Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: vlM3H4RNcdRVdYX+ASPa4mSeqQgkxavmrNpdGfy6kfc=
Subject key identifier: 4C:8F:C7:FB:26:A7:15:85:20:D5:29:F4:AB:F0:25:7A:E1:B5:AE:37
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 0196C38251E29305E44BB395E1EE043C5347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 08:00:19 +0000
Manifest this update: Mon 12 May 2025 08:00:19 +0000
Manifest next update: Tue 13 May 2025 08:00:19 +0000
Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: 7jPmSvc3h6kXkbrUYcyj3QfSput/fIf7zaTNlGP+3jA=)
3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:51:e2:93:05:e4:4b:b3:95:e1:ee:04:3c:53:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: May 12 08:00:19 2025 GMT
Not After : May 13 08:00:19 2025 GMT
Subject: CN=4c8fc7fb26a7158520d529f4abf0257ae1b5ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:f8:9f:89:80:19:c4:56:59:b9:fe:09:c5:
79:51:59:36:b6:53:67:78:9a:8a:e4:57:cb:8b:18:
9c:bf:23:6e:12:68:54:27:d1:ba:59:c3:0a:76:bc:
9a:70:46:20:5c:1e:f0:91:75:73:25:3d:21:0d:42:
b0:8f:f3:22:b2:c3:b5:45:b3:01:00:6b:9e:56:21:
0a:7a:43:12:8b:50:1c:ce:a6:13:84:00:c5:dd:09:
e0:be:74:01:56:88:bc:35:27:c2:82:e9:d4:fc:05:
46:11:b6:53:20:24:e5:43:3b:9a:b5:4a:65:6f:4a:
90:08:a6:77:05:16:81:ca:d1:d8:cd:45:4c:ea:e4:
3d:3d:78:1d:be:ba:23:3c:8c:d9:80:cc:6a:5f:d1:
58:cd:77:c4:3f:60:32:4b:bf:2c:88:80:66:ec:73:
bf:89:0b:53:9c:b2:59:71:e4:37:8a:94:bd:37:cd:
4a:2c:6e:fb:33:dc:05:a6:65:f4:42:28:d8:21:15:
40:46:c0:43:0d:9b:e0:65:20:0e:7c:38:c0:4a:5d:
2a:55:f4:e3:61:a3:38:17:a9:19:ad:24:87:08:64:
79:92:75:cd:b4:3b:dc:88:8e:40:4e:15:0c:23:72:
f0:c2:fa:2c:f9:f8:11:62:7c:37:c2:0d:aa:08:03:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:C7:FB:26:A7:15:85:20:D5:29:F4:AB:F0:25:7A:E1:B5:AE:37
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:51:c5:9c:af:a1:99:e0:61:dc:c3:33:2f:1d:27:16:cb:
af:90:4a:2a:bb:9d:04:29:df:77:9c:e0:15:fa:20:0a:73:70:
0f:3d:92:8f:a1:6a:36:35:0f:6e:df:33:37:07:4f:73:4b:a8:
59:44:6c:af:21:28:23:a5:e2:f1:0d:6d:34:97:74:8c:9e:fe:
60:35:8e:16:96:3f:a0:5a:6d:e5:2a:89:14:54:ea:32:c2:aa:
b4:24:ef:c7:b8:64:25:43:49:2e:5e:46:e6:58:05:4a:b7:0b:
cd:64:72:bc:28:e3:c8:08:99:b2:99:35:16:b5:7a:5c:9e:dd:
ef:77:77:91:9b:d6:ac:c1:d6:9e:66:ce:27:f9:53:26:f2:51:
7e:a2:34:fd:44:ac:3d:14:78:f8:90:e5:27:8c:c2:e0:fd:8f:
c1:aa:55:83:9c:3a:f8:a9:56:9f:5f:5f:c9:c8:6c:99:da:34:
e8:bb:97:fd:4d:68:70:37:1b:ab:c5:80:73:95:43:17:57:ba:
dc:4f:19:ae:72:8d:9d:cf:18:e7:10:5c:b2:84:6c:01:03:19:
ee:20:51:f3:cb:ab:d5:8e:25:d2:dd:1a:0b:9d:5d:8c:ba:78:
27:4b:ba:0c:4c:11:32:c7:ec:93:bf:10:a8:40:82:5f:8e:21:
d8:31:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:34:05 2025 by rpki-client