Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: GYGbUG/Eu0nWVcPowijAPq1DmVVH4nfukj2pVvzgN5Y=
Subject key identifier: A5:CA:17:FC:F4:2B:10:1D:06:29:54:E5:D5:FA:B4:E9:FE:2E:A3:02
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0196AF56F504A72F27D8A89A4B6AACDB29C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 088E
Signing time: Thu 08 May 2025 10:00:33 +0000
Manifest this update: Thu 08 May 2025 10:00:33 +0000
Manifest next update: Fri 09 May 2025 10:00:33 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: 530kOxNT8ONJPNzK7e6MxbfKv4BNzehmQgInTxOA+z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:f5:04:a7:2f:27:d8:a8:9a:4b:6a:ac:db:29:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: May 8 10:00:33 2025 GMT
Not After : May 9 10:00:33 2025 GMT
Subject: CN=a5ca17fcf42b101d062954e5d5fab4e9fe2ea302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:90:9c:83:f0:da:03:3b:35:17:8a:5b:19:
d8:31:3f:88:de:c9:37:3b:41:a2:cd:d8:f7:67:01:
15:e0:7f:16:91:68:5c:a2:48:79:55:d4:db:7e:ca:
18:57:5c:e5:1d:4c:70:f8:26:41:33:a4:d1:26:e8:
a1:f6:80:4b:5c:da:3d:32:f4:87:2d:29:1e:7a:a1:
17:76:da:64:7c:90:d9:00:f3:48:ec:bf:d2:27:36:
f6:ed:b2:a1:e0:ad:43:c8:9f:fd:79:a3:83:4e:ae:
b1:f6:19:9a:e4:f4:fd:19:7f:17:59:37:c7:b2:9d:
9a:c5:af:0a:c2:2a:7d:7c:03:e7:b8:82:8c:db:22:
e4:e2:93:9c:4a:34:b4:fe:19:54:47:51:56:f1:17:
cd:53:b2:c3:64:f0:64:b5:fd:66:94:31:ca:42:9a:
34:43:0b:20:ee:51:ce:35:47:9a:bc:93:64:33:f6:
6b:c2:f6:d7:50:0b:2d:82:a0:d8:2e:01:a2:a8:83:
32:da:df:15:e9:25:cf:7a:e7:e8:1a:ea:be:dd:10:
f5:7b:47:da:b2:79:c5:ad:51:41:3e:a6:b8:b8:89:
88:ab:48:35:fc:de:33:c8:9b:d2:da:94:a1:5f:55:
90:18:22:80:45:b3:95:94:8b:df:d8:ed:78:49:b2:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:17:FC:F4:2B:10:1D:06:29:54:E5:D5:FA:B4:E9:FE:2E:A3:02
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f9:44:da:17:a9:f4:58:b1:2d:ed:35:d9:45:92:b8:7f:0a:
40:ef:83:67:e5:fe:52:32:a9:98:05:00:0a:c1:b8:06:e6:4f:
8a:41:5e:e6:5f:ec:a4:a8:95:55:3f:0c:90:52:bc:01:8c:81:
df:69:8d:d1:8e:9a:bd:06:d8:95:15:da:be:de:79:97:d5:69:
71:60:4c:27:e5:9d:e8:62:77:2e:17:1c:d6:60:da:f5:03:8a:
41:ff:11:be:de:6b:3e:ac:e5:d8:0c:d1:f4:e5:79:cc:81:a6:
47:59:0e:2d:52:83:57:fd:04:46:91:06:00:fb:fa:62:ee:f9:
aa:9a:b9:7d:5a:80:05:53:1c:ec:f9:46:40:e1:dd:68:19:01:
15:4f:f8:bf:4f:59:ec:98:3f:07:c2:b5:9d:4f:ca:25:33:1b:
d0:ea:89:e5:97:03:13:c5:15:4a:c9:6c:bb:60:62:d0:07:70:
d5:f6:7f:dd:f3:1e:55:2b:c5:3e:21:20:fb:56:f6:1e:ff:64:
b3:7c:b8:5e:37:ff:98:76:2c:8f:4d:82:f8:50:02:f7:68:e1:
6c:19:5a:3f:f8:59:64:d5:fb:38:59:ef:74:9d:5c:a8:a9:2e:
b3:7f:92:c6:29:dd:58:4b:76:32:64:89:d5:e6:dc:02:51:a6:
c8:0c:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:53:43 2025 by rpki-client