Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: KwiaV//RQU+lTgF+PCqYt4CKZbu7iEuUDV3C85cyb6A=
Subject key identifier: B0:6C:4F:05:47:EA:13:DC:F3:45:60:B2:19:3F:DA:CD:99:55:F0:C2
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0196B47D4384E7F452E13E1271742E30D073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 10:00:30 +0000
Manifest this update: Fri 09 May 2025 10:00:30 +0000
Manifest next update: Sat 10 May 2025 10:00:30 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: t7XVWwaKvxNjoC0r0emlxRqmsmZST04RtqWvrwxxvu4=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:43:84:e7:f4:52:e1:3e:12:71:74:2e:30:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: May 9 10:00:30 2025 GMT
Not After : May 10 10:00:30 2025 GMT
Subject: CN=b06c4f0547ea13dcf34560b2193fdacd9955f0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:03:f5:4b:6c:a7:c1:f1:a2:05:c6:0d:5f:
fd:02:72:f6:73:75:4b:de:6d:56:25:66:0a:4f:86:
e4:21:5d:64:6a:f1:46:52:dc:30:ae:34:2d:42:62:
2b:cf:c7:18:dd:74:d4:7f:c7:59:47:5c:57:35:c9:
7e:92:97:59:88:89:7e:e0:43:fd:bd:e8:20:e3:de:
0a:86:3f:24:8e:e6:af:95:53:d6:43:c6:3a:fb:b9:
14:6f:bc:f3:a8:22:f9:5e:36:1e:78:a5:de:15:1a:
2b:bd:00:8a:78:68:45:ec:b1:2c:82:86:fe:f2:e9:
56:a1:81:c6:39:78:62:d8:dc:e4:36:91:a5:75:a1:
eb:54:d4:94:84:48:09:e0:92:c7:9b:34:1a:30:1b:
ae:5f:70:5f:59:62:a2:ae:f2:a0:32:ee:8d:b0:e1:
d4:de:13:3f:48:51:bc:0c:26:52:70:48:04:4e:82:
a2:f7:ca:ee:03:42:1a:67:84:84:8e:26:f3:83:93:
eb:1c:c0:18:dd:e2:af:7e:18:f4:d5:eb:0d:66:8d:
8b:df:fd:67:b6:c1:75:d2:fe:80:5f:b8:9c:35:27:
2a:76:32:6e:fc:5a:96:1d:ac:62:02:3b:c2:d4:2b:
f7:10:e1:70:39:77:60:8e:f4:95:f8:b5:0e:cd:25:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:4F:05:47:EA:13:DC:F3:45:60:B2:19:3F:DA:CD:99:55:F0:C2
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:17:f6:00:88:d6:61:9b:d2:25:01:1c:95:13:0a:c3:03:74:
bb:69:26:e4:da:03:11:51:66:e3:36:25:c8:a6:8f:99:7e:9d:
ab:34:b1:1a:bb:4b:09:8a:49:b4:72:a2:c1:98:56:94:e8:e0:
a4:2d:a2:44:8d:d6:46:96:88:e5:79:a2:42:dd:42:be:77:ae:
f7:f3:74:d3:0d:92:da:5f:de:d0:7d:50:3d:ec:4b:b9:04:00:
3c:b4:34:bf:54:39:d5:63:8a:c0:38:23:c8:25:38:be:fd:53:
2e:c4:e2:61:d2:f7:87:01:c2:ea:aa:67:06:ca:a5:b5:4f:54:
2b:a3:5a:98:2c:10:37:a6:13:f7:b3:9f:77:62:40:d7:67:9d:
66:10:e2:0b:1e:c4:a0:8a:4b:60:f8:ee:47:8e:f8:b3:14:03:
90:a4:e1:fd:43:a4:54:38:56:05:cd:41:7a:89:16:23:c5:23:
ca:67:a8:3a:22:df:b1:30:04:0c:e6:77:57:a0:23:8b:fd:31:
19:11:d6:da:7a:13:2e:e5:f4:7e:e7:dc:7d:3c:b9:8e:70:fa:
43:fa:21:f0:bc:08:f7:a1:fe:10:08:69:40:a1:29:43:de:10:
0d:2d:42:8b:52:f1:6d:17:41:a9:88:8f:d0:5e:30:b5:71:d0:
01:c6:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:45:09 2025 by rpki-client