Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: yErV3kTOy0NwPr97Qn59EM6E6MZdq8PKHyzfB8cyiXg=
Subject key identifier: 5B:81:CD:3F:53:CC:9D:30:3C:58:69:B6:8F:D5:31:41:4E:44:20:FA
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0196B6A29426E7D734F0B23FFBA9DB3A3E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 20:00:30 +0000
Manifest this update: Fri 09 May 2025 20:00:30 +0000
Manifest next update: Sat 10 May 2025 20:00:30 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: m3OG5ftz/mnQAywwk/TVlFm7slj83yZXgOdszu29Fx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:94:26:e7:d7:34:f0:b2:3f:fb:a9:db:3a:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: May 9 20:00:30 2025 GMT
Not After : May 10 20:00:30 2025 GMT
Subject: CN=5b81cd3f53cc9d303c5869b68fd531414e4420fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:f6:8c:c5:23:a8:30:e0:33:1f:39:e6:9c:
d8:87:6e:5c:8d:6a:a0:1e:f7:40:dd:29:48:a5:35:
ef:08:1b:8d:4f:a9:6a:3c:3b:46:0a:b1:af:32:00:
92:8b:ff:c2:db:c3:1e:d3:6f:89:00:39:aa:29:55:
7d:e1:e2:a7:90:22:b6:07:11:2c:0f:53:71:8f:ae:
66:3a:91:fa:3f:d5:8d:22:75:88:1f:b6:c1:e6:4a:
2b:de:32:07:9f:02:a5:8a:6f:b4:7a:ff:87:c5:ac:
60:2f:0e:03:d7:3f:73:95:25:90:75:93:e1:eb:11:
99:e9:d2:ce:18:e7:d0:9c:37:ba:86:d5:6c:26:c1:
13:36:53:68:73:ab:e4:03:23:24:c3:7b:3e:18:08:
65:2c:c4:cc:25:4e:5a:82:7e:cc:0b:93:dd:4d:af:
85:b3:ae:ed:3b:af:62:23:17:4a:ee:29:cf:c6:dd:
55:10:dc:9f:af:ca:11:08:98:40:df:65:c0:b4:f5:
02:7a:e0:dc:bb:e7:42:18:19:c2:66:34:e1:07:f9:
4b:95:4f:92:cf:ce:c5:b2:75:55:af:38:f9:c3:09:
ee:80:98:de:a5:ab:bf:f4:38:04:ee:70:fc:2e:2b:
3a:75:2b:7e:b1:61:6e:f7:99:03:68:a3:35:21:10:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:CD:3F:53:CC:9D:30:3C:58:69:B6:8F:D5:31:41:4E:44:20:FA
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a1:51:bd:44:ef:b1:53:8c:96:a2:b1:4a:f6:90:35:73:83:
90:d3:c6:7d:35:e5:26:7b:96:52:e9:d0:47:4b:51:7d:be:8e:
05:9f:2c:00:e8:0a:1b:38:13:a5:aa:fb:10:52:82:a0:1b:b7:
57:d5:f6:b4:a8:09:e9:d4:6f:fb:da:dd:18:12:83:d2:85:6c:
40:24:b3:d5:7a:54:6f:17:31:eb:c8:e9:2f:fc:7b:da:3b:cf:
d6:16:10:d6:ae:31:58:82:a4:03:fc:32:96:03:4b:79:ca:ca:
0b:b2:31:aa:f3:73:54:97:34:cd:a2:0a:0e:4f:4a:bb:ff:63:
73:ab:cc:81:d1:73:9b:0d:13:04:2d:a5:2f:65:18:d9:e1:e1:
01:87:d2:ac:27:0e:bf:bc:6b:c5:c2:5a:53:71:ba:2c:0b:39:
e0:fa:cd:58:8f:bf:5a:cd:d1:df:2d:d3:1f:cb:13:a6:be:06:
0d:eb:84:b2:79:dd:d1:c5:7f:7f:cf:fd:9d:29:d6:a3:81:9c:
5f:b1:b6:83:63:7c:fe:69:fa:8e:a1:b5:aa:d4:e7:b7:1d:6c:
33:48:36:bc:b7:19:d1:c2:37:3a:ff:65:e9:ae:77:6d:75:de:
25:81:81:1a:bc:e3:9c:17:09:42:ce:f3:78:d8:01:96:b3:75:
5c:da:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:36:44 2025 by rpki-client