Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File: F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier: /HvSsWY8xJnjHxSTv9pMRzewyWfM3pv1dmHe/4SI6x4=
Subject key identifier: 3F:2E:D7:6E:15:73:4F:7C:CA:E0:23:DE:D0:FD:18:93:CA:1E:BA:CF
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 01968AA5E0BE5C6FCB84331D963B38096E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number: 1521
Signing time: Thu 01 May 2025 07:00:48 +0000
Manifest this update: Thu 01 May 2025 07:00:48 +0000
Manifest next update: Fri 02 May 2025 07:00:48 +0000
Files and hashes: 1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: jz+L5VQ5lRdZ3FA24IFFRg5cQmQHQ1jRsX2dVgeE8Xg=)
3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:e0:be:5c:6f:cb:84:33:1d:96:3b:38:09:6e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: May 1 07:00:48 2025 GMT
Not After : May 2 07:00:48 2025 GMT
Subject: CN=3f2ed76e15734f7ccae023ded0fd1893ca1ebacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:c7:fe:df:78:e7:7a:af:52:72:5b:6d:bc:
8c:4e:20:39:bf:77:58:18:67:71:10:b2:95:44:3e:
41:3a:e7:8c:e8:1e:3c:31:3c:d9:c0:fa:b6:50:b0:
72:32:1c:a7:de:b0:49:83:c1:53:05:3c:43:b9:44:
68:59:6a:8c:05:6c:33:91:0a:dd:7d:1d:b3:4e:d5:
4d:ee:00:61:b4:61:bb:2e:5d:cf:03:f1:25:49:c4:
0c:fb:c7:cc:7e:6d:0e:86:4a:9f:a6:f9:86:34:59:
ce:31:bc:96:e9:cc:0a:6a:fb:90:36:c6:0f:58:0a:
ca:7d:2f:93:96:1a:e9:7a:36:75:d2:63:e7:3a:dd:
11:ce:d8:71:e3:d6:26:1a:67:63:04:1e:b1:19:d4:
ce:aa:cc:91:9b:82:18:6c:c3:3f:53:2c:3d:14:0b:
65:4c:8c:4f:29:1f:36:df:2c:a2:fe:07:70:f5:9a:
e8:60:4b:d3:24:0b:39:58:6c:dd:e1:88:61:67:77:
b3:62:62:2b:89:3f:f6:91:87:49:d7:88:99:8a:8b:
16:ff:ef:5c:79:5b:a6:a1:64:11:c2:25:27:31:77:
86:37:02:14:81:ae:c0:81:78:dc:56:94:0f:4f:b6:
d3:0b:99:48:34:f2:df:75:0c:ed:4d:3d:57:1d:b3:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:D7:6E:15:73:4F:7C:CA:E0:23:DE:D0:FD:18:93:CA:1E:BA:CF
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:6c:cc:a8:41:07:c3:3d:1f:3a:28:55:56:86:a4:37:e0:
c8:46:0b:9e:d6:53:d0:53:1d:68:ea:73:17:77:4f:7c:81:1f:
93:7e:16:af:89:47:5a:de:9f:e0:a6:5c:b9:37:6b:29:df:32:
6e:1b:03:9b:cf:40:53:3c:18:77:5f:18:eb:15:5c:c3:09:4d:
57:72:97:36:3d:b5:dc:af:47:d2:ae:bd:e2:89:0c:07:08:a2:
62:2a:de:4d:a0:76:99:f3:43:5c:bf:f8:a9:66:f4:ad:d0:d5:
fe:fb:63:d4:b5:e8:9a:95:af:e7:17:b3:eb:ee:a2:ba:53:34:
84:28:fa:93:36:e7:fa:84:e1:7f:2b:f8:1d:d5:d9:d5:72:50:
16:b2:89:2c:e3:8f:bd:62:bc:a2:79:b3:b4:f2:30:91:50:29:
29:9f:a8:b9:fe:8c:77:26:f6:e5:f1:a7:09:56:77:23:fc:5c:
ff:bc:9e:42:a4:30:37:52:a4:e2:50:42:3f:48:18:b6:b1:20:
a3:7c:83:70:d3:bc:ff:9c:c4:21:fc:21:45:68:e6:e8:5b:37:
e6:d3:cc:b8:cf:9b:5d:a2:3a:61:b5:ae:8c:7a:6e:31:5a:f6:
93:26:56:b7:6a:7c:38:64:e0:8e:23:fd:12:45:ad:a9:a6:e3:
d1:29:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:31:14 2025 by rpki-client