Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: oEEiVG65rPXZKO4EVGamtItP7qfwKd1suvnAfivP0Bs=
Subject key identifier: 59:C5:F6:66:CE:5B:3E:61:E9:05:B3:AB:88:F4:F1:FA:FD:83:A5:7E
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 01960F7BA69ED40BCF5F17FEA1E6F76AFA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 09:01:23 +0000
Manifest this update: Mon 07 Apr 2025 09:01:23 +0000
Manifest next update: Tue 08 Apr 2025 09:01:23 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: Fc11TQyjroYvZ9yJzNQbadQIiTH6mlHJBlK6fGIfwhs=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:a6:9e:d4:0b:cf:5f:17:fe:a1:e6:f7:6a:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Apr 7 09:01:23 2025 GMT
Not After : Apr 8 09:01:23 2025 GMT
Subject: CN=59c5f666ce5b3e61e905b3ab88f4f1fafd83a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:48:8c:07:c2:b0:50:9b:e0:6d:8d:d0:50:
1f:19:2f:76:58:63:90:ff:cc:d2:27:bf:8b:e3:67:
d7:d0:ac:64:b0:4c:1f:a7:74:d8:7d:7f:39:cd:32:
92:c2:fe:ee:4b:bd:d2:7a:16:68:02:00:8e:d6:d4:
18:f4:fa:6b:46:12:76:ad:ab:ef:b3:56:9d:b1:e0:
36:69:c7:93:cf:c9:cb:8a:0e:92:33:b7:2e:ad:f0:
0b:14:87:d5:61:55:9a:66:2e:76:fc:0f:85:48:97:
ac:4d:52:8c:49:ba:86:39:e9:ab:67:e6:4a:e1:77:
09:d1:6b:6a:55:46:b0:1d:c2:90:07:1b:c0:c8:fd:
b6:5d:f7:d1:e2:7c:68:5e:aa:cd:5f:7b:85:99:24:
f1:5d:cd:65:03:78:7e:3b:35:41:32:0d:7b:b4:f9:
39:8f:89:65:db:a7:2c:e8:46:72:b4:10:cd:0f:d0:
26:4b:30:09:88:58:63:cd:b3:b5:dd:c7:6a:45:78:
d5:58:c6:55:e9:cc:e8:0e:53:65:b9:9e:e0:c2:36:
70:eb:2a:14:97:77:8f:f9:31:d3:3d:82:e4:f3:0f:
2c:97:ba:ad:88:84:25:6d:29:e4:ae:15:f5:d5:7a:
0c:e1:42:a8:05:47:cb:60:e1:03:ff:0d:ad:5a:b9:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:F6:66:CE:5B:3E:61:E9:05:B3:AB:88:F4:F1:FA:FD:83:A5:7E
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:72:3d:f1:c2:2f:9a:63:0b:42:10:b1:d1:14:73:ae:e5:23:
af:68:40:38:86:7e:85:93:19:10:db:28:37:ae:d9:45:65:2a:
21:3c:2c:40:56:6d:24:38:84:4b:c3:18:35:db:6d:33:32:a8:
06:d4:64:3e:d9:8b:5e:79:20:42:ff:41:5b:29:39:97:c1:d2:
2b:bb:79:c7:5f:a8:01:62:52:89:91:54:c6:69:40:27:f3:4b:
67:e0:d0:62:05:fb:78:11:1e:cc:fd:12:45:87:19:8e:1c:74:
3c:79:a5:cd:15:30:b9:84:07:5d:6a:d9:dd:e8:7e:2a:cc:a8:
7a:eb:78:18:7a:6a:f2:90:e9:0f:79:89:97:8b:e6:6f:d2:c6:
40:03:11:06:e1:96:f5:aa:b5:77:66:6e:fa:a3:fb:54:2c:79:
33:4b:99:6a:ab:a4:44:ba:77:2f:77:09:51:5b:8a:97:9d:14:
62:7c:e0:5b:44:ac:b5:78:39:a5:32:fd:ca:e8:86:a1:96:d8:
fc:13:8b:d6:85:dd:bc:23:50:f0:c3:a4:30:5c:4a:4b:ec:ff:
25:cf:dc:67:4a:3f:0c:3e:28:2f:f6:c5:07:0a:b2:ec:47:2e:
f8:dc:94:7e:a6:8f:68:23:ad:f5:a9:ba:b4:c5:10:18:ed:8c:
5a:d9:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:23:58 2025 by rpki-client