Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: dQ/8615d0IyGBjoFLO2+3JJ4WB1GTARD5KOxCoDoqNk=
Subject key identifier: 8C:BB:A0:CD:65:3B:8B:33:85:7A:9B:8B:71:CF:9D:35:D5:91:BD:8A
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 0196C64C4E3ADB5AEB958ABCA9E00049B2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1557
Signing time: Mon 12 May 2025 21:00:11 +0000
Manifest this update: Mon 12 May 2025 21:00:11 +0000
Manifest next update: Tue 13 May 2025 21:00:11 +0000
Files and hashes: 1: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: 7tc7V5yFd8iWmK5NXj987XL47eNyfCzxg8tA+RlxjSU=)
2: iyAReQYZi6annFwTzxnNMi_NX88.roa (hash: RA8Tw9Fc/DRqwFBqIp5rQULzzVh8lGYGH4fnEdfI7zE=)
3: onQc6RXgIQfb3aGGII4Ouo46uLk.roa (hash: YBoMTfa2KP4rZrIUbdsss9ucz/bO7zkPPOfx3KzpJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:4e:3a:db:5a:eb:95:8a:bc:a9:e0:00:49:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: May 12 21:00:11 2025 GMT
Not After : May 13 21:00:11 2025 GMT
Subject: CN=8cbba0cd653b8b33857a9b8b71cf9d35d591bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:f6:c2:4c:a4:18:45:79:bc:4a:ba:96:d2:
5b:04:9c:0c:c7:7b:ce:39:27:f2:18:7f:f4:da:74:
e9:0d:14:c9:10:21:95:8d:5f:22:f0:11:f8:47:fe:
4d:1e:06:f1:da:28:f6:0f:47:3c:06:1b:95:46:2a:
5b:19:ae:5b:84:be:47:46:d7:5f:bb:56:2a:b1:01:
34:47:a2:12:fb:d4:5b:1a:82:41:28:d9:1b:0c:98:
07:37:79:7c:7d:da:cd:02:48:3a:a7:a4:e6:c9:32:
73:e1:fe:35:f2:ba:41:60:50:78:0b:5d:bc:69:3b:
0a:cf:14:0f:31:17:6e:df:7e:e1:28:8b:a7:d7:9c:
46:db:25:2d:89:5b:6d:0c:dd:8e:38:d8:fb:1d:5f:
7f:19:56:fb:55:aa:7f:db:c8:22:b7:95:62:4a:09:
8a:6b:87:80:6d:3b:b0:75:fe:ff:c9:f7:60:21:08:
44:7b:df:87:71:ec:b8:98:e7:ea:16:6a:e1:a3:ca:
18:25:97:31:aa:93:a5:ef:ca:4b:d9:a1:9a:d9:bb:
34:af:ab:09:46:fc:12:62:e7:09:97:08:33:a2:4a:
cc:04:58:56:a9:5a:19:54:f7:f2:b9:a4:18:3a:44:
a9:ae:9f:d5:a7:7d:5a:fb:fc:16:a6:24:dc:e7:9f:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:A0:CD:65:3B:8B:33:85:7A:9B:8B:71:CF:9D:35:D5:91:BD:8A
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0a:df:81:61:88:2e:88:37:92:48:9e:09:80:cf:e4:21:86:
02:82:d9:9d:97:59:c9:df:40:45:ca:8f:1c:92:64:8d:f4:37:
e4:3f:41:6e:04:a4:2e:a7:53:d5:7d:bb:d3:90:4e:eb:ae:c2:
9c:6f:ee:74:3a:12:28:48:29:df:40:eb:76:0a:72:57:9b:bf:
82:6b:cd:dd:9d:11:81:14:38:db:08:6e:9a:c3:56:52:53:76:
ff:ab:6d:90:4b:b9:37:71:c3:66:86:83:2e:87:ba:8f:89:bd:
4e:80:b9:d5:6b:37:1d:28:0d:6c:55:0e:5d:b8:a9:27:26:ca:
4d:d1:24:c7:35:38:6b:69:02:5d:8b:0e:25:56:55:f0:c1:6c:
07:4a:c0:32:22:1c:f3:28:98:98:41:18:4c:ff:6b:72:06:5d:
3a:34:29:c7:56:8c:9f:08:bc:5a:33:10:75:ad:c8:8a:55:a8:
4b:e9:65:07:62:e6:98:1c:05:12:9a:11:ec:f6:d6:83:1f:9c:
1d:49:7d:51:5f:e6:a8:8d:e3:31:f7:5b:7c:e1:68:24:ab:b9:
69:16:d5:19:83:87:f8:fd:ca:3e:b1:11:31:46:25:13:e6:06:
c6:77:2e:c6:f4:3e:6d:ef:0f:d4:44:e7:81:59:5e:b7:a6:b9:
dd:4d:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:46:11 2025 by rpki-client