Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier: 7Vlwy+LMtVTp4Y3jZTqElNiB+KykoEevk/oVB+UXq9E=
Subject key identifier: 0D:E0:47:81:26:4F:ED:AD:51:CA:7E:A1:ED:A3:AB:7C:21:99:54:6D
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 01967CB35CBC4795C384B72A7C09F7A23710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 14:00:51 +0000
Manifest this update: Mon 28 Apr 2025 14:00:51 +0000
Manifest next update: Tue 29 Apr 2025 14:00:51 +0000
Files and hashes: 1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=)
2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: +/wKzG1+UiXnlMUApr1CvzFlCSZFO1tlK6pupqrLg8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:5c:bc:47:95:c3:84:b7:2a:7c:09:f7:a2:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Apr 28 14:00:51 2025 GMT
Not After : Apr 29 14:00:51 2025 GMT
Subject: CN=0de04781264fedad51ca7ea1eda3ab7c2199546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:de:38:8f:1d:24:0f:0e:fd:22:23:bd:12:
ba:b5:17:81:02:be:14:e7:48:be:d0:2a:05:8a:23:
ba:5f:8b:30:f3:da:bf:71:fa:4e:a0:b9:c9:92:b3:
39:01:76:af:1d:88:19:b1:1e:00:48:42:ed:a1:bc:
f5:98:eb:59:05:f3:a9:a4:cd:36:c3:6c:d8:d4:bf:
4b:b5:59:c2:8d:1d:b9:57:e1:fc:77:b6:db:fc:e1:
79:c6:78:b3:b9:cf:97:68:df:b1:18:fd:0c:4c:b7:
7f:7a:d4:ad:74:b8:7b:4f:8a:8a:89:67:a8:76:e0:
6c:8a:91:bb:0d:46:58:6d:20:b3:c3:0a:0c:32:a5:
7a:8d:61:f2:aa:fb:d3:1a:89:62:1d:e0:ef:51:5a:
37:e8:08:3f:db:65:94:0b:17:17:56:1a:bd:77:30:
83:37:e6:51:c1:83:6b:45:8f:33:46:62:86:83:7d:
9d:77:47:8b:48:3f:c1:fa:c9:b6:6e:d0:1d:e8:c5:
0f:a7:d5:13:a0:90:0e:2c:5e:0f:98:51:2f:96:ef:
71:af:e5:df:ca:3c:56:fb:81:28:7a:17:7a:66:87:
1f:9f:b4:fb:2a:fb:b8:55:88:25:d9:70:65:5c:5e:
0c:81:3b:0f:f4:9d:47:a8:21:3b:b9:8e:58:10:76:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:47:81:26:4F:ED:AD:51:CA:7E:A1:ED:A3:AB:7C:21:99:54:6D
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:d4:ae:eb:47:ae:c5:09:c1:03:c3:95:37:c3:49:bd:5a:
a5:b5:0d:1a:a8:ef:f0:bb:fa:16:52:29:0d:fe:b8:30:be:84:
71:95:a1:ac:10:bd:f1:23:bb:ab:2d:3f:7a:ce:85:af:38:de:
96:4d:cf:9d:3b:35:55:a2:30:be:b5:2c:6e:42:8a:79:82:71:
d5:68:77:a6:93:7c:65:57:1c:8f:92:02:98:c6:e8:c6:c2:6d:
e5:41:89:02:62:90:86:42:cc:41:63:d1:cb:8b:ba:59:61:0a:
30:07:9d:2d:43:b0:26:46:1d:f4:f0:3f:72:94:11:df:eb:3c:
7c:e9:32:f7:8d:42:48:57:2f:48:00:ac:3d:32:2e:7a:6f:01:
c3:94:5c:1e:06:55:a2:1c:a8:c7:80:af:be:36:a4:bd:62:7d:
4b:53:64:93:21:62:a4:47:a5:3b:b4:3b:d6:8b:1f:b6:4d:24:
a0:d2:ea:76:76:19:ec:36:a0:00:39:3e:27:61:a8:2e:e9:ae:
38:81:04:9e:58:13:d0:bd:69:c2:22:8c:9d:28:cd:02:7a:d0:
80:0d:1b:55:2e:4d:38:18:e4:7d:ea:fa:fe:c7:1d:51:96:0f:
c7:57:96:96:83:13:02:5b:57:ff:ec:f8:93:e8:f1:08:a2:e3:
b7:83:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:07:49 2025 by rpki-client