Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: mXTx6gbzq+pyztP1wjjQ6A0ODGDq2CkukWlAYC2SN/E=
Subject key identifier: 07:5B:AA:39:0D:25:2C:9D:95:92:28:AA:61:7B:55:6F:AF:C6:4A:BF
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 01968736F54ED529F14343C15D9227C97323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 1352
Signing time: Wed 30 Apr 2025 15:00:47 +0000
Manifest this update: Wed 30 Apr 2025 15:00:47 +0000
Manifest next update: Thu 01 May 2025 15:00:47 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: 4rB3GKu1QYBPL2c/y3DMCbXYtzEtPmMlTCdSu3UKnU4=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:f5:4e:d5:29:f1:43:43:c1:5d:92:27:c9:73:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Apr 30 15:00:47 2025 GMT
Not After : May 1 15:00:47 2025 GMT
Subject: CN=075baa390d252c9d959228aa617b556fafc64abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:9b:62:60:4d:6e:1e:76:0f:d4:96:2d:82:
53:be:ab:c4:36:5b:82:1e:a7:84:af:02:9f:8a:a0:
50:1d:19:a6:3c:b4:e6:89:aa:96:e5:51:31:09:55:
4b:f8:f7:59:50:65:71:fb:4f:3a:59:71:53:5c:52:
38:e0:70:94:3f:e0:f4:f5:c7:02:fb:28:62:ac:f9:
cd:92:e1:5e:81:40:8f:89:f8:de:f1:c6:47:e8:02:
d2:c1:7b:e2:e7:25:72:0e:67:27:7e:e6:b5:f7:c5:
ff:b7:89:b9:f5:9c:ae:6d:2b:b5:fa:62:2f:3d:cd:
d1:24:fd:2f:a5:b6:f9:87:10:e4:85:4d:f4:1a:bb:
70:25:89:4d:e0:1d:a3:57:64:04:60:77:62:2a:81:
94:17:d9:a6:cb:c8:96:79:c8:47:f0:5f:11:bb:25:
9e:d4:0a:30:15:1e:e6:13:1f:08:87:bf:5c:3c:63:
2b:37:fb:0d:7e:62:d1:db:e1:ca:48:06:ce:93:20:
3e:bf:ac:3a:00:6a:01:ea:9d:0d:0c:65:6c:d1:b2:
c8:fa:2f:97:bc:62:04:26:c3:47:73:1e:7e:bb:43:
74:7d:c1:7b:be:0f:bc:09:a1:1e:a4:ba:d2:fc:df:
48:23:a9:e6:97:86:38:48:0e:c9:85:c9:b6:93:5e:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:AA:39:0D:25:2C:9D:95:92:28:AA:61:7B:55:6F:AF:C6:4A:BF
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:9e:81:77:c7:3e:70:74:46:54:c7:30:3b:aa:7d:21:ba:
e8:21:2b:62:b3:ee:bf:ba:90:37:ad:58:a8:c0:cc:64:74:5f:
bd:5d:96:8e:79:e4:43:f4:6a:9e:2d:69:e4:7c:27:ce:7b:3e:
48:89:a4:fe:18:ec:c0:93:1c:37:8d:30:45:ae:f7:36:85:25:
8a:65:18:56:3c:bf:b4:63:6c:b6:ea:9b:b9:a6:c9:28:7b:6b:
8d:aa:7c:8d:db:52:cd:2c:d5:b5:80:93:2a:66:fd:1d:6c:7b:
00:10:54:b2:6c:bc:9e:ff:18:dd:e2:1a:c5:45:41:cc:a8:9d:
06:33:07:fc:a7:10:b3:19:0f:b7:2f:85:49:ee:58:c5:6e:cc:
8a:bd:60:68:cf:ca:59:b8:76:d8:21:96:b1:66:41:8b:a6:02:
30:d5:2a:57:77:2e:f7:5d:fd:63:34:8c:31:bb:ad:ca:8d:51:
12:58:1a:d1:9e:54:3a:f7:b8:e2:46:d9:78:4a:fc:8a:a0:b9:
b5:eb:aa:9c:da:c4:f6:b0:10:a5:55:f6:40:dc:7c:2b:a9:20:
d0:3c:fb:0c:4f:f3:e3:ec:b6:dc:67:04:6f:5e:d9:f1:23:f4:
42:c0:1b:58:9f:36:3c:9f:62:f9:be:53:4a:9f:29:75:30:a5:
6f:b5:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:39:28 2025 by rpki-client