Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: INQ8Iu/MYwaZzSZRrEULIubFI2zYcbZv9uROLcVabMw=
Subject key identifier: 25:7D:EC:76:BD:69:2C:98:45:8B:90:72:E0:69:BD:CD:69:50:91:1B
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 0196CF4F9F218A861AA68F9CBCD1832C0DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 15:00:23 +0000
Manifest this update: Wed 14 May 2025 15:00:23 +0000
Manifest next update: Thu 15 May 2025 15:00:23 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: 0iA4hcsBDnmMW3E/dfOWWlfG1zoHhfC3TgPPMg79vIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:9f:21:8a:86:1a:a6:8f:9c:bc:d1:83:2c:0d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: May 14 15:00:23 2025 GMT
Not After : May 15 15:00:23 2025 GMT
Subject: CN=257dec76bd692c98458b9072e069bdcd6950911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:e7:ae:c1:e4:24:80:db:45:a5:78:17:cf:
be:91:d7:1f:9b:60:c2:12:43:01:38:67:b8:b8:8b:
02:3c:67:7e:04:54:24:40:88:cb:2e:51:83:8d:d9:
b4:5f:ed:16:a9:a1:3b:cf:6b:72:06:8e:5e:e1:69:
a4:21:31:7c:70:9f:03:0a:bf:91:61:11:16:65:ae:
1e:d0:70:66:97:50:4f:01:68:05:b7:7f:f5:1c:fe:
3b:7f:92:d5:55:6a:12:f6:c6:d3:5e:61:58:e1:f0:
df:5e:e3:b5:d1:0c:4e:53:64:55:c4:d6:04:7b:92:
48:cf:78:51:da:0c:29:86:40:9c:86:7a:16:b8:6a:
a5:65:22:ae:e7:11:f5:5a:1e:5b:9f:b8:bd:b1:f0:
2f:0b:a5:51:c9:98:d3:c9:d9:90:60:ec:27:c5:41:
8c:70:4a:85:2e:8e:3b:bd:d3:71:d4:fa:b4:4a:62:
7a:3a:25:e9:9d:df:30:f2:83:90:3b:50:32:6d:4d:
63:3d:d7:e7:f6:3d:97:45:30:a5:77:2e:81:ce:b0:
71:49:77:17:53:90:c2:36:16:6d:10:16:7f:2c:c5:
60:79:86:2d:41:aa:c3:9f:b6:ec:4c:ea:05:be:72:
86:f0:54:ff:1c:eb:b1:be:5b:c4:f7:a1:5c:d5:22:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:EC:76:BD:69:2C:98:45:8B:90:72:E0:69:BD:CD:69:50:91:1B
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:74:0a:87:c0:9c:50:d3:b5:dc:c7:08:8c:fa:47:10:0d:0f:
6c:7d:fb:f8:fc:a8:d1:a1:e3:83:ae:89:7e:00:da:3f:de:16:
e4:71:e0:59:ec:f4:8d:bb:2a:45:6b:1b:93:6a:82:98:8e:7b:
78:60:28:c9:4c:19:6d:10:5e:4f:43:eb:8b:88:d2:31:44:9f:
a5:1b:25:22:0f:2b:33:9a:c1:ec:a6:eb:24:c9:ff:29:f8:35:
81:ee:a8:00:4d:52:aa:fa:49:99:42:37:90:0d:d8:01:ff:91:
30:c4:d7:94:76:86:7a:a8:3e:ac:8c:1c:6b:a5:e8:b9:e5:0f:
79:97:63:bc:15:6a:4f:11:0d:a0:c1:43:eb:59:e1:d7:70:a3:
d9:10:fd:be:81:9d:34:ed:20:6f:d0:32:af:41:8c:12:4f:1b:
b0:a8:65:9c:d1:4e:f5:bb:1b:d2:ab:21:35:ad:9d:ef:9a:91:
7b:25:c5:cd:f7:cc:9e:09:19:f8:52:40:55:85:f6:c6:e2:d0:
44:a3:ed:d7:fd:2a:bc:26:d9:12:3a:52:3e:01:82:02:bc:31:
f1:6d:08:da:b1:4a:70:56:23:bd:71:7b:98:3b:50:48:da:d7:
13:e0:7a:a3:52:c5:b2:29:e4:f4:ad:c3:46:d6:73:0c:2c:b3:
bd:0f:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:05:16 2025 by rpki-client