Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: 5exP+eN0+H2DxyE8/d4Fur3OtEWWTLGMtqKk0alS+nc=
Subject key identifier: D9:6D:B7:97:26:08:DB:2B:05:B5:AC:B9:66:8A:1E:EC:4B:A8:BF:EC
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 0196C5DEEC288877025B39BED2C3DF40394D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 19:00:43 +0000
Manifest this update: Mon 12 May 2025 19:00:43 +0000
Manifest next update: Tue 13 May 2025 19:00:43 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: C3JRvdwPFtaFnPLkhH0mBDZ2PRRz9QaHGfaZRCU2JOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:ec:28:88:77:02:5b:39:be:d2:c3:df:40:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: May 12 19:00:43 2025 GMT
Not After : May 13 19:00:43 2025 GMT
Subject: CN=d96db7972608db2b05b5acb9668a1eec4ba8bfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:cb:75:07:f7:9c:e1:05:5c:36:11:8d:22:
91:27:b8:9d:23:43:ea:a9:a8:8e:1b:4b:35:1a:00:
a8:a7:61:29:c7:98:49:84:cd:88:dc:f5:55:68:d6:
99:fd:d4:a4:d7:cd:bc:0d:c0:18:35:37:42:46:c8:
7b:c0:2f:13:96:ae:fd:55:9a:31:33:c6:6d:36:21:
c2:38:71:1a:8f:fc:6c:86:6a:8a:09:e3:ae:ef:d0:
69:90:79:3f:a1:58:a4:56:d1:06:14:fb:38:49:16:
66:e5:00:2b:f8:57:3f:60:d2:b0:05:d6:a9:7b:b2:
8a:21:87:82:1a:57:6b:5d:b6:cf:bd:88:b7:eb:91:
62:c3:b3:6b:9a:ee:0d:0d:ce:44:83:71:f8:88:f6:
24:cb:79:36:a4:6b:15:d5:8f:4c:a4:86:70:2a:59:
c1:51:e1:0b:fa:3e:b7:fb:0e:0b:5c:2c:7b:3c:f6:
ca:c4:2d:f4:33:df:30:bf:3d:e5:5d:1b:f5:cf:a1:
10:6f:92:58:9f:6d:ed:93:30:05:ca:eb:0f:11:2f:
5b:10:74:ec:b1:12:e4:84:b8:26:ea:22:26:c1:73:
c1:b8:f2:b5:98:59:4f:2f:30:ad:96:a9:58:4b:6a:
a0:cf:74:0f:b2:1e:c8:6e:db:7e:08:fd:5a:ef:55:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:B7:97:26:08:DB:2B:05:B5:AC:B9:66:8A:1E:EC:4B:A8:BF:EC
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d7:20:6f:60:c2:8d:05:6b:55:dd:5f:88:10:87:6d:6b:fa:
71:59:9f:13:ae:6c:65:4a:0a:c4:3f:73:6c:ae:24:9c:47:41:
cf:63:b7:59:44:ba:aa:01:75:e1:5d:76:1e:9e:71:35:01:f6:
1f:6c:f1:4b:e0:3a:db:0b:6a:20:62:49:16:0e:44:de:51:a0:
89:77:6a:b5:71:c3:4e:1c:74:0e:8c:fe:a4:57:3b:5e:a9:75:
29:56:08:46:65:8a:cd:13:61:66:b8:da:aa:2c:76:b5:b8:3b:
a7:c0:77:3e:8a:62:17:35:35:23:35:fd:41:9c:0f:fd:1b:b8:
da:c7:b5:c5:8e:0c:11:35:cb:a0:c7:24:8f:3d:c4:dd:b8:02:
39:ae:bd:ef:7b:74:c1:73:1c:da:91:63:e6:79:ee:be:f6:0a:
63:df:f4:12:90:2d:99:23:99:d4:4e:36:8c:14:78:ba:11:7a:
77:10:c2:66:45:9c:36:44:fc:fd:2f:2a:36:28:65:0d:d2:da:
b2:00:bc:b7:e5:00:f2:26:62:79:80:b8:10:0c:9e:7a:1f:53:
cd:b7:f9:11:11:9a:73:cb:cb:50:f5:ef:ef:e4:27:dc:70:e6:
63:11:10:ac:58:32:ac:a6:a8:76:8f:ea:ff:ae:7f:11:ed:e0:
0e:94:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:14:20 2025 by rpki-client