +0000
Manifest next update: Fri 09 May 2025 16:00:54 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: 8biewjRZgp0YVtsqV2tIJN+A0cv3Rh7Bx4MC2BM5rDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:dd:5e:ec:b7:4d:ef:c8:20:da:a4:5d:45:7b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: May 8 16:00:54 2025 GMT
Not After : May 9 16:00:54 2025 GMT
Subject: CN=37b32cf028eec5a1d20605a5a6ca40230407bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:cf:95:36:64:5e:38:27:d5:26:57:85:5e:
56:68:fb:a7:35:c6:80:3a:e3:74:e0:cb:eb:cb:53:
ba:28:b3:35:2f:4f:ac:0a:ec:65:1f:90:a9:46:ff:
27:89:b1:6c:77:e1:da:df:87:18:53:ee:10:b2:6c:
e2:dc:21:c1:84:d4:29:3c:f4:b7:c3:2b:bd:13:71:
37:69:dc:9b:10:ae:50:51:87:30:94:4e:36:e2:be:
b4:a6:7f:40:6d:9f:b0:21:7d:57:2c:1a:97:d7:80:
03:b4:e8:51:03:53:6b:5d:7f:bb:fb:21:49:18:06:
94:16:b1:61:fa:24:de:18:15:dc:dc:d3:ef:37:63:
8b:5a:b0:41:dc:77:f1:11:11:a7:c9:b8:53:b0:59:
39:91:98:31:2f:1c:3d:99:e3:17:90:46:32:c4:2b:
eb:57:2c:b9:2e:a1:eb:a9:ac:24:f5:5e:7d:97:97:
b7:39:11:76:94:dc:84:ea:7e:59:f5:78:47:c7:a8:
9a:e7:0e:4b:da:81:84:7f:97:13:e0:4b:66:d1:24:
5d:52:d2:56:45:4f:91:85:37:23:d8:86:4a:93:22:
f0:1b:d6:80:c8:a3:89:ea:48:65:12:34:34:b1:d9:
98:43:8f:fc:05:90:a7:9c:a2:d3:40:4b:e9:eb:b6:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:2C:F0:28:EE:C5:A1:D2:06:05:A5:A6:CA:40:23:04:07:BB:A9
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:e6:81:30:a7:15:c2:87:c7:66:e9:b2:b7:54:b0:b7:98:
37:30:ea:04:3e:83:1a:00:ed:c2:86:fa:b8:98:cd:3c:da:01:
a5:b1:bc:6e:16:88:13:15:af:71:4c:87:d1:70:18:4f:b2:de:
38:f0:06:f7:5e:89:06:d4:8a:5e:1f:13:8e:4b:b7:ed:81:c6:
72:b2:2c:3c:9e:c0:1f:c9:02:ff:32:6f:ed:a3:80:96:c8:92:
88:8f:f8:f8:22:95:c9:a7:29:b1:64:00:ff:c9:a4:da:8c:2c:
b6:7a:69:78:39:a1:dc:58:91:61:aa:8f:81:78:9d:f8:be:1e:
24:cb:4b:93:35:75:d6:19:ad:bb:b7:1e:8b:ba:cf:f3:81:0a:
60:58:da:28:4a:e0:ba:35:02:ea:07:be:e8:f2:b0:24:ee:2c:
90:45:1d:9c:29:5b:32:ac:84:99:cc:ab:c4:31:fa:e6:30:01:
24:89:a5:94:c9:e1:25:78:bb:d5:08:45:ea:df:18:1b:7a:a5:
c1:f0:5e:c0:d0:92:86:8f:10:77:2e:11:c6:79:06:ce:55:4e:
9b:b3:1d:93:7c:73:5f:d9:5e:9d:88:79:b0:44:2f:30:7c:fc:
ab:c7:d3:e2:14:17:4b:7e:fd:03:55:5f:c0:28:3f:9f:6c:26:
13:41:1e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:25:40 2025 by rpki-client