Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: 7cf3nyR752QXDkgN8zB/iqriVBm4Yvrs+j1rUr/S79s=
Subject key identifier: 52:FF:70:BC:ED:FB:E5:67:86:5E:4C:82:8B:67:86:59:4B:DE:80:BF
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 0196B4468FD4C972AD336BF6453AFBDE1F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 09:00:45 +0000
Manifest this update: Fri 09 May 2025 09:00:45 +0000
Manifest next update: Sat 10 May 2025 09:00:45 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: aBDoLyAh2S5l2i0WoGW5QnAgCZoZMLIuiDrkLP6KHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:8f:d4:c9:72:ad:33:6b:f6:45:3a:fb:de:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: May 9 09:00:45 2025 GMT
Not After : May 10 09:00:45 2025 GMT
Subject: CN=52ff70bcedfbe567865e4c828b6786594bde80bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:5b:fc:eb:be:a1:a9:e8:17:a1:81:58:b5:
40:c4:54:75:a2:a0:9a:78:71:3f:cc:8f:2e:11:98:
47:22:00:2f:b1:06:d2:a3:e7:4f:70:fe:a8:33:c9:
2c:b6:e2:b3:f4:24:7d:52:1f:3b:0b:f6:93:24:7d:
79:f5:d3:13:5f:07:cf:6e:9d:2b:a1:c1:0d:f5:76:
07:03:bf:f5:85:e4:b1:5e:9d:2e:63:93:29:09:14:
e0:33:2d:c7:09:22:dc:97:91:f5:4d:bd:5f:a2:a8:
48:fb:56:cc:60:ec:59:17:33:55:9d:81:5d:08:89:
0e:35:8b:6e:fd:09:4e:00:e5:0d:41:2c:ce:2b:30:
26:26:db:15:d4:bf:ce:76:cc:18:12:7a:d0:7e:e8:
b1:31:c1:e9:5e:ac:ee:86:af:29:54:ad:87:bf:19:
ba:14:28:be:a9:02:94:f7:75:77:42:c0:9b:6c:6e:
5d:76:41:d5:69:62:eb:49:25:38:5c:4e:34:54:1c:
55:81:83:28:8b:62:76:40:a6:d4:18:b2:27:d7:58:
c9:0a:ef:fb:d1:bc:c5:6b:4f:1e:15:8a:6a:6d:63:
47:21:27:5e:a2:51:b8:7e:40:23:3d:33:f2:d4:95:
b0:39:98:0e:68:2f:8b:d6:14:ef:40:63:aa:e5:4e:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FF:70:BC:ED:FB:E5:67:86:5E:4C:82:8B:67:86:59:4B:DE:80:BF
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:95:e0:e9:37:0b:a9:3a:09:75:f2:f0:0c:41:cb:c7:88:60:
f5:62:bb:79:f6:ad:de:b0:7d:7c:88:d4:e5:81:2a:d9:41:72:
e8:7a:b4:45:6d:08:f4:7b:f2:11:1b:4e:dd:8b:0a:44:d5:ea:
d3:49:5f:8f:e8:75:d9:72:9f:7e:99:ee:bb:76:c3:9d:ef:30:
78:38:f7:b5:21:4c:5a:ab:f5:a7:af:04:50:8d:39:91:be:68:
c1:4e:66:37:65:99:9c:d0:ba:3d:17:87:22:2a:f3:bb:cb:88:
2b:cd:dd:4a:71:07:e9:ef:a5:e6:c4:50:7f:e3:41:ab:6a:fc:
a4:54:93:6a:86:2b:a6:0b:e1:99:20:60:48:51:2e:3e:1d:42:
5b:5c:b0:ad:84:e6:f8:b3:02:6a:d7:b4:30:8b:b2:df:94:dc:
d1:4d:b7:57:ca:84:49:35:3a:d7:ea:31:aa:a4:9f:7f:29:f8:
09:8e:30:d3:55:70:a5:cb:7a:c4:98:bd:85:ba:3c:08:ec:7d:
ff:21:ec:07:4c:ea:c4:fc:6c:86:d4:ce:2e:8d:fd:97:8a:0b:
17:78:94:17:35:95:e9:fc:18:a5:94:3c:89:22:22:a6:2a:71:
f0:5a:05:b7:7a:9e:b8:dd:08:ae:46:32:b6:a3:21:72:4b:ca:
b3:9a:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:36 2025 by rpki-client