Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: LokW11RkbjsgBFYS4AvH5ZKxkhBWLd8rj8MHhZjvqsk=
Subject key identifier: BB:A1:45:C8:0E:17:4F:4D:19:7C:37:F2:F2:12:71:F1:64:C7:C2:49
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 0196C728238CAF15B63852EBECF87FE2EB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 01:00:18 +0000
Manifest this update: Tue 13 May 2025 01:00:18 +0000
Manifest next update: Wed 14 May 2025 01:00:18 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: 52mrWPRx7I6OksiZXod8BzwsWLG+NJKuDTLjI+ceEPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:23:8c:af:15:b6:38:52:eb:ec:f8:7f:e2:eb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: May 13 01:00:18 2025 GMT
Not After : May 14 01:00:18 2025 GMT
Subject: CN=bba145c80e174f4d197c37f2f21271f164c7c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:1a:fc:07:3a:d7:d4:99:6d:a7:53:ef:fa:
31:99:4f:a2:62:2d:76:67:d9:75:1a:8a:91:bd:2a:
c7:67:a4:a5:4f:42:a6:ac:d0:b1:67:7e:96:42:1b:
68:bf:21:55:67:08:93:e8:86:7a:08:17:dc:f3:e2:
62:36:d5:99:99:48:e4:e0:46:df:04:96:d2:0e:ec:
05:b7:f8:2e:99:53:55:11:3f:05:ed:ff:3f:68:a7:
91:7f:f5:1e:34:96:de:e4:47:b8:23:18:27:a9:ee:
57:da:9e:57:e2:63:f9:63:e7:ef:37:9e:32:70:44:
cd:51:49:ca:42:76:60:2b:07:b6:c6:b7:88:26:61:
8d:a8:b5:83:9e:3a:7b:50:3c:88:bf:6a:fb:59:a8:
66:f4:07:c9:44:3c:3d:d2:c2:8b:83:3e:a3:48:ee:
bd:48:78:e8:46:4c:11:3f:37:66:ae:10:ed:1c:03:
25:89:b6:38:87:1f:2f:e4:bc:a0:d3:93:13:8a:b5:
ac:c1:1e:f3:7d:19:9c:22:8f:ec:02:f5:1c:e8:f1:
e5:d7:b4:f1:10:37:2c:19:0e:ae:e3:25:82:4a:4a:
68:cc:bd:bd:be:83:ee:45:1e:e2:a4:c4:1c:bd:3f:
79:0a:83:6c:fc:26:5c:6e:6a:7d:03:5c:81:d7:f1:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:45:C8:0E:17:4F:4D:19:7C:37:F2:F2:12:71:F1:64:C7:C2:49
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:cd:2d:a2:77:08:93:48:eb:b4:a3:05:6c:16:3e:88:f7:
02:b7:c0:7a:33:b2:27:37:39:72:77:96:04:2c:59:f4:88:d6:
8a:dd:e1:fe:4c:58:77:ea:a2:2d:0c:5f:e9:da:2b:a1:3d:74:
2a:85:2f:6b:04:15:97:a3:08:d3:6a:6d:21:66:1b:68:2a:87:
a5:bb:ae:a7:d4:1c:da:4c:ee:39:5c:15:c3:97:9f:15:de:9c:
78:01:a3:11:40:47:86:51:c8:ce:48:8b:eb:03:5c:62:40:64:
ea:d2:5d:88:70:9c:d0:98:40:d6:32:80:cb:6d:eb:47:f0:90:
d1:74:64:8c:01:33:16:63:2b:9a:9e:e5:81:d3:f7:99:a8:7d:
d6:58:c4:6f:ff:50:0e:85:31:04:4d:21:3d:ed:64:93:cb:82:
78:e5:c1:c0:7b:c1:c8:f1:d3:f9:f3:84:b7:77:f8:e5:59:36:
f9:ac:e2:2c:d7:bb:b3:ce:bf:0e:51:dd:c1:49:48:f0:d6:65:
f1:98:cf:cf:42:96:93:65:68:c7:57:ad:d9:f4:16:f7:7b:34:
cc:0a:d9:1d:58:ec:23:0a:0d:66:db:29:da:7d:33:a4:3b:cc:
f6:a2:e8:af:e9:f4:d3:d4:52:e9:9f:00:02:d4:e9:fc:ef:43:
43:27:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:22:17 2025 by rpki-client