Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: 1frj5MypqJ0H1Nj0kAaeJdx2PZ/2CDyeOYrR+RC81f4=
Subject key identifier: AF:A2:41:E9:40:F7:BB:CC:11:0E:36:BE:6F:50:E8:5A:18:0D:4D:FF
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 0196AFC4B60A5CC73643F34BD78910832FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 12:00:26 +0000
Manifest this update: Thu 08 May 2025 12:00:26 +0000
Manifest next update: Fri 09 May 2025 12:00:26 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: qBc5OVJP4sL5QY9XI003hHh2JEJZYClr8QKgvubuwsk=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:b6:0a:5c:c7:36:43:f3:4b:d7:89:10:83:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: May 8 12:00:26 2025 GMT
Not After : May 9 12:00:26 2025 GMT
Subject: CN=afa241e940f7bbcc110e36be6f50e85a180d4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:9b:b5:1e:e0:d1:cd:ef:2a:8d:a1:dd:b1:
50:b9:fd:b2:48:39:63:fe:af:df:8e:42:d9:a6:71:
23:b0:a8:79:e1:7d:b6:c6:db:29:5a:bc:af:36:c0:
d1:36:13:8e:e4:d2:63:44:63:4d:04:5a:3a:8c:fe:
97:50:70:a0:07:3d:cd:bd:5d:91:39:70:13:83:84:
9f:4b:4d:22:a8:85:ac:3c:e7:0e:27:34:24:ee:9f:
03:1a:4e:5a:23:da:5e:50:a5:3f:90:cf:5a:c3:51:
bb:7e:db:14:37:64:6f:7f:bf:f7:88:bd:a5:42:0a:
4e:2e:9d:67:17:c4:bd:00:16:22:5e:d2:03:6b:6a:
10:f4:a9:9d:54:bb:be:e3:d7:3b:7b:b0:d8:09:19:
9e:bb:6a:a6:3a:8f:40:33:13:04:fb:a8:75:5e:d6:
95:ed:69:10:77:d0:b3:f0:55:fb:be:8e:f2:11:2c:
24:66:59:96:5a:a2:96:ac:02:19:89:ed:0e:8b:e2:
c4:e8:df:cb:85:86:4a:b9:e5:1f:4b:25:bb:f1:81:
56:62:e1:be:43:87:50:fb:b4:e4:82:9d:a7:df:c0:
4e:f1:f9:ea:6b:0e:9f:30:d1:c1:25:06:14:70:7d:
8f:4d:29:ad:5a:97:ec:9b:a4:e9:49:ed:d1:1b:1f:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:41:E9:40:F7:BB:CC:11:0E:36:BE:6F:50:E8:5A:18:0D:4D:FF
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ec:de:f8:fa:7e:71:0d:bd:32:65:93:57:e4:9e:59:e9:ee:
91:99:3f:76:19:92:40:e3:f1:67:b7:fe:85:81:ba:10:69:74:
a0:51:35:28:96:1b:e2:29:b5:5a:a6:84:29:9c:fb:d6:00:6c:
e6:7f:9f:1b:42:7a:c6:12:1e:53:4a:d3:b3:b9:98:f7:b8:64:
86:65:28:fb:4f:03:65:da:54:2e:b4:88:ed:6a:77:e6:93:4b:
f8:55:62:e4:61:58:08:71:9f:4a:64:ff:13:74:6b:8d:98:1f:
ca:be:2f:8c:ea:d3:0c:ac:6d:0e:87:72:1c:aa:2d:5e:2c:90:
65:21:78:85:6b:5e:25:f9:c8:4d:7a:d0:e9:c4:71:ea:6f:ea:
01:c4:45:8c:a0:8d:15:a4:96:0a:6c:c6:5a:aa:25:bb:63:0e:
91:c0:fe:99:80:77:5d:4a:22:2b:41:63:23:34:7c:8b:60:35:
9e:36:6a:14:55:08:be:2e:33:32:22:5e:f7:0b:0d:fb:0e:8d:
85:6b:e7:e2:94:6c:e6:b4:a2:4b:30:75:2c:7b:a3:90:5a:8c:
62:3a:a2:13:24:a8:9e:2e:b0:36:3b:db:3e:55:0b:68:19:e5:
25:19:16:3d:74:e5:db:e3:9d:f2:77:af:4b:01:7b:f0:f2:68:
04:9e:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:33 2025 by rpki-client