Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: Fxhaxo5G3wNFdPvjR97QEJTPTQaQ39WkuCzg3H6+Rns=
Subject key identifier: F6:DB:36:DD:35:71:0A:D1:4F:E5:72:38:29:C9:C7:9E:4A:E1:3A:C3
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0196B85A06BB5464FFE7B1A7169096557D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 04:00:29 +0000
Manifest this update: Sat 10 May 2025 04:00:29 +0000
Manifest next update: Sun 11 May 2025 04:00:29 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: taulVBYPNObknHgaNhPX+7X4kEA51F3p7PJPp7wSZd4=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:06:bb:54:64:ff:e7:b1:a7:16:90:96:55:7d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: May 10 04:00:29 2025 GMT
Not After : May 11 04:00:29 2025 GMT
Subject: CN=f6db36dd35710ad14fe5723829c9c79e4ae13ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:c9:67:5d:68:cb:ed:92:69:9a:1d:68:31:
2f:7d:b7:72:41:c3:80:27:1d:32:58:0e:45:a8:b3:
32:a8:13:de:39:19:f9:16:0a:8f:52:33:1a:3c:4e:
dc:73:bf:bd:f9:40:74:ed:76:68:49:ee:04:99:c6:
c7:a3:e9:76:3d:c1:3c:83:ea:c4:2d:7d:05:cb:6e:
88:6a:f5:44:6f:2d:b5:06:20:e0:e6:3f:7f:98:80:
f3:d4:4b:dc:95:89:da:a4:fd:c5:e7:da:87:bb:03:
f7:85:81:07:22:c8:24:a8:8f:13:d7:0a:6b:c9:c6:
c9:a9:8a:77:ea:cc:ce:6b:e5:49:85:14:87:41:da:
bb:ab:10:28:3d:ce:77:88:cd:1a:bb:d1:94:a8:4e:
90:c8:c4:a0:d1:0d:20:26:ab:32:04:9e:7a:dc:45:
ba:d1:46:c1:a1:36:b4:d5:f6:3a:af:ce:40:34:25:
ef:f9:d8:c4:ef:20:8d:cd:94:d5:d2:86:c2:4c:c5:
29:77:be:f2:bb:1a:bd:18:14:ca:86:76:cc:81:24:
2b:cb:b4:36:d2:80:32:71:38:7d:87:ce:fc:15:bb:
23:3c:4e:06:9c:0a:2f:4f:f4:35:25:86:5d:45:4b:
f8:ba:2f:25:5f:6b:1b:4c:e1:98:d1:d1:2a:ed:7b:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:36:DD:35:71:0A:D1:4F:E5:72:38:29:C9:C7:9E:4A:E1:3A:C3
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:45:a7:8e:52:cc:33:45:5d:3d:db:3c:f7:d8:6e:6c:6c:
7d:56:49:38:e1:84:f7:76:50:a4:c2:11:fc:f8:52:d9:53:07:
f1:5e:6b:3b:35:61:73:14:bd:5f:84:2b:47:33:8e:54:db:3a:
8f:55:08:e8:cf:ba:d8:75:31:cc:3a:ca:6e:6d:ea:77:fe:3d:
84:aa:c4:fe:b4:93:12:f6:db:7e:af:75:44:47:2f:29:ed:a2:
52:5d:69:97:91:ac:e2:70:3a:d3:6f:12:2c:e9:2d:ae:56:1e:
0f:93:9d:fb:2b:0d:e2:f8:96:c2:c5:36:8a:7a:5e:30:2d:78:
f0:aa:e6:ff:42:f9:35:12:27:15:90:66:fa:06:69:cf:d5:a8:
6c:0f:2c:3f:b5:76:02:fc:32:b3:e2:81:e6:32:7c:b6:4b:d8:
ae:09:5f:06:9b:d7:d1:56:43:fe:22:74:d0:02:61:e2:1c:7d:
50:bc:a9:33:81:96:6e:f2:32:4d:8a:e5:61:98:9f:7f:52:d7:
c2:52:6c:16:f8:24:d5:3c:e7:e7:f8:5f:25:39:3c:d8:35:36:
e8:bc:14:38:14:ae:78:14:5d:43:dc:bf:4e:a6:1b:10:b0:e0:
cd:53:cd:43:2d:d4:c2:57:8a:9c:02:62:1d:8d:44:c8:c5:bd:
f8:47:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:38:22 2025 by rpki-client