Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: FieV0CnMTAyG+I/vErv3JrWVrGGIzcrw9/8ZEA82cxc=
Subject key identifier: 8C:18:C1:A7:C3:D1:66:2F:2F:1E:DE:67:B3:F2:1E:16:30:19:7E:D1
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 0196BB23D749A0829DEAC38E92A53CD90F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 17:00:10 +0000
Manifest this update: Sat 10 May 2025 17:00:10 +0000
Manifest next update: Sun 11 May 2025 17:00:10 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: xtebq4tku21BLnc4SGvjos2dLxRgZF81F9nK+BDmSUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:d7:49:a0:82:9d:ea:c3:8e:92:a5:3c:d9:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: May 10 17:00:10 2025 GMT
Not After : May 11 17:00:10 2025 GMT
Subject: CN=8c18c1a7c3d1662f2f1ede67b3f21e1630197ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:88:7e:e4:c6:62:a9:33:92:f2:da:52:b7:
1f:5d:13:4c:ee:0a:4d:6e:12:8e:27:01:42:50:e5:
65:b5:b4:03:69:c3:fa:34:e6:df:67:e8:d7:06:c0:
92:b7:a3:3f:3b:7d:08:1b:00:c3:96:c5:f5:13:22:
45:ea:aa:ff:39:f2:68:d9:30:ed:74:e7:08:ee:ec:
6e:75:04:2e:ca:e3:3a:ef:38:d5:28:43:b3:1e:2b:
9e:56:dc:15:a7:2b:57:df:14:98:8f:b1:de:44:bd:
f0:4b:29:59:1f:bc:8e:6d:64:0c:24:c6:8f:39:ac:
31:2e:c7:c4:25:99:03:41:95:17:2d:08:d6:19:d4:
05:fc:4d:d4:46:35:1c:46:29:fa:b5:65:ff:4a:00:
10:e0:62:2d:55:d5:6b:bc:f9:7d:2d:70:7b:56:d0:
1b:a5:f3:ae:cb:d2:3c:a5:c9:fb:5a:d6:fd:f1:49:
f4:51:c0:ca:91:6a:a6:24:e4:b1:5a:a9:f8:5e:bb:
de:c6:3e:6c:9e:9d:30:39:d6:8e:51:a4:ab:5b:eb:
5a:52:99:34:b5:f0:ad:72:5a:09:76:c6:16:a1:90:
88:e8:f9:6a:55:b6:04:be:70:60:64:33:e7:37:ed:
39:66:b5:eb:bd:c2:3b:99:71:16:01:c7:65:6c:c1:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:C1:A7:C3:D1:66:2F:2F:1E:DE:67:B3:F2:1E:16:30:19:7E:D1
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:79:25:a6:a1:eb:e6:d0:51:dd:38:14:c8:0d:e8:44:d9:b3:
ac:9e:1b:38:24:3a:28:80:dd:3e:3d:84:ec:df:32:b4:7a:16:
ff:c6:e4:e8:48:0d:4f:39:9d:f2:97:1d:28:36:05:39:8d:5d:
69:f9:8f:07:d2:35:98:62:f6:c4:d1:9a:0b:19:7f:43:d0:15:
30:76:b2:75:29:12:31:75:1f:a9:24:64:f8:ce:e4:f3:a9:49:
55:b7:2f:b0:b3:e6:7f:78:ff:02:20:ba:e8:47:37:cf:6f:95:
92:e4:77:95:64:35:92:a7:bb:86:b3:08:8d:5f:0d:fa:1c:a0:
5b:8e:41:06:50:a1:d7:df:76:ae:d2:1e:c3:00:5c:da:3f:5e:
e0:d2:1d:98:96:31:eb:d5:f0:aa:11:be:28:0a:70:04:9b:f9:
0a:de:69:7a:67:b8:fc:2b:e5:f2:e0:ca:80:30:05:01:ee:da:
38:16:15:5a:bc:3b:70:75:fb:a0:73:6b:b9:2e:41:d7:a2:bc:
54:0e:70:cc:7e:19:53:d3:9c:bf:c7:10:1f:60:12:8e:9b:e6:
05:77:9e:4d:91:08:43:fe:56:14:21:3f:3a:ad:c6:3d:34:d6:
61:19:19:9a:57:58:b7:0b:3e:af:d2:f1:9d:36:f5:ef:ba:48:
c9:0a:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:13 2025 by rpki-client