Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: XjtM5axnmUXp9lxakuddE3evxAbSoKkto6/lLl7CNsk=
Subject key identifier: F1:18:AC:46:F7:A4:7A:C4:9C:1F:8B:8D:19:C6:94:6B:0F:47:EA:99
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 0196C4CBE15A9D923477F51CE01B154BD3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 3D
Signing time: Mon 12 May 2025 14:00:17 +0000
Manifest this update: Mon 12 May 2025 14:00:17 +0000
Manifest next update: Tue 13 May 2025 14:00:17 +0000
Files and hashes: 1: F3DOLE5K3SRI-yftGoL776n2Pc8.roa (hash: Co0i7Guux1tIvlPJLEcDQZQenNX80PwFKntZNjYzEKI=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: 5kzCnFBZXZ2J4PUW9MKuJmTGBVTE3a2+uNlU4E0eyH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:e1:5a:9d:92:34:77:f5:1c:e0:1b:15:4b:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: May 12 14:00:17 2025 GMT
Not After : May 13 14:00:17 2025 GMT
Subject: CN=f118ac46f7a47ac49c1f8b8d19c6946b0f47ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:84:f8:cd:c8:14:88:1f:a1:53:24:d5:0c:
91:7b:76:15:65:1b:9e:c6:58:f7:79:58:57:30:69:
47:d3:42:b7:35:e8:ce:a1:04:a9:ff:c1:36:27:7e:
41:68:2d:0b:25:2b:82:f4:ce:42:ee:33:da:b4:6a:
16:7e:34:ef:45:f3:bb:b4:7d:23:9b:82:98:17:42:
67:bd:f4:0b:6f:a7:0a:89:53:5b:6d:34:44:ab:c0:
8c:8c:66:c7:e5:2c:33:71:1d:b3:f6:5e:c2:36:95:
96:56:42:b7:d1:32:36:9d:01:91:78:8b:53:15:7e:
f4:70:96:21:79:67:81:c1:3f:b7:7a:28:40:fe:05:
4f:02:d1:fe:6c:ba:5e:f1:79:42:6d:d9:a8:98:69:
fd:e3:dd:d2:a2:bd:54:92:4b:cb:6f:9f:0b:aa:8f:
ab:b1:53:d8:34:97:ae:7e:be:29:0e:22:c1:06:d6:
0a:32:98:54:1c:b6:31:cc:be:25:35:70:b9:5d:07:
a2:07:e6:73:a5:89:e2:18:80:43:fe:8d:8d:2b:c3:
d7:7b:10:d0:af:37:b3:ac:18:4c:9a:95:73:a6:02:
95:87:f4:e5:05:26:09:3c:86:d4:e7:8c:31:f1:7a:
77:7f:99:52:c6:f3:6a:07:7f:8d:b0:c6:f7:cc:8c:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:AC:46:F7:A4:7A:C4:9C:1F:8B:8D:19:C6:94:6B:0F:47:EA:99
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:4c:0a:56:c8:aa:da:b6:6b:a6:5b:70:31:16:bc:b8:1a:
7a:14:2b:71:76:23:d6:00:1e:38:c8:bd:ed:cb:4e:33:aa:81:
31:ae:12:67:d5:45:70:18:e8:c7:43:0c:98:95:45:b8:5c:d0:
79:1e:1a:41:4e:41:1f:b2:6b:0b:5f:ce:9e:f3:fb:16:69:e8:
be:da:42:47:e1:af:76:36:8e:2e:02:8d:26:15:c3:f3:8a:bc:
3f:ae:53:4e:aa:46:fa:90:7b:f1:25:2a:62:54:c5:b9:bb:41:
88:29:d8:19:cc:ce:92:33:01:02:e9:bb:b9:e8:0f:09:4d:46:
f6:c1:ed:5d:3f:47:da:1f:85:86:93:77:ac:16:7c:4a:eb:13:
be:9f:a4:bf:a2:72:16:d4:24:52:bf:b3:47:46:d7:8d:cf:e3:
4f:17:be:62:76:68:5a:30:2c:9b:c5:8a:32:37:02:db:92:00:
04:93:4d:10:3a:3a:24:1d:ef:7d:6a:1c:a6:af:89:a2:fe:b4:
fb:9f:e7:e1:98:5e:81:66:a2:9a:54:60:62:71:75:b7:49:06:
8a:16:f7:1a:70:22:23:ed:5f:b9:67:48:a9:c0:65:d7:ed:2c:
63:9b:9f:db:05:9c:b3:f1:d5:4a:a6:a0:9f:ea:ee:39:f7:40:
20:ec:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:42:23 2025 by rpki-client