Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: 0rJEPs2Aj2Hw48n673EPS15+ax/JzxlzRujTN52xkMY=
Subject key identifier: A9:25:50:32:6A:B9:6B:2D:4D:D9:E7:64:99:41:DC:5D:52:CC:D7:53
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 01969FE44623F5EF68DC46442566DBD7A5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:59 +0000
Manifest this update: Mon 05 May 2025 10:00:59 +0000
Manifest next update: Tue 06 May 2025 10:00:59 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: Az/wh3ES4ZicBtY7/j1moiE94HTdY3zFTDGKLhS4vW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:46:23:f5:ef:68:dc:46:44:25:66:db:d7:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: May 5 10:00:59 2025 GMT
Not After : May 6 10:00:59 2025 GMT
Subject: CN=a92550326ab96b2d4dd9e7649941dc5d52ccd753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:d4:63:b2:f2:1b:c7:78:d3:aa:49:f9:ca:
47:8a:ab:63:8d:42:99:24:a2:5f:c5:7a:c0:e9:d6:
10:5f:10:7d:26:16:b9:0b:d1:e9:7b:60:5a:26:9d:
8c:3c:23:3f:fd:0e:0f:9e:fa:0d:a1:1b:ac:a8:3b:
2e:65:40:a8:ed:50:e4:e3:bb:c5:ee:80:99:f4:b9:
e2:1f:e3:5a:3f:9c:76:04:64:4c:63:9e:bb:c9:3d:
0c:67:74:80:d1:3a:6e:d4:c0:07:df:ef:bf:5f:e6:
55:09:b0:4e:b1:e7:78:14:3c:da:d2:a2:a4:26:92:
3a:f6:48:a6:16:26:b0:33:e6:22:3e:73:e7:e6:77:
5b:a4:53:60:07:6b:c1:c2:42:cf:36:1f:7c:d4:c0:
3a:2d:52:1a:3b:45:39:b2:71:38:2c:bc:02:1f:55:
f4:7e:d9:f0:4f:53:2a:50:9f:09:aa:02:93:bf:a4:
ef:fb:7f:da:e5:23:ef:e4:cb:97:b6:d7:a3:55:5b:
fb:d2:79:d0:f4:cc:b4:26:b7:39:3c:75:a1:34:6b:
3d:1f:29:82:de:93:2d:c2:67:93:52:0b:17:cb:3c:
b8:32:c3:a5:e0:0c:34:48:b7:b1:39:db:e4:88:0f:
8c:c8:69:63:f8:a7:b0:ff:1a:0b:ce:23:a9:1c:d2:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:50:32:6A:B9:6B:2D:4D:D9:E7:64:99:41:DC:5D:52:CC:D7:53
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:ec:ba:b2:71:bb:6d:04:3e:62:83:71:00:64:9d:50:54:
b5:22:d8:72:5f:60:91:c2:3d:97:67:8c:1f:69:06:9d:b3:3e:
96:b4:5c:2a:7a:6a:a5:e8:cf:a5:59:ef:7b:e1:aa:7f:dd:e3:
3a:9c:21:83:ad:04:83:6a:64:50:e0:40:40:ee:a3:62:6d:a6:
94:25:69:e1:4e:3a:10:65:7f:32:1b:31:5b:db:95:48:dc:f6:
f6:60:d5:a1:9a:3c:a3:e7:e8:b5:c5:7d:a1:41:7f:88:ac:96:
51:5d:17:0b:42:22:38:2f:66:b3:5d:0c:d7:98:ed:84:2d:e4:
9d:b0:bf:2d:8b:d4:ee:f2:57:db:b5:23:6e:02:bb:54:6b:44:
df:44:c8:4b:20:5c:e5:4a:5d:bf:30:08:16:b1:ab:04:8e:48:
bd:f3:a9:4c:df:94:ef:49:78:71:21:76:d7:3a:69:ee:32:b5:
e1:41:de:f0:a1:d4:a3:59:36:b1:06:d4:44:72:00:4c:f4:20:
97:e9:37:66:c3:87:91:fa:63:b7:05:3e:75:59:72:3a:7e:7b:
03:1f:01:29:c0:da:e0:75:fe:a3:4b:23:11:8c:27:7e:09:b8:
ff:47:61:46:87:fe:99:13:7e:d3:d7:f3:5e:84:4a:f4:b0:7e:
b5:56:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:54:33 2025 by rpki-client