Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: 2dQkoluGFp6CQ8ySK5V2PjuNaro3cThNNgTA5GqOT9M=
Subject key identifier: 66:E1:81:62:1E:CF:85:F6:8D:F0:28:19:3E:7F:95:D6:12:C8:9D:B1
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0196B7B5494C86BA0410461D31761C7421FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 01:00:33 +0000
Manifest this update: Sat 10 May 2025 01:00:33 +0000
Manifest next update: Sun 11 May 2025 01:00:33 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: vN/HjM/l0CQ9qb935Y4f3fo40wnwRv1241hNxEjxgdc=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:49:4c:86:ba:04:10:46:1d:31:76:1c:74:21:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: May 10 01:00:33 2025 GMT
Not After : May 11 01:00:33 2025 GMT
Subject: CN=66e181621ecf85f68df028193e7f95d612c89db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:67:df:9f:7d:85:1a:e6:51:d1:42:10:4e:
a7:cf:71:e1:7c:bc:cb:06:1a:f4:39:e5:79:6e:9d:
eb:e7:46:73:39:c0:c6:12:7f:b9:0b:89:85:4d:f4:
bc:9a:91:8b:2b:28:24:1b:55:1c:22:11:2e:24:be:
36:be:56:53:4e:a0:7d:bf:26:2e:24:7c:ea:83:53:
a1:51:9f:00:df:62:ba:ce:cc:c7:33:eb:10:d0:9f:
ba:98:40:6f:7d:bb:bc:7b:9c:72:09:03:e0:07:93:
b4:4f:12:e9:69:5f:04:ba:aa:b1:28:7f:d9:37:80:
29:22:f9:10:46:75:44:e1:5f:62:2d:c2:a8:7b:ff:
1b:5a:f8:be:ce:a5:53:9a:05:c6:b0:30:ed:37:d4:
a3:e3:ed:a4:92:e4:11:98:50:ef:dd:9e:87:15:da:
02:a5:31:7e:8f:63:91:47:01:b8:27:c6:e6:a8:34:
16:ba:9f:34:b1:a9:86:77:ac:1c:16:18:11:7f:71:
ed:25:98:13:df:87:f1:00:79:58:d0:4b:02:a6:32:
e1:41:57:4f:e6:79:45:33:9e:fc:c4:b9:ff:2b:92:
93:82:11:28:ba:ed:7b:e7:54:ab:f1:a1:c4:e5:94:
e4:d2:a7:c4:5a:7d:f9:8b:71:ec:3c:26:5c:bc:fb:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:81:62:1E:CF:85:F6:8D:F0:28:19:3E:7F:95:D6:12:C8:9D:B1
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:02:6d:e8:f2:5b:51:76:cd:36:3c:da:71:70:09:93:9b:63:
06:35:72:ba:26:4d:69:5e:e0:db:3e:06:13:7d:9e:57:a3:83:
15:21:e3:b8:b9:69:f5:03:23:0d:df:ee:48:b5:9f:b5:6e:da:
c0:77:3a:df:b4:1b:59:58:26:b9:b8:35:8b:21:e7:b8:0e:85:
a8:e3:0b:0c:aa:c3:8f:c6:90:1d:83:60:5f:3d:08:81:b8:ce:
80:28:4f:f7:5b:17:e3:6d:c6:7d:47:0b:a3:b2:07:85:2b:ce:
65:35:fa:dc:5d:31:97:ec:1b:2a:89:79:db:c5:cf:2f:e2:71:
d6:b8:cb:fc:99:bf:4d:ed:ca:0c:6d:20:98:1d:f9:6a:f9:ca:
87:aa:31:4b:60:8f:fd:5e:a9:8a:b6:0e:a7:88:e5:a8:1c:b6:
72:2b:de:39:c2:8c:6e:17:04:70:d5:5c:ff:c7:c3:4b:53:ee:
1e:6f:15:8c:78:e6:b3:b0:2a:3b:3b:97:2b:c3:7a:e7:38:e7:
a5:73:c1:5f:ac:b4:c2:17:5c:c5:2b:57:e1:f7:b9:e6:f6:5e:
85:a4:79:50:2d:63:08:ae:fe:18:e6:0e:70:fb:94:01:60:a5:
05:96:09:c4:fb:41:b5:a9:38:42:26:95:97:43:e7:1d:e7:e3:
aa:7c:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:35:12 2025 by rpki-client