Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: Q1UHDtF0FtF7KSLD31cmGIsw6M59KZMjt0rOlAoOeA0=
Subject key identifier: 58:C9:9C:E4:80:50:09:2F:2F:8E:F0:F5:65:76:69:87:19:88:52:61
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 019682B53296DA42E3A20E24DE6AD2848ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1534
Signing time: Tue 29 Apr 2025 18:00:35 +0000
Manifest this update: Tue 29 Apr 2025 18:00:35 +0000
Manifest next update: Wed 30 Apr 2025 18:00:35 +0000
Files and hashes: 1: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: kdXjTJbXV8XnVfKSn9z0gmpDS1rZTCcZOIYA9eoMdbg=)
2: iyAReQYZi6annFwTzxnNMi_NX88.roa (hash: RA8Tw9Fc/DRqwFBqIp5rQULzzVh8lGYGH4fnEdfI7zE=)
3: onQc6RXgIQfb3aGGII4Ouo46uLk.roa (hash: YBoMTfa2KP4rZrIUbdsss9ucz/bO7zkPPOfx3KzpJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:32:96:da:42:e3:a2:0e:24:de:6a:d2:84:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Apr 29 18:00:35 2025 GMT
Not After : Apr 30 18:00:35 2025 GMT
Subject: CN=58c99ce48050092f2f8ef0f56576698719885261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:7e:7f:ca:f6:72:2e:44:33:82:3d:fe:49:
52:75:ef:df:bd:55:30:47:3e:35:4a:7e:93:58:72:
46:e3:07:01:1c:8f:0d:6c:f0:c7:87:ca:8b:d4:aa:
f3:48:9c:75:c1:12:d1:9a:aa:ef:1e:c7:9a:3c:00:
f2:16:6f:75:c3:35:93:2d:42:aa:94:a0:47:92:a8:
46:08:d9:63:3e:f4:c3:6c:a8:b6:7c:ff:45:0c:b6:
d0:f3:21:95:88:2c:13:1a:25:dc:e2:1b:ef:14:18:
fb:84:b8:73:54:09:c2:ca:79:f6:4d:25:ee:b3:16:
77:48:7e:16:2d:1a:a7:4f:6d:9e:6a:19:bc:ba:35:
db:a4:f7:71:cb:d1:a0:6b:cf:28:24:79:d5:34:0a:
38:50:e4:0f:b7:0a:24:03:c6:6a:7d:ed:81:2e:d8:
cf:11:84:b6:08:ad:26:a5:13:22:19:fb:67:86:58:
66:3a:5a:e3:8b:dd:a6:f5:2c:03:18:41:7e:45:ed:
f2:a8:08:27:f9:2d:ec:b4:75:40:8c:2f:96:e9:26:
2e:95:36:96:58:8f:d7:2c:1c:a0:47:a5:82:27:24:
33:45:34:e7:a5:a2:23:d3:1c:ab:98:ac:07:a0:86:
16:78:07:cd:cd:aa:02:bb:e4:02:a9:cb:cc:ca:3f:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C9:9C:E4:80:50:09:2F:2F:8E:F0:F5:65:76:69:87:19:88:52:61
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b5:2c:b7:75:b2:3b:2b:85:2f:08:34:0c:32:08:3e:60:8c:
ac:05:af:40:f1:19:e8:5e:0c:14:37:f3:ba:6e:87:08:da:e6:
05:63:6b:21:98:e4:2e:22:de:d4:3f:fe:e0:49:3b:41:c1:89:
71:fe:59:72:cc:72:89:15:8a:6e:4a:2f:7c:bd:1f:07:30:2c:
42:53:08:ea:1b:bc:d1:67:d4:c2:b5:4e:11:78:83:b3:c9:21:
8e:ab:da:4d:75:02:a6:82:c1:17:65:4e:48:4d:36:f7:bf:ed:
43:f5:dc:6a:ca:38:96:ec:f8:a8:37:eb:da:0c:fd:a8:58:32:
6d:da:44:aa:24:8b:ed:2c:e9:cb:4f:1d:8d:e2:39:79:7f:a0:
96:29:5d:6a:16:a3:91:72:77:5b:04:70:8a:3a:80:c7:39:89:
9c:8a:34:c6:5a:ac:29:f4:1e:b0:5d:f4:05:ad:ae:5e:72:93:
92:29:15:b2:89:25:ee:f9:f3:d8:d8:ba:84:c8:de:3c:13:02:
31:de:f0:ec:5c:7e:aa:ba:90:a2:d4:25:64:1f:67:3b:94:e9:
7b:c2:e1:e0:92:a9:f1:28:9a:4a:5e:66:86:68:f8:1c:86:89:
5f:55:46:6c:b7:e1:a1:6d:3e:ad:34:9b:ff:6c:33:ef:21:01:
ed:a4:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:01:06 2025 by rpki-client