Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: +tmvCnLbXUa9jiztRijrqYVrHCo/ObqYN+aPuWVPbOo=
Subject key identifier: 18:BB:32:53:5D:31:8B:E2:31:C2:74:37:20:42:13:E0:64:5B:46:7C
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0196BFDD32E2AB774FE62F89A10D43D3CDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 154A
Signing time: Sun 11 May 2025 15:01:06 +0000
Manifest this update: Sun 11 May 2025 15:01:06 +0000
Manifest next update: Mon 12 May 2025 15:01:06 +0000
Files and hashes: 1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: gICX0ZPFAa33Cq3hdZjni9dTuYi+3bhtnHMy7FTZE2w=)
5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:32:e2:ab:77:4f:e6:2f:89:a1:0d:43:d3:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: May 11 15:01:06 2025 GMT
Not After : May 12 15:01:06 2025 GMT
Subject: CN=18bb32535d318be231c27437204213e0645b467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:71:19:08:5a:36:15:fe:bd:ce:e3:e7:c6:
01:9d:27:6f:47:43:fa:f1:ac:be:e1:5d:1e:17:a5:
a4:f5:93:01:72:be:85:a9:e8:67:7a:1e:d7:e6:3f:
35:68:8f:07:f1:da:09:77:bb:e3:78:d4:39:d3:ce:
ed:4e:2c:c6:8e:3d:68:26:4a:13:50:9d:f9:d7:c2:
51:c7:b1:c7:31:6d:dc:7d:f8:3c:63:76:70:cd:18:
11:eb:2f:22:04:1e:71:2a:55:59:8b:aa:d6:6a:5e:
d6:7c:c7:0c:f1:1b:92:bd:4b:14:79:ba:bd:54:ad:
9a:1f:5a:a4:0d:3c:e9:f5:b1:37:26:84:8d:22:70:
59:11:f9:6a:13:ae:7a:04:98:14:76:39:80:06:40:
95:bd:20:b8:53:ea:6f:55:6e:40:21:b6:6b:e8:31:
51:70:8d:92:91:2e:0b:e3:b8:cb:0c:f8:f8:36:11:
36:12:33:53:96:bb:c5:38:39:92:7d:ab:f9:c3:35:
7f:23:33:39:dd:68:52:53:20:05:69:8d:79:97:77:
bd:45:8a:d5:f8:c3:94:26:4f:fc:7e:11:c6:9c:0c:
d8:b8:c9:10:2e:15:94:d1:7d:9a:64:fe:b9:37:eb:
93:f1:6e:d2:08:f6:0d:94:e7:2a:9c:40:28:3d:69:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:32:53:5D:31:8B:E2:31:C2:74:37:20:42:13:E0:64:5B:46:7C
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:09:93:13:9e:0e:92:2e:ad:6d:d2:c4:62:90:27:60:85:f0:
39:09:4b:cf:55:6c:75:b7:38:ab:03:95:49:3b:0b:16:fb:e9:
53:c8:f1:50:41:4d:32:20:c2:f1:d4:2a:c9:1c:b7:71:78:8c:
95:a9:1c:f4:f2:0d:8e:2e:d5:0f:c1:a0:e7:07:6a:ae:87:c5:
02:94:74:b8:ed:39:1f:e8:c3:b1:cd:ef:6d:1a:90:ed:db:8e:
38:15:01:c7:29:a3:c8:b9:a4:63:db:91:25:52:50:59:c2:da:
aa:8a:e9:68:95:ee:a6:d5:b4:80:30:39:f6:d0:23:27:83:cb:
1f:0a:b1:09:8e:92:06:d0:f6:5f:f6:e1:b6:d9:a7:ab:29:f9:
08:d0:89:3c:24:b6:31:43:50:1f:70:8b:c5:33:a9:15:2c:ec:
45:1c:bf:a1:1a:3b:4a:fb:fa:e8:11:87:2c:66:71:84:33:61:
47:1b:b9:85:11:4c:c1:87:d4:c2:7b:6f:04:ca:3a:eb:77:f9:
80:02:bf:c1:d3:40:15:ff:65:60:3b:6a:58:5c:44:ac:25:bf:
d7:58:ab:0f:62:3b:e4:77:e3:b9:3a:0c:f3:98:9c:e1:32:db:
e7:27:13:f5:ae:10:a8:60:59:e2:d6:1f:63:95:b5:14:e9:18:
1f:29:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:54:14 2025 by rpki-client