Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: nXQZlF9DhFnJxXC7ack+kNBYPskQGN3PNF3Eyehgr3o=
Subject key identifier: 63:85:03:BF:92:D8:B4:87:62:0E:0A:89:BF:DF:2F:91:E3:69:39:70
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 019685B61D5A0B72B9289EC2BAE58A9DEB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 08:00:26 +0000
Manifest this update: Wed 30 Apr 2025 08:00:26 +0000
Manifest next update: Thu 01 May 2025 08:00:26 +0000
Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: A/BYD+ezEB5yUugGRFe67UIu1OGs9Sr6wUo3T7JgyoM=)
3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:1d:5a:0b:72:b9:28:9e:c2:ba:e5:8a:9d:eb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Apr 30 08:00:26 2025 GMT
Not After : May 1 08:00:26 2025 GMT
Subject: CN=638503bf92d8b487620e0a89bfdf2f91e3693970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e4:bf:9b:02:df:05:ff:2e:cc:9d:5c:d2:95:
3b:f4:89:9e:6e:70:ff:40:8f:ad:23:65:5c:89:75:
e9:1a:df:ae:7d:bb:5a:54:2e:72:9e:8c:a8:00:bf:
e4:82:3f:d4:b6:27:19:cd:fd:58:89:98:66:e1:34:
da:f5:ec:1d:95:f9:c4:f6:9b:df:5f:7b:10:aa:19:
81:53:cf:f3:49:1f:1a:ba:05:e9:dd:d7:81:c7:a8:
b2:6a:30:05:e4:c5:9d:ca:2c:92:06:50:21:d4:ff:
fc:5a:f6:b6:79:23:21:53:67:80:1b:6a:64:45:1c:
32:6f:55:91:51:17:e9:ca:4e:7c:0c:1a:64:3e:0d:
b5:b0:2a:55:ea:b2:02:89:ed:67:6e:23:0c:e9:85:
d0:94:0e:59:cb:dd:08:50:38:87:b6:b7:78:f8:7c:
ab:6e:48:27:04:4e:0e:96:84:d9:d6:02:d6:ce:53:
39:93:5e:2e:94:61:77:bb:81:2a:71:98:9e:01:4a:
74:13:64:ad:bb:ee:4a:75:46:e1:6e:a2:5b:9e:ea:
27:c0:a9:a9:0f:ab:d8:f0:aa:7c:93:aa:c2:ca:51:
a8:e8:0e:e1:67:06:b8:ff:1d:ab:5f:e6:9d:55:e4:
db:25:a9:94:69:22:0b:80:fe:26:e8:d1:2b:70:bc:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:03:BF:92:D8:B4:87:62:0E:0A:89:BF:DF:2F:91:E3:69:39:70
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:d3:0f:18:28:d0:22:8e:54:a3:b7:f9:79:5a:a5:1f:fa:
29:cf:48:7b:7e:9d:05:11:3b:8f:d5:04:9e:fd:66:19:43:fb:
7a:ca:2a:0b:86:e8:eb:86:28:4f:db:d6:69:63:63:4e:f4:f7:
1b:ae:4b:fc:70:2e:ef:94:65:99:63:31:ab:6f:bb:00:03:3c:
96:c8:db:33:19:ef:2e:07:bf:42:a9:9c:22:f4:ce:ef:00:a1:
06:c5:bb:f8:b7:6e:77:cb:36:49:dc:5e:7f:78:d7:d0:d2:f1:
61:78:5e:3a:f3:4d:ab:3a:3f:c8:c0:52:8a:03:7c:f7:57:43:
e7:54:41:1d:92:eb:51:74:b4:61:a0:ec:1d:93:d9:4f:0e:60:
99:ca:18:f7:27:72:59:74:08:b6:1c:c4:b7:0e:50:c3:c3:46:
cc:b0:ca:6f:30:f2:d3:bf:b1:34:16:fe:df:8a:f9:37:50:59:
40:35:3c:b7:4e:9b:70:49:b7:c2:2d:3a:a8:76:77:29:f0:66:
d4:1b:f5:28:94:e2:ad:a7:68:62:c4:49:13:ac:83:cc:60:85:
37:2d:9f:05:de:7d:06:e5:ed:a5:ad:c1:b9:16:74:53:46:49:
8c:0b:9b:ab:68:3d:23:38:3c:f4:ca:76:ac:9d:77:6d:ae:73:
49:00:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:51 2025 by rpki-client