Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: yoKAS8PLEh8kaq6MVOQ6ACfaQqmB3omglVSsHcqrKno=
Subject key identifier: 65:52:EB:9C:B3:BD:75:DA:3A:15:B1:6D:73:24:01:1B:E5:4A:F3:E8
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0196CEAB0876C339B64165E69F2F0EB3F574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 12:00:37 +0000
Manifest this update: Wed 14 May 2025 12:00:37 +0000
Manifest next update: Thu 15 May 2025 12:00:37 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 4RFyalyW2M1WcvZ9nhj02VY/yIIT6xhuxuWTthkgxFE=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:08:76:c3:39:b6:41:65:e6:9f:2f:0e:b3:f5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: May 14 12:00:37 2025 GMT
Not After : May 15 12:00:37 2025 GMT
Subject: CN=6552eb9cb3bd75da3a15b16d7324011be54af3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:d0:9b:57:86:10:f6:29:3c:db:c7:dd:e7:
9c:c8:db:12:f4:be:4a:a1:81:20:7a:f9:10:13:34:
a0:ef:26:ea:10:49:02:4b:10:5a:05:a7:db:08:bd:
fd:69:dc:0e:57:85:c2:b2:07:2a:f3:f8:9c:4b:35:
92:37:18:30:ec:1d:c6:12:db:67:af:bf:d9:cd:8d:
7f:d1:12:87:55:83:a4:54:e6:55:df:62:c3:91:b2:
94:82:fa:2b:b5:24:a8:b4:09:1f:f6:3f:51:b6:40:
fa:9c:8f:21:de:67:84:08:52:ec:d9:b9:6e:96:ad:
17:95:e1:f6:8f:79:c4:2c:d4:37:c8:e2:62:4e:0f:
1b:d2:6a:52:e3:81:18:e2:c8:da:3a:04:f1:01:30:
09:1c:4e:c1:00:04:99:cc:b7:5f:20:4c:84:e6:ff:
63:e6:c8:5f:f8:36:e6:f2:fd:f4:4d:f0:b5:96:41:
81:9e:9d:66:66:6a:c5:64:34:ad:8c:0f:90:4a:65:
7e:44:18:8c:de:f4:6a:37:a4:ac:14:77:43:d9:c5:
04:c4:3b:03:57:39:79:c3:b2:87:5a:95:ba:d5:e0:
34:a0:88:17:9f:c6:32:aa:a0:e0:8d:eb:81:6c:37:
e0:76:6f:43:5f:9b:f4:4d:f1:32:c5:9d:e0:ff:10:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:EB:9C:B3:BD:75:DA:3A:15:B1:6D:73:24:01:1B:E5:4A:F3:E8
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:b0:5a:46:a6:40:9e:a7:66:ee:c5:9b:4c:1b:14:0d:54:
92:91:08:79:41:6a:f8:9b:cc:d8:fb:c0:19:15:6a:32:be:cd:
b4:24:b9:db:b4:cd:fa:e3:08:75:ed:6e:5b:70:97:5f:c6:66:
52:9f:bf:b0:a8:c9:f0:c2:4c:49:5a:af:d4:34:e4:30:00:99:
a0:3b:c9:5d:04:b8:37:c8:fc:5f:48:5d:8a:90:eb:9e:ec:c1:
ac:1a:bc:d6:25:dd:7f:52:2b:43:27:e7:4d:2e:f1:35:cd:f2:
ac:fc:1f:e8:11:9a:64:2b:b8:57:4d:60:36:a0:bf:6c:a6:d1:
79:8a:3e:78:11:e6:e4:dd:b0:df:f7:71:2a:20:b8:12:01:0f:
84:c1:b9:8f:6a:31:a8:63:26:06:2c:aa:bf:ec:8a:a5:82:d6:
b6:bb:6e:4a:e6:65:b6:33:6f:58:bf:97:5f:03:ea:1d:5a:b6:
8d:cd:6a:1e:06:63:b6:e5:ed:8e:ef:b2:c2:c5:2b:9f:05:c8:
e5:b5:d6:2f:1a:7c:67:44:8c:4c:67:e7:f5:99:7a:25:aa:04:
6d:3e:9c:09:ed:45:c9:d8:c1:9d:36:1c:60:37:49:e7:be:d7:
2c:fd:72:68:dc:58:65:d4:20:c1:64:e1:81:32:7a:90:5c:19:
4c:55:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:53:58 2025 by rpki-client