Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: ti3fTpYa2bx4XGSRd3oYmyZPzckZDq2GgR3/dsqSavk=
Subject key identifier: AF:29:B7:5F:C5:7B:24:94:DF:BC:A1:AF:7B:F6:96:CA:C1:C8:08:0A
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 0196BDEE1E7AF5D8F1A4EC905A6C9BF5241F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 06:00:21 +0000
Manifest this update: Sun 11 May 2025 06:00:21 +0000
Manifest next update: Mon 12 May 2025 06:00:21 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: Zr19ji5r38u8i1gUwebOWE3rCcOgAV7CyraTjSFsxlI=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:1e:7a:f5:d8:f1:a4:ec:90:5a:6c:9b:f5:24:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: May 11 06:00:21 2025 GMT
Not After : May 12 06:00:21 2025 GMT
Subject: CN=af29b75fc57b2494dfbca1af7bf696cac1c8080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:9b:66:ee:9b:a9:4d:c8:7f:41:60:50:70:
7f:ef:27:cb:32:9c:3a:8d:52:db:13:9b:78:0b:08:
16:82:33:c8:4a:90:36:e9:0e:80:b2:43:cd:bb:e5:
3e:70:94:6e:e2:d8:19:b6:91:34:a2:be:2e:03:91:
6f:84:8d:bb:1c:3a:6a:bb:12:f2:81:73:98:3c:a9:
f5:ee:d9:d1:c8:2c:84:8f:7d:c0:0c:c8:74:04:7b:
85:a5:8a:12:f8:02:f5:23:e0:25:de:8f:9e:5f:1c:
a6:04:79:7c:d2:66:43:1d:01:72:48:92:3e:c4:07:
54:a1:56:97:46:d2:3b:cb:c9:46:54:4a:9f:7d:09:
e9:b5:92:2f:f5:68:1c:2d:9d:93:4e:81:aa:ff:95:
37:10:72:8c:9c:77:db:42:fd:28:1a:0c:61:29:13:
65:78:a1:58:ff:2f:c6:3d:6f:8b:44:f2:66:e5:5e:
07:db:70:07:88:b0:7a:9c:e4:3d:20:7f:d9:6d:cf:
e6:79:b5:5e:36:c5:cb:56:fa:b1:5d:2f:f7:08:53:
1f:c6:ac:91:ea:15:ba:a9:6e:24:ac:f5:8e:28:58:
c1:f7:d7:e3:17:c1:a9:80:1e:a0:c5:32:65:1a:ba:
33:51:a2:48:3e:19:80:a5:11:62:a0:0b:18:75:35:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:B7:5F:C5:7B:24:94:DF:BC:A1:AF:7B:F6:96:CA:C1:C8:08:0A
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:d7:c9:d6:8f:79:73:d8:cb:56:fc:bf:88:c0:db:0f:ba:
90:f9:16:fe:ca:7e:9f:e0:6d:58:c9:cc:35:8c:5c:5c:ea:ca:
a3:de:c4:0d:96:54:5c:81:6b:aa:36:d3:ac:b0:39:59:03:bd:
5a:ef:95:2a:d5:78:7f:3c:67:c2:a0:bd:8a:f5:4d:58:f9:79:
bc:84:2d:d3:1c:c0:6f:b6:f3:b5:3f:52:5e:73:a0:e0:c4:b8:
33:ee:90:00:a7:1b:ae:5f:5f:98:3b:8e:92:51:59:5e:42:03:
97:dd:6e:f0:fe:3c:35:58:30:8d:22:7c:1d:43:7a:e6:46:91:
c6:ca:4f:59:45:97:fd:43:18:6b:aa:bc:b7:e9:16:b4:e7:e1:
b1:1e:65:46:48:8d:bb:b0:e1:32:c8:b0:f8:9d:e8:a1:eb:04:
6a:e2:29:98:22:e3:e9:a8:94:40:b2:8c:1a:3a:50:02:48:e0:
4a:a4:af:d4:98:08:ca:02:ee:38:75:f3:99:e3:27:45:b1:0f:
78:86:79:fb:36:47:a7:ac:95:5d:a5:ec:b4:52:91:7e:cc:73:
a4:d9:27:5f:a3:26:4c:06:66:5c:6d:56:23:73:01:ef:40:c5:
e7:43:cb:d5:01:72:83:48:f4:2f:0a:c8:83:a4:26:9e:51:2e:
85:a6:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:37:30 2025 by rpki-client