Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: 79Ui3ew/CC/3n8bfNHU7pq1v1rIjTPnNtws3bOLY8GQ=
Subject key identifier: E9:DE:F3:CF:90:71:54:4E:1E:CC:87:C8:A2:C5:8E:61:82:76:A1:C0
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019659B947EBEEB9D8C335EF75F4D16CB91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 19:00:36 +0000
Manifest this update: Mon 21 Apr 2025 19:00:36 +0000
Manifest next update: Tue 22 Apr 2025 19:00:36 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: oWFLspJIQ+BfBbgt+LvZl90NjKQmTbrXQYY+SbQUSdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:47:eb:ee:b9:d8:c3:35:ef:75:f4:d1:6c:b9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Apr 21 19:00:36 2025 GMT
Not After : Apr 22 19:00:36 2025 GMT
Subject: CN=e9def3cf9071544e1ecc87c8a2c58e618276a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:47:00:8b:96:3e:d8:83:04:60:18:91:6e:
48:6a:2e:31:72:f0:70:f7:cd:db:65:a8:b7:49:89:
04:b1:08:d6:67:cb:fa:34:52:67:76:bd:b1:c3:a3:
de:7b:53:02:88:66:86:62:ee:04:76:b1:56:e0:2c:
fb:a9:12:eb:bc:88:8a:eb:ba:81:99:c3:f4:af:8e:
84:a1:3a:93:42:5a:cc:8b:1f:27:a8:37:2a:d7:b9:
74:ec:43:cc:66:6b:ab:fe:3a:20:e1:d1:d8:b7:8c:
07:d8:20:3b:26:48:71:c3:39:77:6c:a5:be:db:88:
59:07:b5:ec:08:24:3f:86:64:74:51:a2:8a:f6:31:
07:21:ef:e2:b0:8f:20:35:4c:1b:23:7b:40:4a:14:
92:fd:c8:d6:66:42:5a:a4:33:26:9d:64:08:3a:80:
d3:4e:8a:30:ec:65:e2:ae:98:16:ef:1c:2a:60:80:
28:04:a6:2d:c0:47:96:76:c9:36:11:19:4f:58:a6:
61:b6:96:d2:1c:39:ee:10:93:9d:c9:73:62:a6:49:
a2:98:80:2c:b2:e3:68:fe:17:86:a3:55:5f:62:a6:
0b:77:c8:3e:4c:24:28:d0:1d:37:f2:62:8c:0e:5a:
9b:57:eb:12:f5:91:06:e0:a6:bb:d7:41:6a:ca:f5:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:F3:CF:90:71:54:4E:1E:CC:87:C8:A2:C5:8E:61:82:76:A1:C0
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9b:77:2d:c5:cb:a1:d2:95:a6:81:b3:10:1b:1f:1d:59:9b:
b1:f4:07:74:25:5d:fc:d1:ce:91:c4:dd:63:84:57:8e:83:58:
9c:7f:80:a2:76:3f:17:3e:1b:3a:66:27:1b:c1:89:a1:ec:61:
d0:c3:f1:ee:1f:25:ad:26:03:a3:ee:3f:3c:75:ee:22:a1:32:
18:94:f0:64:3f:a3:91:df:47:35:5b:56:7c:c0:f7:0a:5f:b0:
b4:a4:b1:23:b2:09:67:41:3f:28:e8:98:55:cc:41:21:cc:e4:
66:ce:91:77:dc:eb:1c:4a:2b:1b:9e:7e:68:e7:38:60:6d:68:
09:03:cf:d6:44:df:45:11:21:b2:13:6d:08:47:1b:06:6d:60:
ec:df:f3:ad:38:66:64:8c:3e:f0:24:74:36:14:45:6c:c4:52:
c8:f1:78:23:46:81:a1:ec:48:26:4e:41:41:50:77:23:13:0f:
75:d8:ed:90:f4:cc:f1:0b:6c:7b:ba:9a:59:f7:ec:ed:7f:6b:
2c:f2:a2:64:ad:52:9e:5c:11:ef:88:c6:5b:c5:86:17:d4:5a:
28:b2:86:84:e3:0c:78:71:2b:7c:f9:cc:21:2e:b7:e6:a0:27:
e8:7d:c7:b4:5d:32:e8:71:46:32:d8:95:89:0d:6f:28:a0:69:
c7:56:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:03:26 2025 by rpki-client