Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: YLcS+04um6wcngrtG7pNRrXdwyVScNigb6TiaCNRaNs=
Subject key identifier: BA:C4:88:B7:92:16:9A:EE:47:05:D8:D9:3B:D0:76:A4:F0:11:BC:B5
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0196C917665B4AF2CA5EE36B5994E41B9B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 10:01:16 +0000
Manifest this update: Tue 13 May 2025 10:01:16 +0000
Manifest next update: Wed 14 May 2025 10:01:16 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: UOi611/MtrG+h1rU8E4nlkggVoMIdxaQa4FbIyekbt8=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:66:5b:4a:f2:ca:5e:e3:6b:59:94:e4:1b:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: May 13 10:01:16 2025 GMT
Not After : May 14 10:01:16 2025 GMT
Subject: CN=bac488b792169aee4705d8d93bd076a4f011bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:26:c7:28:29:22:b7:b4:0d:9a:21:17:74:
37:73:85:95:31:a5:90:38:44:b8:4c:9e:e9:e8:be:
a2:d7:ec:c3:a7:d6:90:d3:22:5f:7d:85:b7:92:7c:
50:5a:47:7e:b6:cd:30:f1:e7:af:0e:ee:ca:c2:32:
a5:85:25:a1:d8:e1:e8:b1:f2:72:1e:84:d0:c0:89:
6b:3d:36:43:bd:24:d6:91:48:07:3c:c7:a9:15:27:
f3:36:7c:41:9f:5c:c9:62:f0:25:94:51:86:40:d7:
b5:8b:77:e8:a9:bd:e7:04:21:b5:27:ca:58:69:2e:
84:44:9d:e8:e8:44:93:21:f1:15:1f:e0:fc:f4:d2:
81:f0:60:3a:e5:8d:e4:08:6f:15:cd:7a:fc:2b:4f:
54:3f:de:7d:6d:11:7c:0f:16:92:75:02:9e:a0:be:
fc:d2:b7:cf:e7:bc:e7:fb:19:c3:0f:44:c3:1f:5d:
87:95:3f:6c:09:b5:97:bb:c0:08:6c:82:2a:cf:f4:
97:9e:e5:b8:fb:e6:f6:a3:67:6a:55:ff:9e:67:b0:
11:72:21:63:54:c4:6e:86:cc:02:a3:73:db:39:87:
52:ca:37:bb:94:56:4c:0b:64:37:07:42:72:b1:7f:
f8:55:0d:2d:30:fc:67:95:73:ca:07:95:20:85:76:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:88:B7:92:16:9A:EE:47:05:D8:D9:3B:D0:76:A4:F0:11:BC:B5
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b8:d5:5d:ab:71:0e:a4:c0:25:fa:64:3a:5f:80:4b:73:d4:
ac:30:b4:b2:08:ff:60:3c:39:a5:d4:00:e9:bf:a4:ab:00:0d:
6a:f6:92:27:98:d8:dc:a5:a4:07:d3:7e:9f:90:00:4f:a5:80:
f2:fe:8c:e3:56:d2:fd:24:cd:37:90:dd:83:82:02:63:f2:26:
1f:bd:70:ae:35:67:9f:e2:bb:a5:bd:b6:ac:74:47:6f:3d:ba:
33:6f:14:1a:09:8c:ec:ed:e2:bb:4a:c2:0c:7e:70:12:a5:4b:
76:0b:2d:12:8e:4a:5d:a3:f6:5b:f4:3e:15:70:15:fc:11:e1:
bc:8b:c1:3a:97:22:e4:c2:ff:66:1e:8a:ad:94:32:bf:65:8c:
07:8e:f6:6b:90:57:8b:5c:fa:76:3e:44:f6:c9:35:1d:dd:49:
d4:8b:0c:31:65:52:c8:3e:02:1c:38:ca:32:37:10:b6:d7:28:
1a:b0:f7:fe:78:b3:da:24:4c:9d:2b:49:75:9e:75:56:d9:48:
78:2c:f2:42:21:1c:51:71:38:c8:45:88:67:3b:95:ea:e0:17:
31:80:21:53:72:26:8d:4d:c6:9e:b8:35:c1:df:14:2f:0e:17:
0f:0d:9d:58:d7:a8:86:c1:3c:b0:69:21:08:5c:16:42:81:44:
b8:fd:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:34:57 2025 by rpki-client