Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: BKGx7DXa9XKLx7GO1N1FKjxWY8ZWpXGtC4nHHXRyXkE=
Subject key identifier: 35:2E:AE:F1:1B:BF:6C:FA:96:19:89:29:91:8C:9C:43:61:3A:95:04
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019745F979349612766F2DD042E091CBCECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 16:01:06 +0000
Manifest this update: Fri 06 Jun 2025 16:01:06 +0000
Manifest next update: Sat 07 Jun 2025 16:01:06 +0000
Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: nuL3xUjohEpNv0AngsMqX+ezFEK2RgCz+XsTw4ucUVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:79:34:96:12:76:6f:2d:d0:42:e0:91:cb:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Jun 6 16:01:06 2025 GMT
Not After : Jun 7 16:01:06 2025 GMT
Subject: CN=352eaef11bbf6cfa96198929918c9c43613a9504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:d5:7f:33:5a:a6:b0:96:5e:5f:53:3d:ad:
69:37:f2:1d:bf:63:84:33:f9:ef:9c:0e:86:6a:6e:
7a:4a:15:52:65:28:cd:4b:97:8d:54:6c:34:27:50:
1e:72:8a:de:8e:39:25:45:10:e3:9e:a1:4d:25:91:
f0:86:b5:61:8d:9b:37:23:41:53:74:3f:6a:b3:7a:
ea:36:9d:74:15:79:0e:8d:ba:08:c8:f9:3c:33:5b:
28:58:98:d9:6d:6b:0e:b0:de:11:13:19:38:95:2a:
cd:09:2e:1b:97:e4:4f:d2:46:08:46:d0:57:b6:00:
1e:6e:43:d7:70:e3:ed:a3:a0:e2:c5:87:d6:c7:33:
6a:c9:fd:3a:e5:3c:2f:e6:57:1e:ba:ad:96:d1:42:
d3:84:10:69:48:75:29:26:b8:0e:13:77:15:ef:a1:
a7:e6:9b:a0:fe:66:22:67:90:5a:07:c3:bd:5b:32:
0c:59:cd:a6:cc:2a:f4:ce:14:5a:1e:ac:fe:fd:ca:
89:26:bf:cc:9f:d0:4c:7f:c9:3b:51:35:be:dc:20:
8a:8f:29:cb:e3:05:eb:98:75:24:fd:e0:76:80:95:
f9:06:2d:a5:0d:9c:56:2d:e7:9a:f5:9f:8a:1e:56:
e2:24:1b:42:56:3a:d8:45:02:49:df:e8:37:30:19:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:AE:F1:1B:BF:6C:FA:96:19:89:29:91:8C:9C:43:61:3A:95:04
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:10:48:98:45:f4:4a:1d:a1:dd:fc:88:11:da:11:17:54:
63:9b:fe:43:40:c3:99:ff:86:8a:dc:be:ed:c0:d4:24:43:10:
f3:cb:f5:57:e9:c8:3e:c2:d8:f5:df:9a:89:e4:a1:c1:58:d3:
be:2f:9a:2d:35:47:5a:bf:a1:ea:8e:53:e1:92:1f:83:4e:bf:
44:73:6e:30:ad:59:d9:0a:94:46:28:7d:d5:58:8a:f1:e9:64:
51:22:9c:07:82:3c:2e:7b:fa:87:1b:bf:a9:cb:30:58:81:4b:
f7:4d:52:84:c0:9a:c8:88:24:ac:fb:54:56:b4:47:44:7a:dd:
88:64:0a:4a:be:14:f3:7c:07:2f:1b:e4:32:d9:e2:9f:e8:ca:
a2:80:f0:4f:a9:2b:ad:e9:d9:93:ee:69:8a:cf:10:8b:8c:6e:
35:ca:36:bc:c3:14:10:5a:6c:5f:1e:61:33:48:3e:c4:3e:ee:
fe:21:01:58:e3:c5:1e:fc:73:60:ea:de:73:1f:64:e9:54:04:
71:24:c2:1d:ac:0e:c8:75:e9:a9:b6:cb:a4:01:72:3d:4d:c8:
e0:00:6b:62:37:91:99:7d:1c:60:12:08:9f:f6:1c:e1:ef:83:
10:3a:12:8d:7d:d4:a7:4a:a8:ca:9c:a3:86:d7:5c:1f:e1:cd:
fb:c5:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:25 2025 by rpki-client