Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: TBmSvBVitbwg42mZMga2iwth/73eulzwkfW2buRIsQQ=
Subject key identifier: BD:38:15:EA:FF:56:89:1F:06:60:C7:7F:72:9D:C8:1C:77:3F:6E:DC
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 019673E69E7B47290891A969329A3B3DBC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 21:00:15 +0000
Manifest this update: Sat 26 Apr 2025 21:00:15 +0000
Manifest next update: Sun 27 Apr 2025 21:00:15 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: xZrItVv2y7RX6VJYLWLT8txmbR2vWcbKgZ6FneLBwBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:9e:7b:47:29:08:91:a9:69:32:9a:3b:3d:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Apr 26 21:00:15 2025 GMT
Not After : Apr 27 21:00:15 2025 GMT
Subject: CN=bd3815eaff56891f0660c77f729dc81c773f6edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:28:69:14:86:f2:ff:ab:0a:0d:1d:8a:8b:
77:37:99:a2:ae:61:9c:4e:c0:35:06:db:eb:53:70:
72:92:2b:da:85:39:d1:00:b1:d4:36:f7:ca:c9:e8:
95:46:6e:b5:96:7a:eb:f4:14:96:d7:78:af:3e:c4:
04:86:22:43:75:15:bb:a6:04:ff:0c:63:fa:51:66:
d2:95:69:ca:bc:b4:84:ce:1b:ab:56:ab:38:27:31:
69:6c:05:4b:4b:cd:1c:ca:b1:e2:0f:94:12:be:e2:
fa:53:40:5e:19:75:15:42:f1:b3:cf:1f:07:64:df:
3e:ab:10:95:d8:7d:2c:76:4c:cf:9b:d0:91:f6:cb:
b8:46:ed:1b:c0:22:a0:12:23:0c:c4:15:e7:9d:4a:
6a:1c:c4:b5:e9:5f:f3:c4:62:2e:ef:7d:80:be:7a:
cd:d0:13:a8:99:95:2d:c5:74:56:45:12:cd:62:d4:
53:5a:f5:b4:49:d7:3e:ed:cc:36:27:b3:31:25:ff:
5a:f6:8a:bd:7a:9e:82:68:ca:1c:82:c1:15:03:92:
d8:6c:a4:60:e4:f9:98:a3:90:61:08:5b:26:4e:0b:
63:1a:57:56:62:bb:10:c7:03:39:ae:42:fe:ea:fa:
40:ce:e1:f3:66:e2:a0:19:73:74:0d:b1:63:d6:81:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:15:EA:FF:56:89:1F:06:60:C7:7F:72:9D:C8:1C:77:3F:6E:DC
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:84:84:55:bd:a0:67:a1:11:f7:8c:f3:07:6a:96:35:57:
df:c5:db:6b:0d:b3:ab:3c:b7:cf:af:d9:71:3a:f2:9f:65:d2:
70:cf:ff:d0:79:e5:7f:25:f8:41:8e:e7:7e:40:1e:9a:26:c2:
e8:33:b2:b0:4b:14:8d:6d:19:02:49:4a:3a:6f:6f:35:9b:01:
57:30:8f:3a:c2:a1:23:17:77:2d:f0:cb:88:b6:21:bd:71:da:
39:e9:4d:56:d3:32:bb:08:ed:54:cc:2a:a4:9f:fe:e4:b4:fb:
5b:14:b4:db:88:d8:87:ab:75:3b:c4:25:db:c2:78:d0:35:13:
05:f9:eb:95:6f:5f:96:49:46:58:38:4c:6b:cc:79:e2:c0:f6:
63:cd:c3:56:ef:32:e9:89:65:71:59:31:f2:16:61:61:27:94:
4b:9f:64:db:4e:a7:7e:c6:83:65:b9:ff:f8:92:5f:f9:57:e6:
ed:5c:6c:ef:68:60:19:1a:e2:0c:fa:87:61:ee:04:c9:e8:de:
6c:f0:d0:d9:f8:25:97:df:1a:35:59:bd:8a:ee:fa:91:58:c8:
f9:af:8b:37:20:6b:cf:41:f0:62:35:48:ae:2c:d4:d8:ac:c9:
45:b8:52:a7:89:ad:b3:e2:69:bf:e8:e1:a0:a0:16:28:34:1b:
7c:97:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:35 2025 by rpki-client