Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: rOpDe0yiTQVLzm9njaUXT1Bm1J7Iqh29lq5Ec5xLSes=
Subject key identifier: 36:74:A5:16:E9:56:E8:5A:D9:85:E4:06:3A:4E:71:9B:8D:50:E3:4A
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 0196BBFFF6C8BEA672421D52485DAA42E2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 21:00:36 +0000
Manifest this update: Sat 10 May 2025 21:00:36 +0000
Manifest next update: Sun 11 May 2025 21:00:36 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: IsG72JBUkju/UFipWn0SmV8LVdydfOXj+FkHxtMfRjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:f6:c8:be:a6:72:42:1d:52:48:5d:aa:42:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: May 10 21:00:36 2025 GMT
Not After : May 11 21:00:36 2025 GMT
Subject: CN=3674a516e956e85ad985e4063a4e719b8d50e34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:d4:18:32:cf:f3:13:df:20:c5:8d:be:e5:
fc:38:86:b1:a7:8c:e2:94:a0:64:9c:c1:95:ec:d3:
98:fd:e6:00:1e:46:39:e8:67:2d:d5:c3:b3:4b:8c:
57:14:b2:c1:85:cd:5c:b5:06:99:e9:1e:c6:16:1c:
64:cb:f7:63:6d:d5:da:aa:29:56:f0:1c:46:89:e4:
6c:0b:67:f6:64:ae:6e:53:cf:91:e7:a1:39:33:32:
d5:5c:1a:84:66:43:e2:89:7b:a8:ec:9e:43:2c:84:
2b:7c:bb:9f:27:a3:4d:b4:7f:d6:4c:26:57:3c:4b:
cc:96:1f:29:ef:72:db:a7:ad:be:09:aa:9e:5c:4b:
a9:47:93:b7:7a:c9:9d:89:e2:70:41:34:ba:62:23:
b9:2c:8c:b3:ed:82:66:1c:dd:2a:b2:7d:4a:50:03:
fa:2b:1a:eb:0a:98:81:28:65:ec:d2:dd:03:05:ff:
8f:87:f7:32:18:24:8c:14:29:15:be:65:0e:9c:18:
ec:34:77:c1:f5:ea:97:66:1a:82:28:ef:18:18:c7:
b8:6e:36:a8:51:b9:e7:d8:f9:61:b0:75:34:c7:1d:
68:7e:1a:47:89:5b:ab:89:63:6b:29:c2:7c:a6:56:
74:02:df:79:23:31:11:5c:98:0b:e3:b2:c9:43:d1:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:A5:16:E9:56:E8:5A:D9:85:E4:06:3A:4E:71:9B:8D:50:E3:4A
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8e:82:50:35:8a:40:c3:3f:fc:4f:72:d5:14:32:99:b7:8a:
91:55:64:0a:12:3a:f5:83:5f:76:cc:a4:c1:fb:5b:76:d5:ec:
a7:a8:3e:24:ca:be:4c:f5:07:3f:dd:3a:4e:92:a5:55:26:65:
68:e3:9e:05:43:9b:4d:a5:f0:1e:4a:0d:0b:58:f1:b4:e0:cc:
ef:ae:af:62:b2:94:c8:ca:87:a6:72:11:7b:2e:c7:26:72:ae:
78:b5:31:3d:4b:34:21:f0:52:a3:64:27:12:ec:df:2c:37:2f:
97:40:70:28:6b:08:7c:5e:2e:9d:76:20:51:01:35:73:a1:3d:
4a:7d:ec:f7:72:b2:10:3a:eb:f8:2c:fb:4d:7e:a7:91:d3:e9:
d5:ec:36:64:50:38:0a:a2:2e:2b:a3:6d:b2:4a:df:3c:b9:3f:
3c:a3:d9:77:af:1b:46:56:97:49:52:08:a4:62:90:bb:b8:8b:
ee:06:2a:9c:d5:35:c0:68:ed:92:93:ea:89:48:df:02:1c:d0:
1c:8d:5b:7b:1e:a8:54:0f:fa:ed:6f:35:19:3a:63:d9:c9:82:
5c:90:16:8f:68:30:e3:55:00:4e:7c:3c:cb:ff:f8:c6:8d:17:
5c:e2:e9:f9:12:49:0b:9f:bd:fb:1b:40:50:03:b5:09:1e:c2:
fd:db:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:06:13 2025 by rpki-client