Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: ZwO7SjMuPnPlOxF6ZjFQfeZJyr6agWzp7WAGvoghSeA=
Subject key identifier: A2:2D:2B:FF:33:C6:EF:F3:0E:34:11:AD:07:9E:94:62:9D:42:FF:41
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 0196B17C3B55AAF1CAF463A4EF4353DE66E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 20:00:30 +0000
Manifest this update: Thu 08 May 2025 20:00:30 +0000
Manifest next update: Fri 09 May 2025 20:00:30 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 9Ous20il0AYHB9WNNA0flEiRLKQVFlRfGxQN4/O+zlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:3b:55:aa:f1:ca:f4:63:a4:ef:43:53:de:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: May 8 20:00:30 2025 GMT
Not After : May 9 20:00:30 2025 GMT
Subject: CN=a22d2bff33c6eff30e3411ad079e94629d42ff41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:18:b7:89:d2:f2:d6:6b:f8:af:81:ce:2b:
30:6f:a5:da:31:aa:8a:40:f6:e9:10:d0:ad:44:9e:
10:7f:46:3c:8b:83:c4:10:f9:e2:7b:d3:97:0e:ef:
54:a2:7d:09:b6:af:9d:82:4e:37:29:7e:00:da:f6:
ff:4a:e2:b4:2b:49:d6:de:44:89:c7:ea:57:bf:60:
65:c4:c4:97:8c:a5:d5:ea:ca:23:e8:80:7f:c4:48:
4b:47:21:9c:95:bc:68:b3:91:0b:31:52:47:9e:1d:
b0:91:85:0c:a1:d3:cb:5a:1a:8c:95:5a:1a:ca:1e:
09:2f:a6:96:02:8a:e3:c8:93:6d:1c:ff:ef:09:41:
29:a4:44:84:10:01:05:06:e3:70:56:37:84:e7:cb:
a6:78:2f:b5:55:45:d9:25:6e:c0:f4:28:22:a0:e2:
c8:ab:e8:b7:bc:e0:b2:67:01:05:48:ff:3d:28:06:
1e:60:99:db:9a:be:e7:d4:5a:d7:83:fc:82:f9:de:
59:1a:2d:6e:0c:91:b6:1b:e3:c8:ec:af:f2:b6:98:
aa:1d:24:2b:7e:f6:1b:3b:a7:c1:df:92:e9:11:f1:
ef:19:42:fd:9a:38:fd:31:da:63:aa:26:dc:aa:9f:
4e:d4:08:fc:ee:14:0a:2b:87:90:65:de:0a:ae:98:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2D:2B:FF:33:C6:EF:F3:0E:34:11:AD:07:9E:94:62:9D:42:FF:41
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:ec:86:67:dc:03:38:bd:88:5a:1a:77:b5:c9:20:0b:bb:
92:19:80:10:29:27:f5:d4:90:72:9a:81:2c:e7:4f:7c:77:80:
3c:9c:82:05:39:68:58:99:3d:94:b7:d6:07:3c:88:2c:bc:b4:
50:8a:a8:9c:a7:fc:92:66:ac:70:89:cc:19:eb:3b:fc:8e:78:
c8:5f:98:11:fb:11:2d:20:01:2a:22:8b:9a:b1:cf:2a:6a:e4:
20:0a:21:d6:59:dc:21:36:53:2d:31:32:e4:cc:08:b2:57:81:
51:b8:31:d3:a4:21:61:50:b5:3d:57:ff:4b:7e:72:6d:74:07:
6b:65:ad:2a:b3:a6:57:16:29:4c:c1:e9:5a:e4:9b:28:12:82:
11:2e:86:50:d9:cf:51:04:f5:d4:f8:39:df:c1:10:69:b9:ba:
bf:6c:ff:a5:f4:d5:99:18:c2:0a:d7:e6:14:5b:67:4f:9f:57:
ce:86:2d:55:a3:a7:da:3f:fc:62:e1:9b:a3:6e:e9:44:4d:20:
11:26:c6:78:79:f6:bd:4b:8b:25:82:e3:f6:c7:6a:cd:07:80:
50:d1:2b:ab:1a:f7:a1:8b:0f:28:9c:41:49:f2:eb:2d:fb:19:
c5:69:c1:f4:97:2d:bb:29:3a:ea:e2:12:c1:fd:b3:a8:68:04:
60:5d:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:04:41 2025 by rpki-client