Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: SxRZGzWWQg0jyEe9HKiSK9SKFx8AKKiuwicj0RDSCYw=
Subject key identifier: 7A:D9:58:60:3E:35:19:F5:AF:3E:9B:D1:6F:6E:8B:22:EF:2C:58:AB
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 0196BD8045E9007B8339FF8C8CB49A77D163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 04:00:22 +0000
Manifest this update: Sun 11 May 2025 04:00:22 +0000
Manifest next update: Mon 12 May 2025 04:00:22 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: g0iPCFDXwo2eLBQWFARhrprQlUQSRsg/D83awMD5xOg=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:45:e9:00:7b:83:39:ff:8c:8c:b4:9a:77:d1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: May 11 04:00:22 2025 GMT
Not After : May 12 04:00:22 2025 GMT
Subject: CN=7ad958603e3519f5af3e9bd16f6e8b22ef2c58ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:18:70:1d:b9:d1:ba:a7:2c:e6:0b:96:84:
d8:55:31:3c:52:aa:01:91:69:26:5c:bd:e8:a9:81:
99:4b:98:0f:d1:2a:a2:ae:65:4f:bf:90:ae:58:a4:
0f:15:55:eb:03:bd:76:22:4a:0a:24:2e:95:f6:e6:
15:49:03:d7:20:ff:81:6b:a2:28:54:93:95:56:d2:
22:f0:1a:ec:c4:7e:33:05:fd:bf:57:77:11:b4:c9:
01:af:f7:57:7c:0a:3c:85:47:1d:8e:e0:db:75:27:
99:6b:4a:31:14:49:b7:0a:a2:ec:ac:a9:93:f0:30:
31:a7:63:28:83:6b:3e:7b:5b:92:a6:14:32:92:ea:
d5:5e:5c:d0:a9:a1:7f:c0:80:06:b8:fb:60:e7:2b:
2d:14:95:51:5c:70:5a:44:81:36:81:71:ff:f6:80:
74:61:98:32:f8:f0:a5:5f:0a:88:d9:98:cc:6d:01:
99:e6:33:07:5f:9f:bf:3c:22:a3:1f:32:62:4a:c1:
0e:c1:d4:f4:0b:2a:0c:d7:27:10:63:b7:97:96:b3:
15:e0:ab:a4:3f:0c:8a:cf:82:c7:62:64:dd:19:db:
5e:ed:dc:4c:fc:fd:ab:08:b7:85:47:be:6b:b0:94:
34:34:69:ca:42:3c:86:54:dd:3a:3d:e8:0d:86:25:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:58:60:3E:35:19:F5:AF:3E:9B:D1:6F:6E:8B:22:EF:2C:58:AB
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a4:1e:6a:19:fb:9e:66:67:cc:24:d5:05:4d:aa:2b:54:5f:
b4:d7:35:f9:8a:5f:d3:27:c1:13:41:4f:d7:7c:d6:fb:f1:e7:
da:f6:66:44:21:64:ee:c9:3d:44:27:8d:4b:d6:34:29:2a:11:
86:e6:ea:07:48:5c:d9:14:64:78:01:1f:cd:c8:5b:95:53:33:
f6:9d:34:26:ea:0f:8f:23:64:1e:39:9c:2d:04:f8:a5:0f:fa:
30:ae:94:8c:00:90:c1:e1:5f:62:9d:cf:0f:42:4c:82:32:e9:
b4:e5:01:c8:cc:95:9c:5e:b4:03:07:f6:8c:ee:72:93:c5:8c:
06:6a:62:6a:93:3d:47:32:92:e9:f3:ec:66:01:d2:87:47:d8:
d8:e6:0d:0e:c9:4c:e8:f4:94:eb:c1:9d:4a:cf:ec:1b:23:94:
59:2f:e4:04:02:5e:3b:3c:35:9b:50:2f:fc:0a:48:c2:e4:0a:
9c:73:4e:73:ff:b8:60:1d:ed:cc:05:dd:92:93:a1:c8:0e:b9:
39:1d:ef:1f:55:47:f2:84:87:9c:e7:00:d7:cf:69:63:da:d5:
12:9a:94:f5:e3:d3:cf:15:7a:8e:5d:98:ec:6b:d0:cf:b7:70:
4b:dc:dd:1b:5f:58:e0:1b:1d:f2:9d:3e:ee:c8:bb:26:b8:21:
2a:f9:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:30:09 2025 by rpki-client