Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: QflEdzBfLKcn/Ei7jUVeKwzSBM5AXWpmx+VfaDJjK60=
Subject key identifier: BA:AD:A4:96:80:38:CC:5B:6A:8E:7D:41:68:E3:65:4F:82:69:E0:C2
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 01965B70C06C0EB9D76D7446C6838D16BC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 15
Signing time: Tue 22 Apr 2025 03:00:38 +0000
Manifest this update: Tue 22 Apr 2025 03:00:38 +0000
Manifest next update: Wed 23 Apr 2025 03:00:38 +0000
Files and hashes: 1: UY81-6OJtOcrPrE4DhCgEFcu2uw.roa (hash: lpvpHr51QilDXnlS7iMzsvab0M6b3NK+tzdIq5lHzpc=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: mL7u9DsemVGR1gDLgoHYCwJwenU6W7a2Hotth4wLII0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:c0:6c:0e:b9:d7:6d:74:46:c6:83:8d:16:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Apr 22 03:00:38 2025 GMT
Not After : Apr 23 03:00:38 2025 GMT
Subject: CN=baada4968038cc5b6a8e7d4168e3654f8269e0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:17:ff:e4:45:4f:5e:b7:ea:0a:0d:ea:61:
90:c5:a6:8f:55:f5:2e:39:b6:65:39:ab:86:29:61:
f2:48:4c:32:ea:93:51:b2:d5:67:93:5e:5f:e7:33:
e2:9f:8f:bf:15:74:42:ee:87:fb:14:35:b7:04:3e:
6e:3e:d3:2b:41:ac:93:fe:d0:2e:5a:02:6c:cf:b4:
97:e7:3a:d2:dd:47:41:34:33:47:af:80:73:51:ef:
59:dd:ba:2a:9a:16:5c:ca:6f:78:24:75:93:35:8a:
6d:b2:d5:62:83:6e:c5:5f:18:e5:f7:16:f7:ca:fa:
92:33:7a:18:df:3d:d6:d1:99:a4:d8:e4:ae:8a:4b:
3a:73:31:03:cf:38:49:7b:b4:cf:72:13:35:64:04:
e4:c3:73:70:cb:c7:e7:8e:c3:78:7e:bb:42:82:2a:
c0:fc:2f:8e:45:b2:ef:96:bc:44:af:a4:e0:2e:aa:
9b:d6:47:03:23:48:d7:52:33:7f:ce:cf:dd:e8:f5:
e2:a6:6d:2c:b8:72:83:04:1d:85:6a:f4:58:d6:ba:
f7:90:e9:5d:32:18:03:26:e2:3c:1e:2a:64:dc:64:
b7:f5:04:20:cb:4d:c0:77:b0:24:4e:27:66:aa:9b:
a1:87:4a:49:3e:dd:63:e6:94:9c:90:fd:5f:7d:e9:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:A4:96:80:38:CC:5B:6A:8E:7D:41:68:E3:65:4F:82:69:E0:C2
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:1c:ca:27:58:e0:79:5f:60:10:a3:82:23:c5:97:b5:79:
99:b2:38:d8:6e:9c:fb:57:46:d3:cf:61:58:5b:30:34:be:e5:
d5:57:5f:4d:19:7e:d6:5c:b8:29:11:8c:41:9e:48:9e:a9:30:
4e:dc:ef:ae:97:c6:36:e1:96:5b:96:9c:e1:3a:fe:5a:12:ae:
f6:6e:5b:52:69:fb:2e:cf:d0:e4:0d:09:e5:db:bf:b5:c4:44:
e5:45:8e:57:89:cd:63:6a:de:b2:f0:0e:1d:98:40:7a:5b:2e:
12:4b:a2:1b:8f:0b:3c:a9:86:15:74:5f:42:7f:1d:28:32:4a:
af:3e:df:b7:58:cf:7a:1a:08:51:f2:ed:e3:f1:c1:36:4c:de:
1e:e6:3a:df:3d:7b:34:f0:dd:75:14:d4:7a:1d:39:e5:4b:81:
d4:a0:50:49:b0:de:ef:10:05:a4:29:65:4c:ef:ac:2b:df:2e:
8a:7d:68:47:7f:02:69:8d:90:7e:3e:21:ea:f5:28:22:64:38:
7d:32:5a:ec:49:c7:35:34:d0:8d:91:ea:c3:d8:78:46:a1:46:
96:40:18:11:99:31:a6:9b:01:1e:6e:20:80:ed:6d:59:f2:9b:
ae:8c:f3:98:dc:d1:f9:0c:fe:a9:a1:2c:5a:34:89:bc:1d:b8:
df:7a:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:10 2025 by rpki-client