Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: FL4bf6x9iqDnvC8//zW3iQOM4A2khbWFxkwIWT972Hw=
Subject key identifier: AC:D9:0A:6E:18:0D:23:0C:28:9E:FC:E3:2C:5B:92:1F:8A:D9:06:94
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 0196B0D74D1F257A7B4052FE87262C4EE7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 17:00:21 +0000
Manifest this update: Thu 08 May 2025 17:00:21 +0000
Manifest next update: Fri 09 May 2025 17:00:21 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: YC5o/UPh8MsMFp+zzM28jFIEhltZAyNLjhuyViwE1TQ=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:4d:1f:25:7a:7b:40:52:fe:87:26:2c:4e:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: May 8 17:00:21 2025 GMT
Not After : May 9 17:00:21 2025 GMT
Subject: CN=acd90a6e180d230c289efce32c5b921f8ad90694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:47:fc:4b:46:c8:4e:66:62:62:e2:1a:29:
b6:9c:9d:30:1f:1c:82:6d:63:e4:65:4b:cd:32:95:
e8:9f:93:fe:36:16:1e:31:ef:e9:85:ae:e6:37:db:
04:1d:b2:0a:d7:14:e7:d8:bd:8d:3e:6d:a5:8b:91:
3d:4d:2b:6f:05:64:8c:42:5d:ff:b2:50:0f:99:c9:
30:b5:9f:84:83:63:86:60:14:20:32:78:26:f3:f3:
ad:56:fc:04:ae:b6:dc:18:87:36:27:06:21:63:41:
76:c5:c8:67:19:82:a5:e6:f0:92:ff:22:b6:38:e1:
d5:ff:69:2b:57:00:8c:82:17:47:df:06:f1:0b:7d:
9d:39:ea:70:f9:a1:ee:23:3f:aa:d4:ce:0f:d4:5b:
cc:a2:af:b8:2a:a4:5a:06:29:ab:86:b6:ea:31:b3:
25:6a:6b:46:37:25:5d:4b:f9:24:f3:7a:9c:84:a5:
bb:c6:69:6d:82:2b:01:76:29:97:dd:7e:75:aa:c1:
d3:70:38:62:92:77:31:64:89:69:67:d9:7a:c9:4b:
b6:8d:4b:2c:59:52:9b:24:5f:04:bf:27:c9:85:01:
72:07:d0:5d:6a:f7:e8:e7:07:06:73:25:fd:01:de:
af:8f:11:dc:1e:9b:7b:05:8d:04:32:9b:db:84:ef:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:0A:6E:18:0D:23:0C:28:9E:FC:E3:2C:5B:92:1F:8A:D9:06:94
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:f0:89:dd:92:37:ad:7b:b0:a7:f2:a5:bc:07:69:82:41:
43:e2:d9:1e:23:14:ff:56:74:aa:38:2f:a3:bd:c3:71:b4:ec:
9e:26:99:c1:3c:cc:b4:d6:8a:22:67:07:47:38:07:e5:d2:c8:
90:0b:bb:e3:ac:02:bd:10:a5:de:b0:48:f2:07:87:57:3d:a8:
aa:9d:cf:1a:99:3f:72:cf:9d:38:b5:2a:b5:7d:e6:6b:e5:eb:
5b:19:e5:18:04:e6:77:c5:5e:a4:c2:a5:8e:05:d2:f6:70:b3:
bc:a1:67:82:fb:21:9f:e0:cb:53:d3:8d:30:a6:fd:57:f9:47:
02:05:d7:8b:0a:a4:62:ed:ea:be:8e:52:0a:06:b4:3a:19:8b:
3c:01:f6:80:09:ce:6a:de:7d:09:c9:47:f2:b0:80:b7:d6:50:
1d:91:6f:e0:33:62:bf:b5:34:eb:e8:20:7e:84:31:d6:5b:05:
e8:7b:1c:3f:76:16:f3:a4:03:a1:50:0a:fb:03:5a:e0:b6:c8:
fe:0e:aa:1e:4d:1c:f2:69:bf:ca:f0:fb:a5:36:07:40:07:c7:
f7:d8:32:da:91:4f:01:2c:61:c4:63:c5:d1:11:40:1a:3b:e8:
e7:90:c0:6a:6b:35:2c:83:ec:6f:a6:5c:f8:3f:bf:ca:2b:1b:
ed:eb:85:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:40:12 2025 by rpki-client