Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File: fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier: ueJhfNbdrIC21ufZbih7QNrBADRkMVWjUlDHgb6BNUQ=
Subject key identifier: 17:69:DF:6C:9B:A0:F8:7D:9D:94:1D:B0:19:F8:B1:14:8F:E0:04:68
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer: /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial: 01967AFBBA2DD3C48627735A6F30E4C93EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 06:00:39 +0000
Manifest this update: Mon 28 Apr 2025 06:00:39 +0000
Manifest next update: Tue 29 Apr 2025 06:00:39 +0000
Files and hashes: 1: HnXbxzajLhcisRCq_fB03kkxY7Q.roa (hash: 3RLbNAEyHJR+jTuUtPlDmJk48r533+OhDx8HcGj/79c=)
2: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: qK8zriJdwadusFUdMvcvL4wXxqx+MOID4oSqv6VMwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ba:2d:d3:c4:86:27:73:5a:6f:30:e4:c9:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Validity
Not Before: Apr 28 06:00:39 2025 GMT
Not After : Apr 29 06:00:39 2025 GMT
Subject: CN=1769df6c9ba0f87d9d941db019f8b1148fe00468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:5d:0c:a4:43:c8:f5:c1:e0:9a:e3:79:8d:
69:1a:7b:a3:f4:61:7e:3c:00:07:d4:a2:b1:5b:fe:
9f:f3:b9:a0:8d:69:56:e5:92:00:16:6c:44:33:4c:
18:7f:c3:2d:97:90:dc:c4:dc:88:63:dc:15:18:2c:
96:08:7c:9f:3d:7f:77:e1:12:1d:02:75:b3:0d:03:
36:bd:ce:c9:6e:e2:4b:82:d9:57:d3:ba:66:f1:69:
c9:94:2e:99:0b:88:b0:0c:b3:ca:12:7f:4a:74:aa:
55:d0:0a:d4:16:b2:8b:5d:65:a0:a0:02:86:da:9f:
24:39:34:3b:f5:d5:f3:11:94:d7:dd:f4:02:86:97:
53:08:57:f6:67:d8:30:82:47:19:2c:8d:76:89:0f:
cb:27:5d:22:b2:b0:c1:dd:4c:94:db:8c:c9:77:d0:
b3:3f:d2:6f:02:7d:48:7f:32:cf:bd:3c:0f:d2:0f:
ec:d7:ef:67:fb:83:23:b1:7a:d1:5f:98:c4:54:5b:
a5:10:63:b9:76:a5:36:ff:5e:49:3c:7d:cb:d0:8e:
e3:d2:72:3e:13:b4:32:d5:5a:fc:0b:b7:dd:ff:fd:
60:b5:a8:57:a6:64:32:8b:a1:75:43:45:a1:5a:1a:
bf:04:27:dd:13:d0:6e:1c:eb:ae:ba:b2:bd:dd:84:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:DF:6C:9B:A0:F8:7D:9D:94:1D:B0:19:F8:B1:14:8F:E0:04:68
X509v3 Authority Key Identifier:
keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7f:e0:91:75:7c:d0:ec:bc:ce:58:83:85:fe:05:1d:75:6f:
a4:4e:11:b6:b3:d7:03:6d:f7:51:17:a8:7e:1f:2c:2a:95:16:
bd:df:ce:4d:ef:2f:3e:c9:4e:2d:10:06:84:6d:a6:a7:46:3e:
ad:a7:14:f5:86:72:b0:b2:98:e9:2c:a6:8c:3d:2f:76:38:25:
d9:64:77:a6:e2:7a:a1:3a:ba:c7:96:0b:5a:fe:af:1f:29:1b:
87:8c:c3:67:af:97:31:84:e6:a8:29:18:8a:b9:9a:ec:c4:80:
20:c4:28:65:97:ed:67:5d:99:b8:34:f0:f5:94:1c:6a:9e:4e:
3d:15:19:7c:8c:15:3c:83:a6:45:60:a2:a5:af:25:66:9e:86:
f1:33:0d:db:5c:25:bd:05:b9:82:2c:bf:88:e7:31:64:e1:70:
e8:bd:fb:e4:69:1e:53:2e:f7:77:5e:ac:ec:a6:29:3f:1e:31:
c0:bd:8b:8c:d0:58:22:9b:10:4a:34:0b:c5:fa:97:62:76:df:
35:1a:4f:62:bd:d2:12:61:af:61:66:e5:72:dd:ee:36:72:ad:
9f:59:ae:59:b3:6a:40:86:d5:a9:9e:d0:69:b2:31:51:76:a7:
79:2e:33:44:81:6a:49:11:07:99:7d:64:7e:cd:9b:54:af:2d:
f3:a6:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:43 2025 by rpki-client