Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: hQOcgs1BvCo/Pg0dYXgWIGPSD/MIZ2PVwUTTBilOfBM=
Subject key identifier: BD:78:5A:34:01:33:64:96:A5:4C:52:5C:FD:E0:45:5F:CA:9E:BE:E1
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 01958C5FECD5F1E32E73361CDCEAD04E21D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:00:51 +0000
Manifest this update: Wed 12 Mar 2025 22:00:51 +0000
Manifest next update: Thu 13 Mar 2025 22:00:51 +0000
Files and hashes: 1: 7avwX6wLfCubdHbZyz0nLS_e-eU.roa (hash: pGwwGuIWJ6QSCg6gVVG8woBK5kghKUCbnUTlff7iqb8=)
2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: SS2wjQCDjAZ6m+oXTbE3M59lH6Y/MVS9k+YnUItSfsw=)
4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:5f:ec:d5:f1:e3:2e:73:36:1c:dc:ea:d0:4e:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Mar 12 22:00:51 2025 GMT
Not After : Mar 13 22:00:51 2025 GMT
Subject: CN=bd785a3401336496a54c525cfde0455fca9ebee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:f4:4a:f8:d4:f4:0a:a1:ca:cc:96:29:87:
64:06:f3:f5:cd:7a:4f:7a:11:4b:50:3c:a9:f4:99:
be:4b:ea:64:1e:81:7e:bd:35:ed:a5:9f:de:8a:32:
8c:d2:ca:1d:37:c9:4f:b3:71:ad:1a:24:79:91:05:
44:b2:b9:98:0b:38:64:06:1c:fd:ad:8f:9d:b5:ad:
3e:9d:90:59:8b:48:44:7c:88:a9:3a:1d:68:79:ef:
31:9b:35:6c:a3:1e:bd:46:fb:ec:a0:65:a7:91:f3:
c0:4f:a6:e4:b7:b2:19:a3:13:01:d5:34:01:19:12:
8d:b8:24:74:73:70:74:c5:1d:1e:ec:b4:4c:30:7a:
fc:d0:67:b7:0b:6e:d7:04:4d:b6:ed:c4:2c:d1:9c:
dc:0b:89:e9:24:52:50:d1:18:0d:a8:ec:ca:56:fc:
6a:30:9a:b7:af:b4:46:23:4e:82:46:52:a8:aa:45:
f5:44:b9:aa:1a:41:96:1a:85:c0:4d:6a:96:92:10:
a7:3e:57:cc:76:bd:b5:d8:6c:79:57:08:02:93:d7:
16:70:f9:8e:9b:14:f4:96:83:ec:7d:84:2f:6d:91:
e5:8c:33:47:3a:a5:6a:04:b3:92:31:6f:96:bb:49:
06:88:d1:2a:62:c7:b4:90:71:9f:c4:73:fe:9a:75:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:5A:34:01:33:64:96:A5:4C:52:5C:FD:E0:45:5F:CA:9E:BE:E1
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:ac:23:4a:06:1e:ee:b5:04:1a:13:72:ae:51:99:9f:e6:
20:d0:4a:d2:a4:53:18:29:aa:d2:40:da:98:18:36:ac:e8:03:
12:57:8d:fb:bc:5a:8c:86:5a:be:31:ba:01:45:9a:26:bf:51:
0a:84:9a:5c:b0:4f:3e:84:28:8e:77:e7:5d:55:dc:cf:db:8e:
a9:f5:eb:bd:a5:d0:7b:aa:3f:66:04:bf:52:a5:89:af:39:62:
0d:fe:d8:e8:16:2b:cd:18:8c:96:ee:fd:77:28:d9:c5:0b:23:
11:c7:c1:f2:24:3f:dd:23:6c:0d:b1:4c:4f:0e:de:30:fd:72:
21:70:40:4a:9b:b0:91:02:96:10:be:47:32:65:72:ba:a1:86:
be:8a:34:6d:2a:85:df:70:6b:99:59:35:4b:79:c8:61:b8:13:
ce:3c:78:98:cf:35:ee:1f:fa:1a:3a:01:b4:20:1a:60:e2:9e:
98:84:09:99:e3:7c:b9:90:57:bd:3e:55:3a:0b:ab:5a:e8:b3:
7b:9c:61:5f:08:92:b8:11:f1:cc:ea:71:98:ff:e4:11:f2:e9:
6c:4d:5f:e2:34:46:21:f3:d3:aa:a4:27:a0:53:08:d4:bd:6e:
08:5e:71:e7:30:fa:4f:11:06:58:05:bf:18:5f:58:d7:29:e8:
3a:ad:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:59 2025 by rpki-client