Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: E3bpoGgLNtcXbl1riXYyd5CQ/u8PPT4V9nGBKRGBmzs=
Subject key identifier: C8:FA:73:F5:20:54:40:40:6C:FB:A1:D8:85:39:23:F2:D1:C7:6C:4B
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 0196BEC9DF8713B02DB6BB39DF2CB9393EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 10:00:23 +0000
Manifest this update: Sun 11 May 2025 10:00:23 +0000
Manifest next update: Mon 12 May 2025 10:00:23 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: m2L1RVH479ma6DBeIo7PNdcmRV1pfK5Pizf8xlKW6r4=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:df:87:13:b0:2d:b6:bb:39:df:2c:b9:39:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: May 11 10:00:23 2025 GMT
Not After : May 12 10:00:23 2025 GMT
Subject: CN=c8fa73f5205440406cfba1d8853923f2d1c76c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f0:d7:e9:10:56:a9:2c:ba:21:54:48:30:
75:00:f4:ac:f5:95:7d:f1:ee:65:aa:f3:38:ce:9c:
f5:51:41:9b:3a:da:ac:6e:74:0e:b7:ca:c0:19:68:
5a:f7:78:37:14:f4:bd:45:e0:12:cb:5d:ce:cb:39:
24:38:23:6d:97:18:a4:f3:aa:d1:2e:05:3d:a4:e1:
ef:6b:06:d1:35:8c:76:3b:d3:a2:d4:6c:ad:24:0c:
0b:b2:5c:ee:cd:9b:02:39:37:1a:f4:68:61:67:48:
1a:5c:03:96:f8:6f:0c:7e:77:37:ea:07:73:3b:ed:
6d:85:c4:74:b5:8c:6b:a9:f9:86:a3:4e:3c:9d:71:
7a:c6:92:09:34:cb:fb:4a:ee:de:25:bb:42:b9:4b:
89:70:e2:a7:54:31:06:da:32:7a:78:b0:40:41:f1:
52:7d:5b:a0:bf:5d:cb:c2:f1:28:0b:1f:3a:27:05:
d1:85:f2:87:5c:40:d0:35:ee:95:c0:11:7c:2c:30:
54:49:8e:aa:a7:99:a1:d3:de:35:e0:f3:11:a5:e3:
e4:b3:69:a8:03:fb:c4:f6:58:4c:71:a9:5d:b7:03:
43:69:f4:93:a3:4c:93:94:9e:b1:80:cc:13:e0:f1:
e1:f2:1c:18:d4:8d:30:e5:b1:18:45:82:78:ab:5f:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:73:F5:20:54:40:40:6C:FB:A1:D8:85:39:23:F2:D1:C7:6C:4B
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:03:20:5e:12:d9:4b:b3:95:73:d5:24:66:e9:a9:ed:cb:a3:
51:41:09:35:44:18:c9:29:af:16:18:7f:c0:7f:e6:87:7b:81:
ea:4f:e2:3f:db:5c:4d:15:41:d4:13:47:5e:7d:3f:73:3a:92:
ba:96:10:7b:43:4b:27:17:46:29:64:e7:6f:d7:30:53:e2:de:
64:10:f8:86:33:be:b4:8a:d4:89:78:e3:a2:e6:44:ec:4f:17:
ae:4e:09:a0:91:a2:ce:cc:97:c9:07:d8:0c:95:71:f5:58:a1:
c6:37:58:64:ac:e5:cf:e7:f1:ca:c1:93:4a:43:5f:2b:22:ac:
d9:99:71:4f:eb:3c:c9:8c:4a:13:f7:90:06:66:a1:30:c3:ca:
66:57:26:38:c9:12:c8:73:9c:0c:a2:15:bd:0b:fb:12:18:94:
3b:cd:37:60:8d:d1:c6:ac:e1:94:50:3e:10:d6:da:01:84:45:
12:29:5f:e9:83:9b:88:16:ae:3d:ad:61:ba:29:3d:0f:26:3b:
00:2f:f3:9c:75:64:15:4f:e0:7e:61:dd:c0:64:81:12:9f:0b:
e6:12:5d:0e:f6:6b:d1:40:c2:fc:ce:49:02:81:03:a6:2f:24:
f2:16:ce:dc:b1:c2:8d:1b:8c:a6:39:9e:70:22:92:19:b1:76:
d0:11:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:25 2025 by rpki-client