Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: utyfbuoBj6jerfvYjbqHWmWLA/UkxsA7lC9JV8baeD0=
Subject key identifier: C4:DB:B8:FF:07:6F:C7:B9:78:20:41:76:30:FB:2E:D1:FD:CC:A8:FE
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0196A50A13ED9A23E209EC7670002DA850F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 152F
Signing time: Tue 06 May 2025 10:00:23 +0000
Manifest this update: Tue 06 May 2025 10:00:23 +0000
Manifest next update: Wed 07 May 2025 10:00:23 +0000
Files and hashes: 1: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: Y7soc00SvxaWdIgjrrLyaan8pmyWpUiDrumseeYSWfo=)
2: uD_ngmtNEJDgxKTmDs0dfRFETyw.roa (hash: 4vDT31Aj0L6dgxcGHMciEeqVCA7CQgG4yXo6DYN6amk=)
3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:13:ed:9a:23:e2:09:ec:76:70:00:2d:a8:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: May 6 10:00:23 2025 GMT
Not After : May 7 10:00:23 2025 GMT
Subject: CN=c4dbb8ff076fc7b97820417630fb2ed1fdcca8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:71:7a:0f:4c:c1:93:84:a6:ef:fa:a0:46:
9c:e0:e4:db:8a:f6:1f:14:d5:b0:ac:80:5b:85:83:
d5:94:7f:38:7e:5f:db:bd:68:9c:42:9d:63:a7:f5:
0f:36:a4:0c:5a:f5:7e:4f:4f:b3:29:6c:c8:cc:fa:
89:ac:2d:41:1e:4d:27:bb:d7:a7:9c:b4:44:0a:f4:
0b:fb:b2:1a:ff:46:5b:a9:6f:0f:cf:bd:30:9f:6c:
2f:72:f0:b6:f0:37:8e:37:ce:87:be:20:1b:37:25:
7e:44:9c:46:e0:ae:a5:c7:c6:7f:ae:c3:06:55:00:
96:b6:19:9d:6d:67:b5:e4:ab:ea:8c:9a:80:67:19:
a4:47:fc:79:99:48:2e:c8:20:d8:ee:44:76:bb:0c:
32:f2:39:a0:cd:93:e4:25:e1:3b:db:23:01:04:2f:
c4:12:38:66:37:78:da:87:f5:f2:19:67:b1:a3:7b:
2d:2f:3c:e0:9a:b2:27:61:78:70:57:98:80:28:d4:
63:b6:d7:ad:46:79:49:39:4c:cf:da:54:00:7e:45:
0d:23:85:12:9f:a5:13:c9:a0:9c:71:38:8f:c2:02:
64:2b:54:46:75:ee:4d:aa:7c:c5:3c:2e:2f:f5:7a:
83:30:ef:c5:41:77:af:42:d5:b4:d0:bf:65:e6:a8:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:B8:FF:07:6F:C7:B9:78:20:41:76:30:FB:2E:D1:FD:CC:A8:FE
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6f:8e:5b:af:65:f2:0a:82:3e:2e:63:bb:92:38:56:21:59:
dc:92:d4:1f:1b:c3:4f:ac:30:65:0d:42:b3:2e:00:6f:64:70:
70:b9:30:74:24:da:4c:d6:9a:cb:d0:6d:28:8d:ff:93:d2:2b:
69:47:55:fd:a2:32:a0:f9:9d:85:e2:ff:9c:da:ce:18:1c:8f:
5b:f8:ee:a8:da:1b:a5:1a:98:9c:13:a2:aa:48:ef:b5:71:6e:
2a:b7:52:da:16:d2:26:59:f9:73:97:60:79:48:67:be:f9:69:
00:21:94:9b:97:fb:a3:07:d3:20:30:d9:25:70:ea:df:36:4d:
dd:d1:20:c7:ae:11:de:e9:ab:61:5b:0e:9c:64:2c:b6:a6:74:
6b:8c:0e:ca:c5:d3:67:a8:0f:40:cf:9d:e8:c5:43:9e:e0:9a:
7b:7f:5f:1d:94:2d:c8:70:b2:21:4c:5b:28:93:14:ec:ee:b1:
bf:75:fb:57:d5:ba:2c:f9:f6:65:ce:1b:ac:03:90:ef:d5:25:
ea:ae:e9:e7:98:ea:3d:09:84:a5:fe:06:e0:33:94:25:8e:3c:
ab:82:44:7d:48:5c:10:b1:f9:9f:6b:85:67:ad:af:d2:4a:e3:
62:a1:c5:b3:f6:a7:97:ac:82:6e:9a:48:f7:a1:2d:35:f7:6a:
da:2f:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:14 2025 by rpki-client