Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: PRGRk9lpALFrOoLw3zJ9cW2c34IfKogxfahvRk6mEw8=
Subject key identifier: DA:32:1B:7F:2C:90:37:D9:A5:DC:81:50:06:90:98:30:67:FC:F6:57
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 0196ABE80C02621E39588EEC691324EFAD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 18:00:33 +0000
Manifest this update: Wed 07 May 2025 18:00:33 +0000
Manifest next update: Thu 08 May 2025 18:00:33 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: kmTrV74zQ3VUmhV7kzaNNmRqVnaMIFaNv6ZcAWjWGnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:0c:02:62:1e:39:58:8e:ec:69:13:24:ef:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: May 7 18:00:33 2025 GMT
Not After : May 8 18:00:33 2025 GMT
Subject: CN=da321b7f2c9037d9a5dc81500690983067fcf657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:55:14:8e:16:a3:f4:11:67:8f:ae:37:eb:
cc:e7:dc:45:62:6b:64:f7:ea:69:90:bf:b4:9a:6b:
27:20:af:61:0c:a7:aa:a7:08:0d:16:e2:f7:ef:f7:
93:08:70:ed:50:c1:6c:e7:a7:33:45:0b:4b:8b:90:
21:e6:60:5d:dd:c4:09:db:e1:61:e9:9b:a9:7c:76:
0e:f7:45:62:e1:dc:25:39:0c:26:20:33:04:7e:29:
c7:15:d6:53:20:2d:e3:31:a5:70:df:d5:d9:b6:81:
51:8b:44:ab:f1:9f:bd:dd:47:2f:eb:76:45:22:32:
3d:34:c0:c9:26:0f:c4:44:57:c5:31:0c:d2:00:81:
15:1c:89:5b:d3:5b:16:14:5e:3e:09:f9:a0:54:e9:
7c:1a:61:2f:f8:6d:76:8c:ab:e7:01:49:fe:75:25:
92:c9:1f:3f:6d:14:06:72:96:87:07:f9:c5:cf:e0:
e0:f8:17:58:98:d7:5d:22:ba:8c:7b:55:94:00:2c:
32:5c:d6:8f:f4:fd:de:e7:00:be:a5:be:85:6d:8c:
e5:fa:06:89:ca:8c:8d:63:6d:29:92:91:2e:5b:cb:
97:f4:0a:e0:89:36:22:bb:8a:a3:33:98:b9:98:73:
6a:ab:9b:92:81:b8:2d:68:0a:ab:7e:2b:fa:47:e6:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:1B:7F:2C:90:37:D9:A5:DC:81:50:06:90:98:30:67:FC:F6:57
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8d:4c:0e:c7:c3:8d:51:9a:2f:33:4c:94:22:46:98:dd:0d:
b1:b5:88:02:28:72:48:91:22:6d:3e:cc:0d:6e:56:22:5a:42:
cf:7a:5b:45:8c:93:b9:77:34:de:33:08:b1:b4:d2:0d:71:d7:
ba:1d:b5:0f:ff:5f:fb:8d:7f:34:87:0e:4c:85:94:b8:a0:f8:
ff:fe:c7:11:82:07:44:d1:6f:6d:91:a2:3f:c7:3b:89:93:8f:
78:0b:74:3e:e1:90:81:d9:49:ee:d1:60:d2:41:b3:12:c3:e9:
d4:45:ce:68:4c:0b:35:4c:1b:f7:c8:8b:ee:6c:22:1c:ae:f3:
c1:0d:a7:18:ae:b2:28:b5:a5:73:a2:85:6c:8a:c6:7f:0e:d5:
04:97:5f:28:51:20:d4:aa:5e:eb:9c:2b:4d:80:56:26:5f:02:
70:e9:13:72:b4:58:fe:81:35:b1:0f:68:09:62:bc:83:a6:d0:
e7:d4:4e:4c:a5:61:fc:60:80:b6:89:46:03:69:87:55:38:52:
f6:37:dd:90:9f:d5:a2:6c:1a:3d:a6:e0:a0:4e:50:fc:80:a5:
2f:77:a7:cb:1a:6b:d5:1d:fa:ab:db:7c:7d:c3:e3:14:87:28:
06:60:9b:a9:f1:be:74:20:5b:33:87:04:29:f0:df:1c:1e:a1:
ef:8c:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:14:29 2025 by rpki-client