Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: zBlAHZ665FKwb6Wy2fDMRD1GoW4mftWI26zPcPJt1qo=
Subject key identifier: B2:D4:54:4C:71:DE:14:B9:06:B5:6C:5A:DF:31:D2:C1:DB:80:E7:85
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 0196C34B4F668514C2F58B28107A666E551A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 07:00:14 +0000
Manifest this update: Mon 12 May 2025 07:00:14 +0000
Manifest next update: Tue 13 May 2025 07:00:14 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: Lvu+6wugBm+tlMssa0UHUYqQxbX7kVn0SUAFQDAaaBw=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:4f:66:85:14:c2:f5:8b:28:10:7a:66:6e:55:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: May 12 07:00:14 2025 GMT
Not After : May 13 07:00:14 2025 GMT
Subject: CN=b2d4544c71de14b906b56c5adf31d2c1db80e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:78:92:ed:1f:c4:e2:7c:29:ef:81:56:5c:
71:ef:be:59:37:a6:dc:c1:85:f4:b5:cf:02:9e:bf:
c3:3b:f5:88:ce:f8:05:5c:d2:e4:1b:65:47:69:9d:
fe:ab:ba:71:c0:e6:5f:75:b2:86:ef:d2:df:2a:62:
73:d1:30:6d:c7:7b:4a:62:bc:82:d2:8b:d6:01:0c:
63:68:da:41:12:a3:f1:b8:8f:65:54:5a:9d:03:42:
89:ac:6e:0d:e8:6d:19:91:a2:7d:b3:f3:66:f1:b7:
1c:73:20:79:75:1e:3a:ae:d6:e1:a0:a7:96:a5:46:
1b:6e:e1:af:97:c1:0a:9a:2b:f7:60:fd:ff:17:83:
d2:3c:b1:c1:e6:48:a9:1d:9b:c8:9f:a4:45:43:2d:
05:0b:7b:9c:ae:5a:d8:a4:3f:1f:4e:a0:67:38:85:
96:3a:2b:f9:7e:c7:02:25:83:06:f4:2f:e2:b0:fa:
8a:29:c6:8e:e1:e9:1d:83:44:c7:3c:e9:bb:e6:d5:
5c:ff:3c:bf:68:b7:43:c4:bc:93:f3:a7:fa:60:88:
8f:c7:20:a2:51:0f:d7:4e:68:8c:1e:0e:66:a3:6a:
c3:13:99:dd:3b:04:b3:e9:08:78:37:59:63:ff:8a:
83:21:44:dc:1c:29:5a:3b:1c:f2:be:8a:66:23:05:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:54:4C:71:DE:14:B9:06:B5:6C:5A:DF:31:D2:C1:DB:80:E7:85
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7d:e5:fa:fa:76:bf:a2:1d:a3:f6:0a:53:91:ac:f4:98:12:
7c:56:07:e7:a3:26:c7:51:fd:6c:8c:4c:c6:e8:e3:a5:52:71:
88:2f:0d:ca:62:8e:b1:b4:a1:92:40:54:1d:29:33:41:10:d2:
19:22:32:e5:f7:c0:ca:da:37:f2:f1:d6:71:a2:17:f9:ff:b9:
19:1b:bf:ea:ab:e6:b0:77:ac:30:73:12:2d:2e:db:e8:51:e6:
a3:82:ea:56:af:39:46:20:75:a7:4b:5f:e6:f1:cd:77:64:87:
84:ed:6a:e6:f5:d2:7c:a8:6e:4e:cb:25:f3:0b:c5:9a:d4:75:
79:b8:a0:f7:a0:4c:7c:1a:67:15:64:b1:0c:d1:49:b3:3a:3f:
c1:f6:02:62:fa:c8:ac:5f:62:95:9c:56:b0:6c:9e:1a:e2:4c:
7f:2e:f2:7d:af:8c:a3:81:fa:75:49:f6:2d:dc:63:21:a0:e4:
19:28:1a:a6:6c:47:7a:4e:23:a5:27:6a:06:29:56:b0:db:b3:
13:92:c6:1e:63:26:30:34:6c:60:44:a5:a2:99:4a:8e:a0:38:
84:a9:2b:40:86:4a:eb:b9:bc:73:15:dc:a2:ee:42:10:4f:bf:
51:b1:cc:25:7a:66:db:87:9b:6f:cf:bd:67:bf:99:02:89:44:
2b:97:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:07:33 2025 by rpki-client