Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: WB8Ua7ja2nwHKLDHykTm5Ek61mBejKuOT3cs4Ew4hGU=
Subject key identifier: AC:8E:A4:1C:7D:E8:67:A9:41:79:23:D6:8D:FB:BF:34:C3:DB:7D:89
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0196C5DF1AF94164CE350D8BB4DC8AFAA260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0329
Signing time: Mon 12 May 2025 19:00:55 +0000
Manifest this update: Mon 12 May 2025 19:00:55 +0000
Manifest next update: Tue 13 May 2025 19:00:55 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: 11i5CtFnotom5Pk+9T/XCt4ked9dlWXO7Zhbvf079K0=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:1a:f9:41:64:ce:35:0d:8b:b4:dc:8a:fa:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: May 12 19:00:55 2025 GMT
Not After : May 13 19:00:55 2025 GMT
Subject: CN=ac8ea41c7de867a9417923d68dfbbf34c3db7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:65:41:a2:22:7e:b0:7e:a2:69:04:7a:9e:
33:46:f9:5b:72:0b:65:6a:a7:04:c2:19:7d:3b:06:
06:c5:52:b8:78:6a:94:e0:40:e1:ca:5a:81:9c:09:
0a:f0:df:b0:0c:3f:6f:19:7c:08:1d:bb:a8:75:2b:
8d:2f:42:38:cb:20:e0:4a:46:27:ae:8f:f5:d2:80:
04:75:50:b3:55:52:88:f3:ab:15:42:9f:a6:c7:4c:
19:0e:18:6f:55:5e:64:10:4f:93:03:50:89:af:1b:
2b:6f:0b:ea:3f:70:e3:c0:6a:19:f3:50:3e:c6:4e:
fd:a0:bc:44:c4:0c:86:e6:a4:4d:2b:c1:c7:d3:a1:
8f:d6:46:c7:03:93:e5:1e:ad:f5:25:7e:61:c3:fa:
fb:bf:81:b4:cf:b0:c1:b3:f0:74:e3:2a:c3:e0:c7:
91:7f:ae:6f:c0:cb:ef:03:f1:04:37:72:ab:de:a2:
32:c1:5c:17:e7:83:33:f6:05:d7:de:0c:56:28:93:
f9:c0:d6:1e:eb:20:e8:32:07:34:75:2b:88:11:ad:
f3:7e:f5:64:1a:de:75:d8:25:98:27:4e:e2:df:ff:
b8:81:67:1c:26:de:18:7b:b8:61:c0:57:27:14:2d:
0e:ee:f5:ea:e7:eb:cf:02:ed:ce:bc:d3:82:d2:95:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8E:A4:1C:7D:E8:67:A9:41:79:23:D6:8D:FB:BF:34:C3:DB:7D:89
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:39:6d:48:3c:7b:3c:fa:22:df:29:fe:c1:93:bd:aa:7b:
1e:40:f1:b4:c6:86:59:05:74:0f:c2:32:2a:9e:cc:98:3e:69:
57:f8:48:f5:11:64:29:2b:ef:f8:ca:13:a7:d8:2a:1b:b1:c2:
ba:3b:0f:3b:2f:9b:15:03:d2:6a:e5:f9:16:7c:9c:6a:3e:c8:
31:f3:fe:f0:62:85:5d:37:10:e6:65:f5:6d:72:98:fc:11:3d:
2b:6b:09:2c:64:26:6f:3d:17:78:c1:52:d6:13:83:48:6d:76:
7d:15:4d:0f:aa:a5:d4:81:c1:f5:58:aa:06:f6:13:37:69:58:
67:8e:42:bd:aa:67:2f:8e:79:1c:03:c1:62:e6:fb:0c:da:09:
e0:66:cf:e1:10:39:41:4e:aa:4b:4a:09:c6:0c:de:45:a5:21:
0d:5c:61:e5:92:e4:e2:ca:03:b4:1e:ed:4f:6b:45:b8:23:77:
25:0a:f1:2f:dd:d9:da:13:0c:61:e6:76:57:a6:38:3c:bf:f9:
d4:3d:96:4e:96:72:7c:a9:5e:85:49:6a:c7:8e:84:c9:5e:cd:
fd:84:89:73:4a:f5:9e:e5:71:99:24:db:db:7a:72:2e:29:77:
f9:98:b5:53:cf:4f:aa:8d:d0:61:8b:21:04:3a:8c:37:b7:9a:
45:22:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:02:45 2025 by rpki-client