Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: 2XoYdsHMiStECsEHCJhI7qE1Cc9GcYjfZkjoKYqqg+k=
Subject key identifier: 0D:DA:6A:E8:EB:7F:56:54:50:C8:61:9E:FB:57:57:90:FC:D5:05:0D
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 0196D740074BDA6608F0A1C57FE526BAB505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 04:00:19 +0000
Manifest this update: Fri 16 May 2025 04:00:19 +0000
Manifest next update: Sat 17 May 2025 04:00:19 +0000
Files and hashes: 1: 1EKO08t3Z9nlIgriObmmD60gwS4.roa (hash: GhRL3PpvS/3V9MnssSh8wyX1VbIpwoy88Gmt2c9/PH0=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: 5yJ7kW6zWmXO86Jg7CzcOZu07BKSU/ohHb1nfk1DoEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:07:4b:da:66:08:f0:a1:c5:7f:e5:26:ba:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: May 16 04:00:19 2025 GMT
Not After : May 17 04:00:19 2025 GMT
Subject: CN=0dda6ae8eb7f565450c8619efb575790fcd5050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:50:a9:f3:e5:08:bd:78:cb:3e:8b:f8:ab:
2a:f7:59:1e:b6:d0:07:8a:b5:13:06:e6:f0:f5:ee:
15:63:12:a2:9a:52:96:bd:9b:4f:67:c4:da:06:8c:
45:02:bd:25:42:6d:16:8d:39:24:64:cf:59:ea:90:
7d:8f:49:d9:fe:ff:8f:17:e1:89:d0:8b:4a:75:36:
ad:b5:a7:06:e1:7d:00:42:69:35:f0:41:19:63:18:
59:83:68:c6:a9:05:9a:b9:94:9f:88:fa:cb:71:3d:
e9:1a:46:6c:be:2c:9b:2a:7a:6f:b8:29:20:e6:a8:
ff:e9:db:51:67:57:72:3b:9d:d0:ef:aa:a8:00:b3:
78:44:dd:2e:de:59:0d:9d:96:d7:64:ea:ad:f2:3a:
e7:46:df:70:2c:d4:e9:14:76:91:95:6b:47:94:4e:
1f:0c:25:df:69:4a:1d:2f:7a:88:f0:b9:1b:16:aa:
d0:77:10:c9:d6:46:be:b1:54:2a:da:71:05:cf:e1:
d8:c5:86:2f:f3:80:a6:5e:12:44:00:60:a5:68:ae:
60:39:4e:32:9f:0e:18:43:5d:29:c4:75:bc:bb:79:
2f:35:47:29:f5:29:b7:bd:1e:49:b4:7e:65:4d:b4:
c9:b1:a8:1d:2d:c8:ed:7a:a8:45:55:2b:2f:c4:0d:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:6A:E8:EB:7F:56:54:50:C8:61:9E:FB:57:57:90:FC:D5:05:0D
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:c4:75:e1:48:8f:61:53:57:e9:58:13:1c:d9:06:c5:9b:
26:9e:c0:f8:60:82:90:23:eb:0e:e8:a7:5b:5f:e0:74:d8:59:
ba:9f:b1:db:20:30:10:88:c3:a0:6f:f2:39:94:6a:34:ba:3c:
c5:80:ea:ba:5c:f7:cc:61:1b:e0:53:fd:8d:d4:bf:4a:ad:b0:
dd:9b:c6:88:3f:9d:99:42:93:53:68:70:01:8a:49:e0:ae:c7:
ff:0a:7c:90:8c:64:38:6f:44:11:af:fe:07:13:a0:fa:90:d9:
5b:8e:f5:fc:97:65:dc:b2:8b:b4:bf:b3:af:a5:3c:5d:83:67:
df:41:5b:48:b4:25:c4:d3:5b:60:4d:39:48:ca:af:94:bb:f7:
dd:4e:7b:f6:cc:11:42:c3:89:6c:2b:ad:01:89:3b:37:15:55:
92:10:1d:f0:62:12:be:8d:f3:13:7b:b8:a8:64:22:22:d4:93:
e9:ed:70:d0:4a:66:d5:69:56:21:3f:ed:76:f5:14:55:7b:2a:
3e:e0:3e:68:b1:9a:b2:20:28:65:1f:73:80:e8:9e:a8:be:92:
fb:6a:00:7e:f8:22:63:79:fa:35:28:d8:87:14:51:46:a7:45:
bb:55:ab:0f:78:7a:2e:56:8f:3e:0c:32:bd:4c:bf:39:17:53:
28:22:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:01:59 2025 by rpki-client