Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: RIPv7BVoTLLrzrhqXjgEhe7wIBi4ZuirtJbRqAJ0IOk=
Subject key identifier: AD:17:39:38:7C:67:42:1F:9B:AC:D1:A7:D4:A4:AC:40:FC:B9:76:DC
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 0196A05175054CF9CC0CD53C7AF9B8C097BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 12:00:14 +0000
Manifest this update: Mon 05 May 2025 12:00:14 +0000
Manifest next update: Tue 06 May 2025 12:00:14 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: fpwQmzO7I9szvzp7ZMC5OGcZ1CFNcFZ/XdCWK5FxirY=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:75:05:4c:f9:cc:0c:d5:3c:7a:f9:b8:c0:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: May 5 12:00:14 2025 GMT
Not After : May 6 12:00:14 2025 GMT
Subject: CN=ad1739387c67421f9bacd1a7d4a4ac40fcb976dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:20:f2:89:cf:33:8e:b7:d5:89:e5:5a:23:
03:4a:32:d1:60:39:50:79:15:ee:95:ef:5b:0b:cf:
6c:bc:91:a5:74:ef:09:13:dd:ca:d9:0c:e0:87:90:
8a:40:56:de:66:48:14:5f:9d:cd:42:69:7e:25:a3:
9f:a6:4a:1b:08:06:ef:90:a7:e9:f5:fd:fc:61:54:
13:90:0c:bb:88:60:72:78:78:ed:59:58:00:db:70:
a5:ef:be:50:73:39:97:c7:68:bc:48:32:13:ff:d2:
c1:59:1b:37:6c:ea:53:03:6c:29:79:7c:ba:3c:cb:
e5:d8:4a:a7:a6:42:09:b6:e7:b1:04:84:80:ac:9d:
77:ab:c9:69:85:3e:0b:4d:00:d7:eb:32:70:83:74:
22:86:c5:2a:20:29:ac:04:7f:9f:6b:9e:44:e5:95:
fd:0b:24:32:58:fb:a9:fb:76:89:24:52:e6:bd:10:
4b:bb:ec:0d:9b:24:c2:93:e4:8d:16:ea:84:58:0f:
ab:49:79:1e:10:f3:cb:fd:e8:c3:0d:2c:3e:d6:d9:
94:0d:51:d2:82:f1:26:b2:2f:3f:06:a7:1d:c5:12:
c6:14:df:a9:bd:59:f7:43:af:1a:e9:33:fe:3f:8b:
b7:24:5f:8d:70:cd:98:1d:8d:d4:6f:35:63:3d:c5:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:39:38:7C:67:42:1F:9B:AC:D1:A7:D4:A4:AC:40:FC:B9:76:DC
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a9:d5:d7:7f:91:57:5a:3f:03:0c:7a:44:ad:5b:7f:88:41:
71:43:87:b6:f3:fa:91:82:fe:85:af:1c:79:0a:2a:fb:d2:d2:
7f:96:8c:01:a7:63:61:e7:f6:3b:79:63:6c:95:18:b0:60:56:
98:22:d8:bc:80:d2:e6:b5:d3:df:b3:d7:4f:87:d1:14:57:68:
da:d3:c7:ae:be:ef:16:41:a9:1b:2f:d2:00:22:51:d9:27:32:
c5:f5:df:9e:b9:62:fc:ec:04:cb:22:4b:29:bc:61:7f:dc:46:
2d:73:3c:2d:81:5d:a5:93:63:9e:27:d3:4c:ca:88:e1:c9:dc:
45:30:a3:7e:6f:cd:b6:c1:1c:2a:a2:58:c9:5c:90:46:69:89:
5e:ec:6b:3f:38:3d:9b:8d:35:f8:12:44:74:a1:d4:5e:0c:ed:
3e:32:24:08:5f:fc:f1:21:ae:86:32:27:6d:e1:c4:6c:09:af:
ee:10:93:9d:a5:5e:b8:15:d8:c6:63:0f:78:79:ff:ba:89:46:
b4:e2:89:a6:42:4a:40:4e:d5:65:4e:d2:ad:b9:42:0c:3a:9c:
8d:a6:08:cf:38:0a:43:ee:1e:f9:78:40:b0:9e:68:48:f6:82:
aa:54:53:34:23:e0:72:96:cb:5c:90:2e:43:0a:9f:7a:08:f3:
3d:da:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:18:59 2025 by rpki-client