Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File: Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier: 7LIpAX5EYnQi0rM87DaIX0kIRdSAJ5HUkBcFkLKR6jY=
Subject key identifier: 33:57:EB:BA:5B:06:99:28:68:2D:A6:16:2F:51:D5:45:AC:DA:DC:CB
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer: /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial: 0196C1263ED14B6CA4E69889C273AE0CF897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 21:00:31 +0000
Manifest this update: Sun 11 May 2025 21:00:31 +0000
Manifest next update: Mon 12 May 2025 21:00:31 +0000
Files and hashes: 1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: hA49G49aQIsgKtyv9c34+nal0rg+QSXyvWXx6KRI9KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:3e:d1:4b:6c:a4:e6:98:89:c2:73:ae:0c:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Validity
Not Before: May 11 21:00:31 2025 GMT
Not After : May 12 21:00:31 2025 GMT
Subject: CN=3357ebba5b069928682da6162f51d545acdadccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:a4:4e:95:1c:42:02:b2:b1:f4:95:01:c5:
52:37:82:48:ff:c6:16:99:e3:f5:2f:81:0c:09:d9:
3e:a2:42:5a:b3:0b:0d:8b:c1:42:7b:1f:24:44:5c:
be:41:5f:53:dd:4a:0a:4c:02:b5:bb:a3:5e:c0:c7:
37:d1:60:4b:ac:c9:18:24:c8:56:f5:97:be:7c:a4:
1b:15:f5:8c:60:fa:09:68:25:0b:d4:6f:3c:2c:ef:
be:33:25:bb:c9:22:13:0c:68:9b:ea:27:2f:76:b2:
06:50:28:43:54:c0:69:3d:27:e9:41:9b:c1:1d:33:
de:bd:09:4d:e0:9f:54:f8:70:f8:6d:d6:7e:75:37:
a2:88:f7:e6:fd:11:e2:22:7e:46:ee:b3:2d:c4:7c:
7a:6e:b4:ab:b7:dd:da:b4:3b:ba:ca:9c:b6:7c:ec:
7b:d6:a4:f9:c9:b5:66:ac:56:0e:dd:55:ca:a5:4a:
2a:ef:1f:f1:b4:1b:dc:9b:61:ad:8b:ff:8a:e5:03:
3c:e0:56:f0:78:c2:59:91:81:d9:33:39:81:13:ee:
4e:86:de:2e:9a:30:00:b9:e6:2b:49:2b:e3:d1:f4:
f9:ee:8f:c3:38:01:4a:f8:68:1b:28:b7:9f:f2:d3:
a9:43:f3:50:66:ed:e4:f3:2f:fe:b1:3b:6a:bb:b2:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:EB:BA:5B:06:99:28:68:2D:A6:16:2F:51:D5:45:AC:DA:DC:CB
X509v3 Authority Key Identifier:
keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:18:75:1b:2b:48:2c:a0:2e:62:f7:a6:4d:76:31:29:5d:
f0:22:6f:d5:74:be:b6:fc:6c:17:16:0a:ac:c7:24:36:fa:fb:
ae:44:17:7b:d7:ae:41:4c:a1:2b:13:7d:99:fc:ff:e0:10:a6:
9c:87:e4:b5:52:34:e1:bb:b1:e3:0e:e7:38:76:a5:7d:7b:e2:
41:ee:b5:79:dc:cc:98:01:86:79:69:06:db:4f:40:b8:a3:56:
a2:2e:85:86:15:03:f3:8d:37:22:4f:86:93:46:7c:19:78:e1:
e5:07:1c:01:6b:1a:68:de:bf:26:ed:73:2b:2c:6d:cf:e0:37:
3f:f3:7c:4c:49:dc:ae:33:04:be:dc:af:82:89:8f:c3:d4:eb:
7e:e6:46:89:d5:50:08:c6:96:5c:97:62:6a:bf:5a:b5:90:3e:
f1:be:2a:38:bf:49:2d:36:70:dc:c2:1f:f1:49:fc:93:4f:c5:
79:2f:5c:91:0a:49:d0:ce:d0:0e:7d:5e:49:00:38:9e:7d:88:
a0:d0:cb:40:ee:44:27:6f:d8:e7:a0:55:19:4b:e3:92:29:ba:
da:a6:20:f9:03:29:be:3e:89:44:e9:20:c0:0f:74:ad:5d:18:
78:dc:57:b0:e8:fe:5c:15:1c:e0:9f:39:ce:49:83:89:75:42:
e2:45:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:47:13 2025 by rpki-client