Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: kSynbh7eyzeMj0P/yb7tAzc8PJLaQ5MINN18Gt8N1x4=
Subject key identifier: 9B:7E:B3:4A:0B:3A:51:D1:32:7E:21:4A:8D:3E:81:03:8E:64:43:DF
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0196BF37C472DF7AAFA94CB7222C5EC69C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 1547
Signing time: Sun 11 May 2025 12:00:25 +0000
Manifest this update: Sun 11 May 2025 12:00:25 +0000
Manifest next update: Mon 12 May 2025 12:00:25 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: HWXkqUvhf6NRrz96uXeF99uJDqbyj5fyTXC6aM/HpBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:c4:72:df:7a:af:a9:4c:b7:22:2c:5e:c6:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: May 11 12:00:25 2025 GMT
Not After : May 12 12:00:25 2025 GMT
Subject: CN=9b7eb34a0b3a51d1327e214a8d3e81038e6443df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:f3:5c:2b:d0:8c:cd:53:d9:5b:0b:2d:e6:
8a:79:00:d3:63:b2:b5:2b:06:34:8d:04:f0:f9:04:
47:f8:d5:04:b6:fe:ce:02:2c:88:fc:d9:f6:95:6b:
0c:c4:cb:4f:e9:50:cd:42:54:3c:36:63:02:7d:78:
7e:6d:6c:b7:e9:ab:1a:f4:25:9a:4c:06:e9:53:7f:
58:62:91:dd:09:52:37:3d:c3:b0:33:a1:24:79:10:
ad:07:e9:ed:4c:21:25:39:8c:44:f6:b2:3c:0c:2a:
19:e9:f3:08:29:37:b2:34:cc:9f:07:b2:3c:4d:40:
37:4a:a6:66:72:bd:f6:91:45:9a:0c:82:5c:c0:7f:
1a:8a:07:a6:eb:50:45:63:82:93:af:3d:c0:8b:17:
3a:f6:2d:bc:b1:7e:e7:f9:3f:d1:25:0d:5d:69:b9:
b0:06:5f:53:3f:fb:2b:ee:2d:d1:2c:c9:fc:b6:0b:
86:d6:c8:9c:07:60:79:33:4f:44:56:47:bc:33:46:
4d:bd:9c:8e:84:ec:1a:60:28:8e:99:7b:26:46:d6:
51:20:25:c2:14:0a:5f:80:1f:a4:f4:18:38:20:a3:
97:27:67:b7:90:45:96:b2:ba:11:cb:65:d6:58:b5:
d6:59:26:ac:c3:bd:04:4b:75:f0:b4:4e:77:c7:84:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:B3:4A:0B:3A:51:D1:32:7E:21:4A:8D:3E:81:03:8E:64:43:DF
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:40:bb:be:6b:cc:6c:ba:b6:dd:de:d6:37:8f:83:1d:c2:
3c:96:c7:01:06:6a:96:65:f8:36:a2:9e:5b:36:3d:4c:27:8b:
f3:48:50:db:9b:34:da:5a:a0:43:70:bd:b8:38:10:1c:9b:56:
87:c7:13:7b:de:19:37:b6:2c:e4:e2:06:18:42:de:4e:48:6a:
08:61:87:19:2d:66:d1:d2:78:eb:3e:7b:81:32:89:9a:59:45:
77:c0:48:15:f5:34:2d:3f:46:16:ed:5e:e9:29:65:82:89:f1:
83:c3:d3:4e:5f:5b:a2:8d:32:47:4b:b1:6a:6b:2c:a7:eb:1d:
a2:06:bb:4f:61:05:db:70:9d:2e:cf:b3:d5:65:8b:e2:63:32:
36:25:fa:5f:de:d1:1d:b7:7b:34:48:08:ed:13:fa:4b:93:74:
9e:ec:bb:5d:33:54:3a:dc:57:7e:f8:79:29:57:7f:85:2e:d4:
e2:ab:14:23:de:33:ab:61:d6:ae:23:fb:11:ca:c7:8c:b7:17:
fa:26:70:73:08:15:a4:47:06:c7:d8:2f:dd:b5:fa:c3:de:16:
5f:ff:a1:8b:01:25:29:19:8a:74:f0:48:b5:2a:78:b4:16:11:
89:b7:c7:da:2e:b4:18:24:cc:85:5b:1b:d1:98:86:29:4d:53:
c9:0b:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:45 2025 by rpki-client