Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File: fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier: kluRdBQrfdKfcAqrjCTCsWJSv3XwYwKgzH8lRstrn5w=
Subject key identifier: DA:56:57:CD:E3:1A:6E:4D:2D:42:3B:89:DC:99:FB:46:1A:B1:22:63
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 0196C45E5A4B7A41A995013FD0433FDF3E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 12:00:39 +0000
Manifest this update: Mon 12 May 2025 12:00:39 +0000
Manifest next update: Tue 13 May 2025 12:00:39 +0000
Files and hashes: 1: HnXbxzajLhcisRCq_fB03kkxY7Q.roa (hash: 3RLbNAEyHJR+jTuUtPlDmJk48r533+OhDx8HcGj/79c=)
2: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: 1BNyop3ZioJuX+XxUOP4x2Y/r1UsbRGtnVQY6KwgnYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:5a:4b:7a:41:a9:95:01:3f:d0:43:3f:df:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: May 12 12:00:39 2025 GMT
Not After : May 13 12:00:39 2025 GMT
Subject: CN=da5657cde31a6e4d2d423b89dc99fb461ab12263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:ce:99:36:d6:ba:c6:08:be:d1:82:03:81:
f2:3e:74:ca:3c:6f:7d:be:b9:be:98:14:f3:fe:81:
ec:16:3f:cf:30:58:c8:ff:92:f6:79:5e:b5:bc:38:
0a:cd:45:00:45:ff:1c:3e:6f:58:6a:49:0a:4c:34:
68:76:2f:54:0e:4c:3c:9a:b7:77:1f:a8:79:a8:1a:
75:53:58:3f:e9:e5:a4:75:fd:dc:07:dd:43:39:18:
00:64:ad:25:6f:5b:65:24:25:63:68:13:1d:66:c7:
ea:51:a9:1b:a4:0f:b4:4d:17:2b:96:d3:88:42:5a:
e4:cb:7b:d7:1e:d7:3a:28:21:08:7b:8b:73:f8:35:
90:65:2c:12:f2:d1:d4:a8:a2:9a:9b:9a:bb:fe:98:
1c:62:22:8a:81:55:ac:ec:9a:29:ad:e1:b2:1f:ce:
95:fa:05:09:ca:20:37:c1:ab:48:ba:73:5c:b1:80:
71:10:41:0e:28:c6:d8:0f:16:1a:a4:1f:74:61:d3:
71:38:9e:1d:0b:1c:4e:c3:e9:02:5e:17:4e:a3:93:
ff:a2:df:6d:6f:79:fb:d1:86:b6:f6:53:ad:a6:9e:
76:8a:84:59:9b:59:0a:0d:b3:ca:08:11:c3:5b:97:
c7:05:65:37:94:c7:ed:a2:2a:96:01:89:3b:90:5b:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:57:CD:E3:1A:6E:4D:2D:42:3B:89:DC:99:FB:46:1A:B1:22:63
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:55:ad:f6:69:5d:dc:78:a8:77:f5:1c:3e:ad:86:4e:e9:5a:
49:5c:a1:09:fd:a6:12:08:bf:d8:82:7b:be:18:27:de:32:0d:
69:e8:ed:c8:20:c5:c3:a7:d5:26:d8:5a:77:c3:5c:dd:15:81:
0a:5e:05:91:2a:da:7c:1b:cf:be:8e:c7:e3:09:47:f9:a5:bb:
1f:a4:76:7e:33:0c:f3:ff:e0:3e:97:0d:d2:97:15:4d:2f:e2:
d3:d5:e3:3d:39:31:48:a4:f1:a8:8c:38:f5:49:24:35:9f:bc:
dc:43:de:98:a1:b2:e9:cb:19:e6:68:0e:ac:45:de:c8:bc:73:
ed:6e:99:f2:64:97:19:1c:e6:02:90:27:93:e8:dd:65:d5:64:
4d:cd:5d:e9:34:c7:a5:5e:97:4a:1b:48:5d:46:e9:f8:a6:ac:
7f:18:31:d2:44:ce:8f:df:e0:2d:c7:a1:75:57:3f:70:31:b3:
13:6b:50:1c:ae:36:bc:58:58:18:5f:99:67:6f:d4:bc:fe:3e:
de:33:5d:5d:22:79:8f:c0:9a:ce:04:ca:85:07:bd:32:bb:75:
8b:b2:7b:f5:8e:f2:1a:29:50:28:81:8d:d4:74:3c:47:aa:2a:
6a:18:6c:80:a0:18:16:99:2e:ae:04:db:6d:fb:f9:e3:37:aa:
6a:dc:0a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:03:06 2025 by rpki-client