Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File: fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier: Lc+IMathl801SWo3Q3g7qijEd6r3S3EGOGBUWp3RBz8=
Subject key identifier: 52:D2:4E:10:21:90:2F:67:42:21:C6:DA:8C:15:E1:1A:49:16:E4:57
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 0196CFBDC91D2CF2AC980C18215CE1E8B6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number: 1541
Signing time: Wed 14 May 2025 17:00:43 +0000
Manifest this update: Wed 14 May 2025 17:00:43 +0000
Manifest next update: Thu 15 May 2025 17:00:43 +0000
Files and hashes: 1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: V3k3cVSrNKFkT4xNv1+FLj3LzgOVyOWk5lIwGA/cP2Q=)
2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:c9:1d:2c:f2:ac:98:0c:18:21:5c:e1:e8:b6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: May 14 17:00:43 2025 GMT
Not After : May 15 17:00:43 2025 GMT
Subject: CN=52d24e1021902f674221c6da8c15e11a4916e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:35:3c:fb:06:73:af:19:5e:fd:ba:81:ab:
f3:bd:ad:20:83:cf:72:2c:68:29:6d:cd:cc:05:44:
b7:61:26:13:ef:9c:ee:89:4f:de:0f:16:c7:8c:ca:
e2:0d:07:bc:2d:fc:04:8c:1f:2d:f9:da:dd:67:74:
5c:7f:33:2e:59:6e:f6:91:72:da:dd:51:45:79:03:
a9:9b:4d:09:b4:5a:82:f7:91:7f:7b:ed:8c:1b:4e:
be:86:fd:ca:99:45:7d:ee:c1:04:fd:b3:9c:b3:6e:
2a:3d:bf:b3:9b:9b:dc:b0:71:71:01:5e:08:c3:af:
ca:ff:c3:51:2b:ba:38:98:5a:20:9d:cf:21:67:b7:
e4:7a:4b:a5:56:1c:c7:e1:7b:86:b4:b9:d8:e1:09:
68:44:9b:1a:7b:7d:36:e8:66:35:7a:8b:f5:a7:84:
31:d9:2b:76:03:9a:86:52:c5:4a:c4:eb:c4:0e:2a:
ad:0e:b3:82:d5:03:02:d4:2b:c3:1b:92:f7:07:65:
7e:3c:a5:e2:8d:56:08:4a:5a:bb:be:09:83:bf:4b:
96:f6:07:3c:20:7c:e5:d0:fb:88:65:fd:7f:ef:b2:
af:d0:23:49:b8:a8:d2:9c:1e:32:9f:c8:f3:80:66:
f2:14:7f:c6:5f:59:23:14:22:64:fa:cc:73:66:fd:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:4E:10:21:90:2F:67:42:21:C6:DA:8C:15:E1:1A:49:16:E4:57
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:ff:2a:a3:a5:f8:5d:6c:43:e8:3b:c0:c2:cf:f1:95:7e:
f2:d9:41:e2:7a:43:98:96:ce:11:8f:5b:8d:c8:fc:fd:70:53:
ed:a7:19:5d:9b:6d:9b:31:f3:84:a0:da:e5:74:c5:0b:18:4f:
2b:78:bc:d2:45:53:30:97:ca:bc:3e:1c:94:60:d1:40:9d:ef:
5f:62:28:39:3f:92:69:2e:8f:d5:e0:85:62:cd:18:86:f1:f2:
17:96:e4:9b:f2:74:fa:5e:58:4e:fa:11:09:cb:ca:ab:28:40:
a7:5d:17:0d:9e:a5:f3:74:5c:cd:94:95:fe:33:01:3b:e2:38:
c7:f9:19:d2:00:10:00:72:72:ea:98:e0:cd:31:74:87:6f:a9:
42:e4:85:9c:01:8a:ad:14:22:09:1d:66:19:58:32:d0:05:52:
f5:26:ce:2c:3c:13:31:e6:26:5b:1a:be:6b:bb:95:f7:ac:f2:
7e:68:8d:e4:05:f6:f2:6a:85:ce:10:3c:40:10:70:2f:28:f0:
ce:97:87:8a:fe:2c:0b:16:de:9b:49:3d:e0:73:57:04:28:1f:
1f:74:f6:6b:c8:c7:3d:07:a4:2b:a0:41:24:39:3e:60:15:c6:
10:42:d8:32:16:0a:dc:dd:62:f1:d1:7c:d0:f4:e1:74:e8:a7:
2b:0a:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:55:18 2025 by rpki-client