Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: Ir+R3hb7v8H3ZmFZGQkIaX7hf1Y9G/Ff4bkroejDvUI=
Subject key identifier: 33:DC:86:66:B7:8C:D2:D7:F7:70:CC:46:1F:32:0B:B1:41:BC:01:B0
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0196B5FDB2B924AAAB62173BF06BD76A9177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0155
Signing time: Fri 09 May 2025 17:00:24 +0000
Manifest this update: Fri 09 May 2025 17:00:24 +0000
Manifest next update: Sat 10 May 2025 17:00:24 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: iY6UCE+6nkThTUtzi235z0SxoN+26tvvl8mSLG5iJSA=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:b2:b9:24:aa:ab:62:17:3b:f0:6b:d7:6a:91:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: May 9 17:00:24 2025 GMT
Not After : May 10 17:00:24 2025 GMT
Subject: CN=33dc8666b78cd2d7f770cc461f320bb141bc01b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:25:07:10:29:cd:9e:b8:8f:d0:e1:b3:57:
45:6f:09:f7:56:fc:95:b4:fc:b5:c8:26:7f:3d:4d:
79:10:db:c3:b8:92:58:87:37:57:b0:27:35:31:7f:
5b:fe:60:c1:45:0e:85:11:f5:be:88:ab:d2:42:63:
15:73:fc:27:ca:94:a2:fb:d8:71:2b:19:ce:68:bf:
a0:69:d2:9e:a8:26:0c:55:5e:3b:17:f1:22:c5:fa:
ab:f9:0f:f1:df:9f:4a:21:69:c9:de:3d:14:6c:c1:
a2:13:35:ab:62:65:55:00:b8:95:2d:a0:3b:a7:15:
0d:0f:c8:2f:ed:b7:fd:f6:4f:10:de:20:9e:ad:66:
3e:b5:45:00:19:9f:65:0a:84:24:ae:89:6b:65:ff:
18:0f:95:37:aa:54:ce:96:f4:7d:ac:2a:93:8e:8c:
d2:58:36:23:f0:26:8d:d2:72:8e:65:84:9c:54:63:
34:c5:40:b7:8a:23:7f:d0:ba:1b:87:d2:75:95:e2:
9b:cf:e5:f9:f4:60:a9:96:0a:ec:3a:09:8b:6d:df:
a0:14:90:c4:ac:21:45:50:9c:d8:ca:00:ef:ff:8d:
b5:04:b2:1a:98:a9:42:d7:d5:17:df:e5:de:e8:09:
7e:40:16:fb:08:77:7e:c7:a9:d0:05:e4:b9:95:18:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:86:66:B7:8C:D2:D7:F7:70:CC:46:1F:32:0B:B1:41:BC:01:B0
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:32:93:92:c3:06:f5:3c:ec:2c:3a:8e:55:16:b9:8f:d7:
08:ab:fd:0a:3b:e6:bc:59:3a:11:5a:3a:b9:f7:e1:9b:47:a2:
a8:66:7c:a5:4c:fa:64:59:25:f0:89:55:78:1b:7f:8c:e4:89:
e7:91:18:36:b2:c4:66:fc:27:45:ee:d8:9d:d5:c9:cd:eb:79:
db:70:9e:06:9a:76:b5:65:16:24:7f:82:38:9c:12:7a:16:0b:
c2:66:fb:de:00:71:75:b6:26:72:48:8b:1b:4a:3a:e3:fa:c6:
43:e0:ea:e4:0e:62:7e:99:d4:5d:94:b1:e8:c2:0e:86:92:ec:
a7:9e:3b:b7:fc:d7:5f:b0:e8:ce:79:7e:36:a3:5a:e1:ac:37:
34:ee:46:68:58:2a:4f:33:aa:27:bc:a7:b3:3d:7b:0b:d5:6a:
82:fa:28:21:ff:7a:0a:34:de:d8:4a:bc:33:5f:b2:bb:8d:54:
4f:b3:64:75:94:e7:8d:55:57:4f:f2:91:06:71:d1:e7:97:72:
0f:ba:53:8f:30:02:4f:84:7f:5e:d6:b8:de:ea:4a:85:22:a6:
7d:59:bd:e1:24:a4:50:c7:e4:f8:4f:de:c6:7b:de:9c:41:ca:
b1:ef:f6:72:19:c1:04:aa:c6:22:e0:e8:2c:e0:11:4a:d2:2c:
bd:9d:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:50:49 2025 by rpki-client