Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: N+8kOCUHyd5zBPCULBll0W/t9vZPzM2MFp3/093SQHo=
Subject key identifier: 6C:8D:91:67:AB:D7:3F:79:98:28:89:06:81:F7:8C:3D:1B:8B:B2:A4
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0196CC17D00C5158B2892F77C0D43491DA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1539
Signing time: Wed 14 May 2025 00:00:34 +0000
Manifest this update: Wed 14 May 2025 00:00:34 +0000
Manifest next update: Thu 15 May 2025 00:00:34 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: /81jZHL4C099D3jvrNC0DgoDGX/1mIfEr/AEbAm9+Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:d0:0c:51:58:b2:89:2f:77:c0:d4:34:91:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: May 14 00:00:34 2025 GMT
Not After : May 15 00:00:34 2025 GMT
Subject: CN=6c8d9167abd73f799828890681f78c3d1b8bb2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:12:6f:49:72:e8:1c:9b:d1:c4:18:f4:bf:
63:45:d3:53:a5:32:8d:5c:d2:4e:28:72:e2:8f:e0:
a8:c2:f2:3d:a5:3f:a8:b6:dc:2f:23:6a:69:c4:09:
56:54:dc:14:d7:ac:ff:a7:cf:8d:35:3f:44:07:f0:
79:34:44:78:40:32:e3:6f:83:ea:74:66:1c:58:e5:
7a:32:ad:eb:c9:23:72:65:ec:7a:32:b4:b6:d9:c2:
99:65:b6:bc:81:de:dd:61:a2:c1:e7:85:bc:61:86:
86:35:c2:93:98:9b:df:2d:bc:d8:20:6b:2b:eb:6b:
86:ab:a5:22:95:fe:ff:e3:c4:72:31:f1:3a:58:4b:
b3:63:7b:46:3f:75:7e:0e:dd:d2:88:8f:3f:4f:bb:
36:6e:21:7b:f1:6b:43:8b:a4:18:7b:f5:85:31:e9:
8c:e7:95:3b:db:e9:42:72:47:03:e2:05:d9:78:ce:
71:76:18:fe:05:5b:98:b9:86:f1:9b:ed:73:15:94:
c5:82:58:af:53:ed:ad:15:c8:17:f1:ec:b6:a5:de:
30:c1:e1:21:73:37:43:47:07:6f:22:c7:bb:54:ab:
7b:8a:33:b8:cd:be:f3:96:c5:25:9d:bf:c1:15:02:
97:df:e6:49:2d:f1:9f:f8:0e:df:84:ed:99:22:e9:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:91:67:AB:D7:3F:79:98:28:89:06:81:F7:8C:3D:1B:8B:B2:A4
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:02:a0:6d:27:67:ec:9c:bb:ca:22:ff:de:a8:28:8e:a7:
05:9a:f8:36:8c:0c:07:83:a4:45:c1:8f:bb:f2:04:88:ba:37:
da:63:22:f8:e5:26:6d:2f:7d:01:a5:a1:c9:94:02:bf:c9:24:
e8:70:35:fd:5f:2b:f3:37:46:83:68:53:38:62:82:cc:87:87:
32:5a:e9:7e:44:b3:af:04:37:38:3c:c7:1d:26:7b:a8:1e:20:
72:0e:ef:6c:12:06:53:28:b9:fa:0a:c5:e4:e2:f2:bf:62:9c:
30:87:13:30:f1:13:d7:21:be:ae:4d:14:af:df:03:3d:20:e4:
77:c0:42:79:4f:57:99:6a:42:28:70:98:a9:ce:b9:d1:39:ee:
48:b3:0a:8a:f8:38:80:20:b9:df:8f:2f:f5:ba:6d:cc:c0:1d:
04:36:45:72:b4:83:ec:74:fa:c6:a6:e0:57:ef:b3:f1:30:ff:
c1:fc:b2:3a:71:58:7b:29:52:19:36:cc:a9:77:66:2b:fc:62:
8e:fa:76:db:3e:03:8c:d4:a5:cb:6b:9f:14:fd:08:a0:7a:d3:
08:56:bf:b1:04:7b:62:af:00:ed:79:1f:ba:f6:72:45:bb:be:
0d:e5:ff:7a:b7:73:6a:40:7c:47:48:b5:7a:2e:00:c7:f6:9d:
66:76:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:00:39 2025 by rpki-client