Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: UwhfjJDX+93yCrNRF5vxouttuDF66cTtGhAPbYzmsMQ=
Subject key identifier: 2E:DA:34:2B:36:EE:CC:4C:AE:42:0F:3B:51:03:4D:4B:1C:FE:BE:A4
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01968D390585DD693FB57FDA9FAC028837B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 19:00:46 +0000
Manifest this update: Thu 01 May 2025 19:00:46 +0000
Manifest next update: Fri 02 May 2025 19:00:46 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: jKzt+oYa2IOYYc+Kvq/xSMgQ5LeAJhtsA+sUmCNfetc=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:05:85:dd:69:3f:b5:7f:da:9f:ac:02:88:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: May 1 19:00:46 2025 GMT
Not After : May 2 19:00:46 2025 GMT
Subject: CN=2eda342b36eecc4cae420f3b51034d4b1cfebea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:45:3e:b4:b5:5f:fb:c1:87:e6:b7:73:92:
66:c7:d3:21:77:04:77:0a:b9:06:1e:a3:af:a5:95:
33:e5:41:be:3f:67:67:6f:a6:54:01:70:f1:ae:ad:
33:23:70:42:47:9e:59:90:23:84:38:60:cc:53:cf:
56:24:05:02:8b:cf:0e:3a:64:42:ca:96:a4:aa:c6:
7d:de:23:bd:b4:99:e1:0d:d0:00:03:b0:2f:c0:a2:
95:58:f2:17:b9:05:d0:d0:43:47:92:fe:0b:b0:53:
96:78:07:28:0c:c2:c6:2d:46:f6:90:b1:dc:0f:62:
2b:3c:9d:d1:f8:a5:e4:a7:cd:e8:55:9d:a9:a4:da:
aa:f9:9f:5d:65:ef:d5:c7:af:ec:b0:e4:77:db:6e:
bc:8f:7b:ff:8b:26:44:f6:db:a3:d0:02:18:a0:de:
bf:68:07:b6:74:82:8e:b1:18:08:ba:29:35:e6:79:
3b:87:e2:9c:65:8a:df:2c:43:78:d7:20:ea:da:09:
09:f2:d9:8f:ea:90:f5:32:34:88:d0:89:02:5a:8c:
39:eb:4b:f7:fa:d6:6d:ef:e7:5b:f6:40:57:13:2c:
40:e6:23:76:7e:67:11:23:f4:f0:2c:73:86:e3:b3:
d0:a3:69:48:67:55:e2:85:a3:18:66:99:2f:c6:96:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DA:34:2B:36:EE:CC:4C:AE:42:0F:3B:51:03:4D:4B:1C:FE:BE:A4
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:21:7f:a0:ff:62:70:6b:79:62:71:fb:c3:0a:bb:71:87:
42:dc:80:68:02:5c:a9:52:d1:2a:dd:4e:16:d9:e4:84:62:e6:
ab:ae:07:ba:45:f4:9e:81:b3:d0:ab:44:89:34:cf:1a:f8:35:
2c:f0:65:09:aa:c0:21:df:d3:71:61:f1:07:90:99:52:42:a3:
63:7c:f6:93:de:23:62:ab:0a:2c:97:00:44:e7:f9:4b:fc:89:
af:19:d2:4f:b9:79:c4:e3:aa:c7:3f:0f:b5:b9:1f:3e:0c:b4:
07:39:a4:49:48:89:6b:75:af:d9:27:20:cf:5f:bd:48:00:2a:
83:9d:96:06:b1:06:72:65:d0:69:66:cf:c8:a1:c2:c2:94:bc:
21:b0:a9:19:40:00:cf:f3:2f:ed:ca:02:c0:0f:22:07:6f:00:
93:8e:2e:63:08:85:ad:45:1f:58:c1:66:a5:c7:96:cd:3d:3d:
79:de:a1:9e:32:61:3d:67:dd:03:22:21:c5:d8:02:b7:e0:ce:
04:a6:15:3f:bb:43:12:a8:cf:67:01:66:e2:27:3f:78:ea:39:
8d:43:48:d9:c1:00:d4:7f:cc:f2:09:c8:6b:88:37:35:69:cd:
9e:b5:a3:2f:fe:c4:39:05:9c:bb:b8:f4:76:a0:55:ec:10:47:
38:d9:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:24:57 2025 by rpki-client