Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: SFhn2RayDVVpptCjtqxtqp/VqI6v2bUK4ReB5uj0xO8=
Subject key identifier: 41:5A:62:5A:9E:FE:51:E7:0C:CD:10:2F:EF:B2:88:E0:F6:F4:DD:02
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0196BB5AEAE9187A105FD60C5F6BC8E0D6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 136D
Signing time: Sat 10 May 2025 18:00:19 +0000
Manifest this update: Sat 10 May 2025 18:00:19 +0000
Manifest next update: Sun 11 May 2025 18:00:19 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: NQcMZIGoIXbI+DejOyseIpGbhYXJrrNPBbYOBURjqmM=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:ea:e9:18:7a:10:5f:d6:0c:5f:6b:c8:e0:d6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: May 10 18:00:19 2025 GMT
Not After : May 11 18:00:19 2025 GMT
Subject: CN=415a625a9efe51e70ccd102fefb288e0f6f4dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:b7:fd:41:5b:47:4e:18:c5:97:14:f3:23:
7e:e8:6d:64:86:9d:c5:ae:c1:c4:55:53:47:81:f2:
b0:f0:34:71:3e:43:d6:ba:84:7f:a8:6f:68:57:f4:
78:d7:08:69:9e:40:a0:d5:58:18:b2:be:4c:de:a3:
d3:a1:90:33:aa:95:2d:a2:23:57:7b:b7:d8:d5:81:
67:85:01:8d:9e:b8:a6:46:40:7d:80:95:62:07:2b:
b9:44:b0:31:8b:ac:48:f6:f5:f6:4f:db:8e:da:c3:
0f:7c:d1:f7:ca:f2:c7:43:fa:9d:b2:db:9f:8f:27:
2d:68:0a:c8:24:d4:39:c2:e2:99:3f:89:32:67:13:
ff:62:4a:1d:c8:c8:bb:87:53:d2:02:c8:f4:36:8a:
d7:51:39:0f:06:62:c7:c3:f8:1c:a1:71:de:d6:71:
67:95:06:0a:51:af:5b:85:94:57:ff:b2:76:ad:bd:
5a:c9:20:28:b1:b5:80:d4:83:43:a3:2b:b7:0a:21:
3f:6d:1b:90:72:92:c5:e8:4c:c3:00:e7:75:93:f6:
59:89:d8:ad:8d:fd:cd:e1:f0:97:28:70:d2:30:d7:
ac:7f:cb:f7:18:16:36:14:70:0f:c9:de:36:37:4a:
aa:56:ef:61:3a:aa:fc:61:1e:75:5b:19:8b:07:84:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:62:5A:9E:FE:51:E7:0C:CD:10:2F:EF:B2:88:E0:F6:F4:DD:02
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:b8:61:5c:f9:28:94:1f:27:1a:f8:9a:ec:00:f7:06:a1:
ff:39:cb:05:07:cc:a1:5c:e3:41:90:10:88:b3:ef:2f:ba:7d:
eb:66:63:f0:18:ff:28:71:eb:f5:d1:e7:4b:86:b5:62:5b:51:
25:58:0f:95:34:46:eb:83:2d:b9:a6:36:44:2e:5b:e4:0c:e0:
c5:91:21:98:78:0b:79:27:e6:b2:80:f7:9f:9e:32:2e:68:63:
c3:fd:7f:8f:b7:3a:fd:e8:7f:88:30:e4:65:46:bc:34:d5:7f:
83:20:fc:a1:08:15:51:0f:c0:5d:31:70:3c:13:f4:5a:02:d5:
4a:eb:96:d3:11:b5:18:06:79:e2:b1:1b:a7:dd:f3:b6:5b:64:
61:56:3d:2c:2c:91:ac:a5:10:a5:be:f5:20:d7:07:53:a0:7c:
62:c5:1f:d1:8e:0b:47:7e:1d:94:3d:9d:fc:f3:6d:f7:8d:f2:
08:a7:94:ec:58:07:2b:63:a8:15:46:8b:62:1b:9d:38:86:dd:
3b:28:4a:91:67:67:ec:08:b4:9e:8b:df:bf:91:48:ca:7d:1c:
20:24:6a:e0:cb:8d:9b:18:a6:78:b0:a8:9f:7e:6d:be:bf:84:
84:38:30:95:1a:2b:73:9c:84:57:74:eb:82:95:2a:fa:94:cd:
ea:15:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:03:54 2025 by rpki-client