Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: xtoELvd4Ict/CqfBMM4+TD4jqoqc9K03ZTdaZtLBCD4=
Subject key identifier: F1:B1:39:BF:20:1E:C2:5E:39:01:38:80:4A:61:34:7A:7A:42:83:04
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 0196B2C67057EE7F792D118429671D5D1E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 02:01:11 +0000
Manifest this update: Fri 09 May 2025 02:01:11 +0000
Manifest next update: Sat 10 May 2025 02:01:11 +0000
Files and hashes: 1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: g/ORrRnLVfAw0l2wp3IbZ5//26b19oa+/Re4+7Z0Dpo=)
3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:70:57:ee:7f:79:2d:11:84:29:67:1d:5d:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: May 9 02:01:11 2025 GMT
Not After : May 10 02:01:11 2025 GMT
Subject: CN=f1b139bf201ec25e390138804a61347a7a428304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:2b:a6:96:67:4f:e3:ef:06:2f:0b:26:e8:
f2:7e:16:f4:89:ec:37:50:81:a8:83:39:29:d2:6e:
3a:49:c8:00:8c:7d:66:84:c1:d4:a3:7f:71:61:95:
22:f0:6f:b9:b0:8c:46:77:30:dc:61:28:42:9a:f9:
67:81:48:bb:0a:fc:89:0a:8c:1b:a0:89:5d:d3:0d:
d0:12:d4:2f:e9:63:56:e0:90:95:c3:fd:dd:87:b9:
58:4e:10:5a:55:88:9d:61:76:25:52:f7:77:dd:ea:
f6:0b:a9:a7:7b:8f:ce:19:95:a7:d8:af:77:0b:a0:
7c:8f:b7:25:1b:12:ce:16:f3:29:8c:13:cb:b5:50:
04:00:fd:5b:01:f6:ae:c1:41:a3:3e:a3:a2:73:5e:
17:21:10:8d:22:4f:80:ff:14:89:d6:0b:82:d4:b4:
ae:e9:fa:5c:da:d0:29:c5:59:00:aa:a8:5c:59:73:
b8:b4:a6:48:ca:a9:60:a7:4a:b6:70:ab:8c:18:2f:
dd:b4:34:e2:11:da:bf:0a:ce:bd:0b:fc:87:1a:3a:
b8:8f:6b:55:f1:4b:e6:b5:84:78:9f:db:61:da:be:
5c:67:b2:4f:ee:7f:28:c7:09:23:30:70:6b:a5:29:
54:74:66:b7:6b:33:ab:63:72:45:a4:74:96:bd:84:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:39:BF:20:1E:C2:5E:39:01:38:80:4A:61:34:7A:7A:42:83:04
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e5:5e:ab:0d:2d:12:88:ff:4a:54:e3:da:39:5e:90:65:68:
c8:1a:44:18:ab:83:28:04:6e:a2:e6:af:af:81:3b:53:44:df:
f5:8a:24:16:7a:a1:13:10:cb:46:2b:b2:51:0d:ae:38:cc:d7:
bf:d2:7b:a7:4d:4d:61:59:40:78:44:ce:27:98:c1:8d:8e:9a:
1f:7e:5f:2f:32:41:1d:0a:47:eb:dd:77:6a:45:0a:97:b3:28:
0a:0d:2e:3d:35:75:06:c6:ab:8d:c1:72:54:1f:91:ce:53:1c:
be:5e:fe:c3:41:b4:d2:50:cb:57:8f:22:98:e0:61:b7:82:ea:
e8:0e:b8:f1:36:63:1a:58:5b:e1:e7:58:1e:d6:b5:01:3a:f4:
6f:2b:6e:75:30:b3:39:c9:d1:bb:9c:79:52:bc:6e:10:7d:64:
6b:61:43:ec:37:19:b5:5c:da:fa:25:ca:fd:f2:6c:c5:f2:f4:
18:7b:41:9e:8c:f6:05:b7:f2:28:05:f0:1a:b3:c0:75:1e:6d:
c7:51:8c:7f:38:bd:95:85:4d:c2:dc:01:b6:81:88:cd:e3:22:
7a:f8:65:74:ff:0f:92:ed:cb:9d:05:69:c0:b1:59:5e:db:b0:
82:66:29:fb:42:59:7d:00:89:0e:20:94:59:76:21:81:c5:89:
8c:14:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:22 2025 by rpki-client