Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: qy7eKJu+DOX6uqQYxS/6jncHV+BafTeTivxwPerOCvI=
Subject key identifier: 20:3C:97:7E:6B:A2:DA:66:EF:81:92:16:03:79:46:30:2C:F8:46:BC
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 0196CD61EDB692A662D9894ED2B5AA7E1E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 06:01:09 +0000
Manifest this update: Wed 14 May 2025 06:01:09 +0000
Manifest next update: Thu 15 May 2025 06:01:09 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: WLFjt1ba9xdL88phdmMN1904qN8F4HT4z54mrcRDshI=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:ed:b6:92:a6:62:d9:89:4e:d2:b5:aa:7e:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: May 14 06:01:09 2025 GMT
Not After : May 15 06:01:09 2025 GMT
Subject: CN=203c977e6ba2da66ef819216037946302cf846bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:68:b7:13:04:d3:86:5e:5f:4b:3f:85:4b:
8f:17:30:32:70:74:05:e6:69:31:db:44:62:67:cd:
4b:81:fe:a0:00:3f:ab:cc:b9:a9:b0:7b:db:38:83:
87:db:24:5b:7d:53:a8:cc:99:79:47:ec:49:a1:b1:
4b:7b:79:07:96:49:b1:fc:6f:de:d9:93:fb:e4:17:
56:85:e1:31:a6:21:7b:5b:18:a3:14:e4:ab:eb:81:
1b:fb:be:5f:43:a5:79:06:05:26:dc:2c:10:eb:6c:
dc:61:09:64:42:23:6b:11:66:1b:e1:b6:1a:4c:d8:
98:bd:72:a1:05:42:0c:ed:55:02:a9:8b:ec:c0:73:
dc:fe:26:a1:9a:75:13:23:fa:78:74:48:e2:5f:c9:
12:d1:b4:f9:48:91:88:19:0f:02:17:a6:63:f9:ac:
64:2e:1a:f3:87:aa:63:b0:2c:b6:cd:c6:4e:76:a2:
90:c4:96:a4:30:83:1c:46:6e:fb:26:19:f7:95:60:
b3:fe:69:4a:fd:7e:b5:03:eb:ce:ac:98:37:b6:7a:
11:a3:ed:76:ff:19:d4:9f:df:33:c3:f1:1f:63:17:
0c:ac:68:99:16:76:4c:22:5d:c5:1d:46:8f:97:94:
b2:da:24:4b:6c:26:ed:e8:53:8c:40:43:17:67:13:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:97:7E:6B:A2:DA:66:EF:81:92:16:03:79:46:30:2C:F8:46:BC
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:35:79:95:32:7b:0f:25:88:68:c5:dd:01:d7:03:03:89:30:
d8:10:d8:bf:6d:b8:aa:c9:37:3d:a2:da:f5:4a:bf:b0:02:8d:
df:52:02:4d:16:1f:99:db:d2:5c:10:b5:df:ea:b8:75:7f:c5:
0e:e0:8c:34:ba:8c:aa:fe:0d:69:fd:2f:f2:29:56:ad:b9:dd:
48:3f:35:dc:1c:37:db:5b:ad:c1:b0:9e:66:80:39:3d:1f:b1:
38:8f:17:66:ea:13:33:38:64:fc:20:a4:3a:66:cb:5e:5e:5b:
a3:4f:c3:d9:64:04:80:03:b2:6a:2a:e0:98:08:06:66:f7:71:
6c:34:11:65:bc:67:ae:e8:99:e1:06:56:96:2f:f6:f1:99:5c:
e1:fc:85:9c:25:0f:09:93:a1:b8:c5:55:82:e9:ec:9a:b6:28:
35:e0:3d:d1:80:05:6d:46:00:d0:5a:91:e0:12:1d:47:d7:d8:
4f:85:e0:b5:d7:56:9b:78:f5:5d:b7:34:d1:27:48:e2:61:43:
3d:a3:7b:77:20:1d:08:56:ed:bb:bc:c9:f5:cc:32:3d:71:31:
7f:43:09:48:a3:73:2a:7b:9a:58:61:1d:d8:2b:a5:06:db:db:
cc:d1:5e:83:1e:2e:47:b6:a8:e0:87:b4:2d:0b:c6:89:25:c8:
61:79:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:29:17 2025 by rpki-client