Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier: N2I5WdvUA11733LAbjgytn9a2bElK47ilU3RxLKDoYw=
Subject key identifier: 9F:0C:B1:ED:D6:A1:B9:86:53:F5:13:15:F2:0F:EB:FE:37:16:80:22
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 0196B3D8483890D3677C451E2D2185D10289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 07:00:17 +0000
Manifest this update: Fri 09 May 2025 07:00:17 +0000
Manifest next update: Sat 10 May 2025 07:00:17 +0000
Files and hashes: 1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=)
2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: OpOYbNrYrfr4C6AjnqwvcK9JmIU9XmMwEA8aRHdXSXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:48:38:90:d3:67:7c:45:1e:2d:21:85:d1:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: May 9 07:00:17 2025 GMT
Not After : May 10 07:00:17 2025 GMT
Subject: CN=9f0cb1edd6a1b98653f51315f20febfe37168022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:0c:9b:80:a4:9c:1e:7f:45:11:0c:3a:d9:
df:c6:1d:a7:38:43:58:26:b4:b5:0a:8e:05:23:3c:
89:ea:f2:5b:9b:3a:cf:a6:b0:6e:28:96:10:b7:ed:
af:ea:2f:48:e7:01:3b:29:a4:d0:07:26:85:c4:18:
6c:4f:2a:2e:d5:9c:aa:5e:ee:76:65:ff:39:3b:ad:
0a:4d:60:7c:44:4d:25:51:0a:63:bc:20:4f:f4:65:
a8:14:ae:18:74:9d:e7:5f:26:e8:59:a1:1c:07:bc:
b6:6e:70:31:b9:52:cb:aa:60:d9:25:2d:39:cd:ba:
bc:b5:ea:33:21:c8:22:be:df:83:7b:6d:23:fc:82:
13:db:00:26:98:e6:cc:49:e4:59:73:b6:f9:61:20:
f0:6b:c0:1e:68:0d:ee:4d:e7:b7:5e:e5:fb:b5:c4:
5d:69:5f:59:5e:0f:97:d4:aa:79:ff:53:01:34:7a:
09:fd:c1:55:21:b4:59:b8:05:ab:ea:ac:3b:ad:93:
e4:a9:fc:6c:b5:45:aa:ff:08:e4:50:fd:39:f7:2e:
89:ef:c6:b4:23:e8:8a:8c:95:9a:20:c6:43:d9:ca:
6b:cf:24:72:9a:d3:5e:c2:a5:95:df:9d:6a:f3:d1:
d0:f2:92:3f:db:04:04:5f:d3:f7:a5:76:52:af:0a:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:B1:ED:D6:A1:B9:86:53:F5:13:15:F2:0F:EB:FE:37:16:80:22
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:26:eb:14:eb:0d:44:c5:74:79:9c:e5:f0:60:09:e0:7d:
12:ca:81:f9:32:1f:9e:d1:1d:fe:8e:a1:a8:44:dc:b8:64:d7:
4e:2c:e7:e6:f0:09:fe:86:ad:9a:0b:ce:55:ec:78:f8:e5:42:
63:10:a6:f5:bc:6a:53:f3:e5:e8:fd:ff:57:ae:95:e4:a2:dd:
f7:66:b5:1d:11:13:05:b6:44:bd:89:fa:91:09:8c:d5:34:76:
7a:15:d1:01:ec:2c:64:3a:b0:b8:f0:44:16:fb:5b:5a:a6:81:
2e:c5:8f:1c:f6:53:b3:a7:ca:ee:59:6d:09:bc:21:b8:84:2e:
03:35:8e:53:93:94:96:be:b4:dd:dc:11:6a:bc:32:6b:86:3b:
fa:5b:53:e2:d4:ce:7f:2d:db:a4:5c:77:12:b6:31:54:3d:4d:
ed:6a:6a:2d:f9:b0:09:86:30:b3:bc:4b:cb:b8:1d:c5:0f:02:
58:18:1a:99:23:3f:36:21:ad:2f:d0:8f:92:20:54:1c:89:d4:
7f:09:68:2d:51:14:76:3e:d9:06:ab:b1:6c:a0:df:d2:92:27:
ed:a8:87:57:86:97:8c:38:e3:b2:71:5f:c2:e4:47:13:d0:12:
38:c3:4d:38:f3:73:05:75:b5:cf:8c:44:1e:af:c8:11:b0:12:
bf:39:63:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:49:40 2025 by rpki-client