Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: LB4TNCu25En70xsgLBUIncTWo3rRPdL42FEaL4R2vJ4=
Subject key identifier: D7:F4:4F:EB:B3:5D:07:6D:38:E5:CC:B7:CA:60:9A:96:C7:81:1B:FB
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019657943A860B8E02BB53D98666EABD9709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 09:00:54 +0000
Manifest this update: Mon 21 Apr 2025 09:00:54 +0000
Manifest next update: Tue 22 Apr 2025 09:00:54 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: ZlW0qiFwAVH6jfQUxj1/4zSvslzcWof/8+WFvtC0kPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:3a:86:0b:8e:02:bb:53:d9:86:66:ea:bd:97:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Apr 21 09:00:54 2025 GMT
Not After : Apr 22 09:00:54 2025 GMT
Subject: CN=d7f44febb35d076d38e5ccb7ca609a96c7811bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:6b:a2:4e:7b:ca:9f:e5:e4:93:df:27:1a:
c4:b3:3b:c6:99:93:c7:85:fe:74:93:62:15:65:f5:
fd:b3:17:33:21:ad:a9:fe:d3:08:b6:da:22:92:c5:
d1:88:89:14:fd:63:b3:05:5f:6c:cb:62:c2:59:dd:
1c:38:05:65:47:ab:ff:07:04:9b:fc:4f:77:9f:b6:
89:9c:6b:68:f2:56:7f:ee:c0:eb:18:43:2a:d6:80:
bf:3f:56:1b:88:10:a5:ec:78:5e:85:1a:a1:01:00:
87:02:76:b0:04:f3:66:c4:fe:e1:6f:49:74:6a:d6:
62:af:56:98:05:0d:04:55:af:44:33:0f:21:dd:6b:
b4:be:d5:93:82:a1:b9:8f:52:dc:3d:87:28:04:5c:
1a:cf:9b:06:d8:9b:34:e6:fc:fa:e7:b2:87:bf:52:
e0:76:dc:bf:d5:3d:16:34:9d:83:0e:6a:9d:6b:2d:
c0:cf:a5:71:dd:42:0a:b8:d4:42:b6:b6:25:70:ee:
72:e6:ac:20:94:16:89:aa:1b:5d:78:29:bc:c7:4c:
af:30:73:dc:7e:47:f2:74:15:2c:da:30:7e:dd:97:
35:d7:00:6e:13:c6:9c:8e:e9:3e:df:d5:9e:34:c5:
c9:18:4f:c3:a9:44:de:b6:37:f3:86:ec:52:f0:a8:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:4F:EB:B3:5D:07:6D:38:E5:CC:B7:CA:60:9A:96:C7:81:1B:FB
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8c:f6:60:cc:02:90:74:57:74:f2:b7:f4:f7:ac:a8:55:9b:
11:20:36:5e:ad:5f:b4:5f:70:3b:bf:27:5d:21:77:81:de:bb:
5e:45:69:22:72:2b:48:07:a5:31:bc:8e:fc:3f:cc:78:0b:8f:
b8:31:9c:b0:0a:7d:8f:b5:5f:4f:36:90:fc:75:29:dd:a4:96:
e4:d4:96:c4:b6:e6:f4:2c:f0:96:52:b6:1d:17:5d:8d:b5:5f:
80:66:e0:c4:13:c7:4c:d3:25:dc:af:98:33:68:71:ee:5b:e6:
65:ed:aa:09:b8:f8:eb:d8:7b:0b:62:dc:f4:f6:28:c9:bc:86:
2a:a6:b8:22:e1:9f:fc:36:69:e7:67:02:67:f5:bc:e9:3c:9b:
9d:d1:d4:01:38:61:c9:4b:d3:27:5d:5e:d5:e3:0e:f2:f5:07:
9b:35:5f:50:6e:d0:2b:1e:f6:a1:10:36:a1:47:3c:ae:e6:92:
e1:dd:d2:9b:55:49:af:ec:87:57:d2:17:d6:7f:13:9b:20:b0:
08:3a:cb:23:84:72:47:c1:d1:ce:e4:7c:7c:f9:21:93:10:d0:
b1:3f:2f:d9:b9:f6:b0:95:fd:19:9a:21:1f:c9:b0:93:5f:03:
8e:cd:3b:56:11:a5:ad:c5:93:aa:b5:cc:77:38:a7:7f:d1:38:
8c:de:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:21 2025 by rpki-client