Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: LO8TIN4BtPopXgZCvRcy13U/b6TcKcJvzNTTBJNcmtE=
Subject key identifier: F3:80:08:4C:06:C2:23:40:39:04:13:13:52:41:18:F3:DE:8A:CE:80
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 0196AD3149B80794F7F3FA91B4DF633CBAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 00:00:10 +0000
Manifest this update: Thu 08 May 2025 00:00:10 +0000
Manifest next update: Fri 09 May 2025 00:00:10 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: ZbkUqKNjCR3ByJ6aCjfB55PbiEsncBQkQ5yffVwfXVA=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:49:b8:07:94:f7:f3:fa:91:b4:df:63:3c:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: May 8 00:00:10 2025 GMT
Not After : May 9 00:00:10 2025 GMT
Subject: CN=f380084c06c2234039041313524118f3de8ace80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:eb:3a:57:5a:e6:1e:47:54:83:22:a0:4b:
78:d9:a6:16:2a:34:7a:be:1a:cc:4d:dc:a2:43:b6:
43:61:ad:e2:34:44:58:bc:f3:7f:29:0f:79:bc:13:
c3:c1:83:87:1f:8a:9e:c3:25:73:89:84:39:30:6a:
1e:3b:4b:8a:85:1a:ab:b5:b0:14:a7:81:fa:05:1f:
9a:77:79:3f:b8:8a:d7:e4:76:41:5b:df:ef:4b:28:
ed:32:0d:f1:bf:94:ac:6c:1c:e5:a1:4c:18:62:81:
0a:e7:45:ad:a6:e5:19:85:e9:13:b2:09:39:7a:01:
cb:5e:73:6f:9b:ad:92:54:f6:09:a0:25:ef:24:95:
4b:6e:36:d4:52:6b:e4:27:b1:a1:3f:9a:87:88:db:
9e:4f:38:2b:63:c1:dc:83:59:7e:17:78:97:c9:f5:
ea:21:39:0f:3a:3a:f9:74:2f:1c:94:b4:85:43:54:
cf:31:ef:d0:b8:6f:c3:8f:72:6e:fb:fa:d3:6c:d5:
7e:11:b6:a0:86:11:44:34:03:30:fd:2e:8b:50:0c:
39:94:11:c5:fb:5f:30:dd:53:22:9d:3a:8e:1c:01:
d6:b4:bd:ef:64:18:36:1c:a8:bb:66:07:29:c6:53:
ac:b4:03:9e:6d:e1:d8:ec:21:32:95:f7:ed:4b:2d:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:08:4C:06:C2:23:40:39:04:13:13:52:41:18:F3:DE:8A:CE:80
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:9d:95:99:4f:bb:8e:9b:d9:ae:e2:de:a7:09:82:76:88:
31:a4:e7:74:3a:43:08:2b:85:45:48:45:89:91:96:79:fe:b3:
34:83:0b:8b:ab:57:14:76:ac:9e:96:35:54:5e:b1:b5:06:e0:
47:6f:73:40:82:ca:dc:e0:04:52:d7:89:bc:84:c1:84:a2:26:
2d:26:02:dc:8e:5e:bc:ed:46:ea:28:b5:6a:15:07:0f:a6:b6:
64:97:3d:b8:cd:9e:cf:7a:66:82:92:d9:4c:33:18:22:e1:fe:
04:ea:5a:2d:7d:ac:1f:64:52:98:15:b0:a7:66:96:8c:5e:b4:
53:2e:92:29:79:82:dc:b3:83:ea:c0:9c:2f:8e:87:aa:57:65:
93:b6:ed:15:03:8e:54:7c:ee:f4:f4:a3:d5:c6:98:49:44:fd:
5e:9b:f3:b7:32:15:12:c3:90:4f:9e:1b:21:b2:e6:95:b8:f4:
9d:a4:f9:8f:9d:a0:1a:9e:00:65:2d:2c:44:a1:03:a2:fa:5d:
6f:bd:b2:d4:5d:df:7b:44:af:8e:3e:43:8f:65:ab:47:a2:4f:
c2:a7:c6:da:62:2c:38:38:cf:ce:91:d9:30:5f:df:a9:c3:68:
a1:b6:60:cf:a8:1b:c9:a4:23:18:d2:b7:ee:c5:f1:6e:2d:57:
9f:d4:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:35:42 2025 by rpki-client