Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: SNfo8kgqNjx0/UNrDeCl9VcJMp/CW8wiV3XE0mxLmhA=
Subject key identifier: 0A:C5:3B:B6:F8:9E:16:79:35:D3:FB:EB:F0:49:BF:EA:9C:4F:B4:DC
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01968BEF2665795592CA529DDBE7F6E5AEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 151F
Signing time: Thu 01 May 2025 13:00:28 +0000
Manifest this update: Thu 01 May 2025 13:00:28 +0000
Manifest next update: Fri 02 May 2025 13:00:28 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: l2nhaqyma01HTUJmriy2li4ihdcjSPBPMWSqfly+YiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:26:65:79:55:92:ca:52:9d:db:e7:f6:e5:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: May 1 13:00:28 2025 GMT
Not After : May 2 13:00:28 2025 GMT
Subject: CN=0ac53bb6f89e167935d3fbebf049bfea9c4fb4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:57:5d:e5:1f:ca:be:8d:84:64:52:16:54:
29:f9:e3:47:72:94:d4:0a:62:f4:af:82:b1:02:95:
ff:e4:5c:6e:88:12:3b:06:28:89:2b:03:bc:47:03:
fa:b1:b1:0c:28:c8:d1:ba:18:b8:c9:d1:a9:63:1c:
c6:c2:3a:91:fa:9c:9c:cd:12:0e:98:85:96:97:a5:
83:49:e8:1e:e3:18:24:f8:e2:c8:3c:ff:87:2e:4f:
1c:83:64:84:d2:1e:37:df:57:5e:f5:95:7c:e6:ac:
98:42:e6:2f:74:cd:43:53:a6:67:1a:38:5c:07:0d:
20:56:32:75:c6:8d:ab:17:bb:b5:e6:9a:90:b6:7a:
5c:4e:df:1c:24:19:a8:59:c6:4e:b0:33:70:9a:4c:
f9:17:b4:9f:7b:3a:a4:d8:65:30:08:4d:fa:e0:e3:
9d:2a:79:11:d2:24:95:86:9a:36:1f:e3:c7:22:67:
b4:e3:0c:ca:d8:55:69:97:e1:f6:7b:93:6d:0d:ba:
17:ec:a9:66:37:00:36:b0:0c:95:0a:48:17:e6:96:
4c:5d:e5:49:92:62:31:57:f4:a2:07:77:70:f9:14:
24:cd:b4:c8:ca:9c:78:7a:3f:9c:f0:be:5b:89:78:
75:3f:50:f7:d2:28:77:3a:4f:4d:07:b4:a3:64:87:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:3B:B6:F8:9E:16:79:35:D3:FB:EB:F0:49:BF:EA:9C:4F:B4:DC
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:1f:90:67:2c:2b:25:01:9e:4c:43:68:e7:4b:6d:64:59:
13:a0:a5:22:27:28:01:73:db:8f:2d:00:60:5d:36:75:31:48:
3f:de:de:a8:13:86:49:ad:41:aa:bc:d9:4c:d6:1e:b9:28:e0:
0f:11:3b:09:78:ca:66:6f:43:28:85:35:b3:91:ee:d3:23:00:
fa:46:03:35:f6:2e:ec:0e:01:0d:ac:ef:57:81:5e:e7:b0:d0:
5c:0f:29:9a:86:93:61:21:65:9a:61:5a:cb:b8:5a:27:41:b2:
5d:9d:c9:79:b3:be:1d:7d:71:84:8a:6c:df:92:8b:11:5f:78:
2d:e1:d6:af:91:6c:14:72:d9:b1:4f:0f:ab:33:a8:8e:53:8f:
9c:af:08:ad:92:71:29:15:f9:8a:c2:98:5b:50:2c:58:3c:25:
60:a5:5e:bf:f4:d2:fe:cd:57:a8:96:a2:42:8b:57:8b:13:36:
53:cc:fb:d2:32:a7:33:61:82:bc:4a:3e:65:86:9d:60:43:6e:
7a:21:85:c5:ec:87:05:64:ee:a2:90:7d:28:39:a5:0f:9d:10:
73:a2:b3:1a:95:65:16:b6:56:61:d4:74:d1:c8:03:17:aa:67:
29:d5:f8:36:47:d3:6b:d8:3c:45:f8:cf:a1:18:e7:d5:40:0f:
a0:75:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:23:40 2025 by rpki-client