Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: 6OETUwH3tOFs+IBPEGyqO/kHGzV/dDyUvxj/tdldL2o=
Subject key identifier: 41:9B:E7:F1:73:D4:66:10:BD:06:9E:6D:C7:33:8C:F3:B9:46:A0:3B
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 0196D2F5DC811820B86E3E74EF4FB6586B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: F7
Signing time: Thu 15 May 2025 08:00:50 +0000
Manifest this update: Thu 15 May 2025 08:00:50 +0000
Manifest next update: Fri 16 May 2025 08:00:50 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: /l0Q2IDbm9eoQrGv508WfKOmLcCdKwQEA4tm/cbYshE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:f5:dc:81:18:20:b8:6e:3e:74:ef:4f:b6:58:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: May 15 08:00:50 2025 GMT
Not After : May 16 08:00:50 2025 GMT
Subject: CN=419be7f173d46610bd069e6dc7338cf3b946a03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:de:78:87:14:2f:f3:77:79:8f:21:e7:1b:
bd:1d:74:8d:ef:92:35:34:6c:1e:44:e1:ad:e2:c5:
e3:e5:b8:22:ef:80:ab:2e:46:08:f9:d5:d2:86:75:
ed:78:7c:39:09:5f:7a:c3:38:70:13:53:d2:1c:37:
59:cf:ac:45:6a:fe:2d:89:27:a9:93:6b:82:39:4f:
42:0c:96:8c:49:42:b4:0c:b2:49:1b:27:d8:11:39:
32:33:19:77:78:f7:2f:53:5c:fa:a1:a6:53:84:55:
c9:f0:d2:fb:d6:4b:53:08:19:a8:05:50:0a:78:52:
12:ea:dc:24:a9:07:47:48:d2:a5:69:89:a5:1b:e9:
99:45:95:2f:37:99:1b:6e:28:80:ca:64:3f:d8:aa:
99:58:2f:2e:55:cf:8e:2c:2c:2a:d3:80:f1:2d:10:
1a:3a:47:62:f6:ba:e9:0b:a7:aa:ac:ec:84:ff:4c:
0d:d5:2d:08:cc:8c:c2:3e:20:b7:39:46:b7:35:34:
fe:5f:61:71:07:92:2a:32:74:a3:65:a7:69:4f:d8:
fb:33:bc:8c:d0:56:e9:15:1d:00:ac:10:15:9a:a0:
64:96:91:b0:24:d9:8f:19:07:bd:5d:04:cc:fe:fc:
3f:f5:e8:e4:aa:b5:2c:78:94:75:11:0c:4d:fe:99:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:E7:F1:73:D4:66:10:BD:06:9E:6D:C7:33:8C:F3:B9:46:A0:3B
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:57:b7:bc:03:36:82:fe:ed:fd:e7:7d:6c:c0:33:b3:88:a3:
bf:b8:9e:f1:3b:66:4f:a8:40:26:aa:08:89:68:94:55:e8:b7:
9c:bc:d7:b2:99:ae:81:da:93:f4:94:ae:df:8f:b3:03:54:37:
46:7d:44:31:7f:01:d5:be:2d:5d:78:07:2a:30:92:40:30:ba:
7f:b4:4b:be:b1:3d:00:ee:02:ce:86:73:fe:82:b3:b1:0e:47:
74:d3:18:67:83:e5:24:03:ad:64:e5:1a:86:b8:d1:31:71:07:
54:45:c4:8b:55:d3:dd:c6:5a:25:95:46:19:cf:bc:2a:67:e5:
97:4d:93:e1:5e:c6:fd:51:50:f2:5f:c3:87:3e:bb:00:28:32:
48:75:c1:bf:bc:91:eb:eb:c8:b2:5a:7a:f7:11:8b:f6:30:6b:
82:b3:fb:e9:a9:a0:e3:b1:b0:e5:db:9b:cb:c0:7b:23:51:f1:
6f:8d:d7:64:ed:0e:de:ce:f9:81:6e:4e:f2:65:e2:3d:2d:32:
df:85:0c:05:ff:bb:13:01:e9:6f:49:00:2a:35:5e:6e:82:ef:
30:5a:12:36:a8:14:77:84:29:be:6e:35:df:69:2d:f7:37:03:
c8:8d:76:ea:3d:22:d0:ca:9c:d4:0b:d7:6c:3f:19:24:2e:54:
42:57:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:37:13 2025 by rpki-client