Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File: v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier: Mtt/O+6LfX5M7Mm2bQkozoGmG/bHIaO8EhW8LRqWIrU=
Subject key identifier: FF:6F:F1:D5:99:9C:5A:FC:67:B5:B1:AF:B2:79:FD:1C:EC:87:0F:69
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial: 0196A6F8AE594C7310F3741DE83A1E45D9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 19:00:37 +0000
Manifest this update: Tue 06 May 2025 19:00:37 +0000
Manifest next update: Wed 07 May 2025 19:00:37 +0000
Files and hashes: 1: nI_8YGf_KIt8612GRNYpw062gLo.roa (hash: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=)
2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: K/bH4gT+rZojAp7gchh3N4DLit84I6vLlazE3u5hheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:ae:59:4c:73:10:f3:74:1d:e8:3a:1e:45:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
Validity
Not Before: May 6 19:00:37 2025 GMT
Not After : May 7 19:00:37 2025 GMT
Subject: CN=ff6ff1d5999c5afc67b5b1afb279fd1cec870f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:fd:f5:11:4a:d3:71:10:69:fb:21:c9:21:
a2:e2:67:fa:4d:dd:21:fe:89:ad:73:78:35:cd:b7:
c1:a2:06:1f:f6:58:fa:f5:17:93:4f:be:98:09:8b:
3b:c1:2a:c6:84:a3:b3:f4:51:9b:3e:7d:79:37:29:
fd:6d:de:2b:89:fa:79:9e:fd:a0:73:63:e1:cd:ef:
b6:4d:1b:73:f8:37:b0:3b:73:b5:d0:f3:56:8f:d9:
e1:35:27:f3:9f:dd:8e:47:ce:3f:8b:b3:35:e1:de:
fe:a6:07:2d:81:61:0b:6b:f0:a4:bb:03:1c:8d:22:
51:6d:08:c7:f8:08:c0:91:3a:f3:39:2e:b6:96:de:
0d:5e:f3:0e:12:0e:c5:15:07:12:65:2e:cb:40:46:
0a:e8:73:65:83:7b:03:ef:e0:74:48:87:d0:12:1e:
b3:ac:3f:8b:b7:c2:08:23:3e:46:ca:00:8f:cc:c0:
10:cf:6f:b7:50:72:86:0d:d0:3d:e4:08:3e:1e:32:
89:c1:07:11:3b:ef:07:d7:f5:9e:3a:57:a5:cd:83:
32:6c:4a:df:05:2e:79:29:8e:3d:f3:3d:a9:4d:fe:
49:43:61:92:ea:db:4b:e2:c2:6e:87:ec:73:cb:c0:
31:ed:85:01:fb:48:03:3e:13:8a:47:02:79:f4:7b:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:F1:D5:99:9C:5A:FC:67:B5:B1:AF:B2:79:FD:1C:EC:87:0F:69
X509v3 Authority Key Identifier:
keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d1:1b:8d:a8:45:9f:41:b3:07:ae:43:fc:e5:cb:a7:df:3e:
8f:48:a3:56:79:21:1c:39:ab:bf:f7:72:e1:de:d2:82:aa:89:
85:11:38:80:bb:cc:61:fe:e3:5a:e3:7c:80:80:4f:a5:10:8e:
c9:5b:63:c4:7b:4b:fb:b4:6c:4c:b0:d5:3c:2c:93:9c:5b:f3:
cf:43:ac:98:92:74:b4:7f:fa:44:5e:f4:86:36:01:e1:52:98:
14:50:aa:b2:7c:c0:6f:46:99:bf:5d:08:e5:9f:5a:cc:91:37:
76:a6:a6:56:26:57:47:36:1c:82:fe:c5:21:67:ab:3e:df:7d:
0f:a9:96:e3:c2:15:78:eb:65:a9:19:49:96:68:e9:fb:82:ca:
f9:84:f6:68:e2:af:70:10:dc:30:52:af:b9:e2:2f:5b:92:10:
bb:50:db:07:9a:34:63:c3:0b:88:ac:78:35:67:b9:e5:8f:cc:
6d:bd:e7:43:7c:87:cd:fb:60:ae:d7:a5:21:2a:0e:37:32:be:
ab:7b:61:a4:c3:aa:1f:aa:ac:b0:e0:43:4e:55:93:e9:be:e3:
fa:7d:4a:87:4c:81:5d:94:24:63:c9:a3:68:4e:c6:7c:19:2b:
27:a4:26:2d:46:0e:57:7e:34:d4:35:f2:6f:a7:35:b9:15:d2:
b6:e6:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:58:03 2025 by rpki-client