Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: mMsuBYf9pBO3Tyogu1YwqCuCTQYERsXP7W4MGRPs3ic=
Subject key identifier: A3:76:C3:84:D6:47:6A:13:76:75:B7:0D:31:0F:F8:D8:E3:E4:B6:29
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 0196B58FFCE632C9C15D2C8353A70E18D535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 40
Signing time: Fri 09 May 2025 15:00:34 +0000
Manifest this update: Fri 09 May 2025 15:00:34 +0000
Manifest next update: Sat 10 May 2025 15:00:34 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: MZrcHooDheh8g4YNNgkyOkixgWoOXjjR/ybx6L9Rpkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:fc:e6:32:c9:c1:5d:2c:83:53:a7:0e:18:d5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: May 9 15:00:34 2025 GMT
Not After : May 10 15:00:34 2025 GMT
Subject: CN=a376c384d6476a137675b70d310ff8d8e3e4b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:9b:d6:97:d7:20:74:2f:40:86:f9:0d:19:
d9:5e:1a:89:f0:3d:54:f2:33:7a:a2:85:82:26:d8:
5a:00:f9:4a:26:3b:31:c0:95:26:bb:15:58:4d:2b:
73:01:d9:3b:c3:06:6f:bf:f8:39:ef:ce:7b:19:b4:
cb:0e:f1:e4:93:09:d4:b3:e4:87:88:6d:c4:85:9b:
70:32:57:14:80:22:2e:4b:1a:df:5f:48:54:36:c9:
b5:1d:d4:69:2b:e6:c2:0e:16:58:21:33:ac:f5:cf:
a8:bc:8e:27:be:40:9a:4a:f6:c5:23:58:a8:cc:c1:
62:85:2d:64:dd:c1:cb:1f:83:4f:88:e1:f9:55:2e:
4a:2f:a1:30:b1:03:a7:17:cf:3e:e6:76:1b:da:1a:
6f:e1:db:04:c7:e4:b6:23:a1:07:fb:ae:46:21:2b:
fb:63:76:b7:92:65:88:1a:f2:3e:73:49:68:eb:cf:
9c:e9:c1:9c:fa:6a:29:73:20:62:f3:18:81:8a:cd:
bd:82:6a:96:ac:a9:cc:e3:e0:59:0e:df:15:3a:95:
c7:b4:e7:40:f7:92:b7:cb:be:21:67:bb:21:ac:27:
41:d2:fa:b7:98:3c:c1:d7:d9:c8:ea:05:58:46:e1:
21:45:35:7b:69:e2:9c:19:ea:9c:6e:af:ca:3d:87:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:C3:84:D6:47:6A:13:76:75:B7:0D:31:0F:F8:D8:E3:E4:B6:29
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6d:82:a1:f5:b0:ae:17:66:33:5c:a1:37:b4:9a:f5:d1:1d:
33:c3:fd:48:87:87:13:6e:e2:29:0f:67:88:c3:89:d5:06:a3:
b0:1c:56:5c:68:d6:2f:71:85:61:63:fe:5f:0f:70:e8:1d:9e:
92:ba:c6:ce:91:bd:57:8f:aa:21:92:4f:b6:42:a6:54:c8:2d:
b7:33:1a:1c:19:73:e2:35:94:f6:4d:1b:37:de:7d:0a:2c:21:
06:27:84:f8:f2:f8:fc:fa:2c:3f:d6:ab:78:c0:4a:10:b1:12:
10:c2:fb:1a:23:97:aa:03:c9:42:46:66:dd:00:9b:66:92:ea:
83:92:60:e0:a0:6f:0d:d6:ea:b8:8c:df:7b:4b:9f:ba:2c:40:
83:15:49:40:8a:07:8c:e2:b0:32:65:89:56:e9:32:01:da:02:
5b:b1:a2:a1:f7:0a:e9:ea:6a:92:81:dd:da:4d:68:20:05:d6:
e7:17:d5:c6:f0:6b:25:69:b8:56:6c:92:69:72:d3:3e:16:fd:
5a:03:d2:ce:4c:80:3c:35:98:4f:ba:30:4a:6d:e5:66:a2:e1:
a8:ab:db:4b:0e:25:8c:4d:2e:f8:e6:90:e0:7c:20:5c:69:f8:
12:35:84:94:96:ba:18:00:79:dd:aa:1e:b9:d6:dd:ed:3b:a4:
2c:d6:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:55:05 2025 by rpki-client