Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: onPyWap5TSSijJz4ExZpNLFNOnia0zfW1YcTTLNAJwM=
Subject key identifier: 8A:AF:6B:F9:72:2D:41:77:D8:C1:C7:9B:C5:54:E4:7C:CD:2F:55:04
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 0196CB054AA7EEDE584692F296EB73D8A6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 19:00:43 +0000
Manifest this update: Tue 13 May 2025 19:00:43 +0000
Manifest next update: Wed 14 May 2025 19:00:43 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: Vs+pEGeA7hbwkrSlHe9cZrlh7KEaVUjbwIoJwUIDhPI=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:4a:a7:ee:de:58:46:92:f2:96:eb:73:d8:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: May 13 19:00:43 2025 GMT
Not After : May 14 19:00:43 2025 GMT
Subject: CN=8aaf6bf9722d4177d8c1c79bc554e47ccd2f5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:a9:ab:42:0f:aa:98:ea:66:92:58:64:5e:
8d:03:a4:fe:f8:b2:6b:39:b7:68:3b:40:da:f9:51:
51:a8:c9:2a:60:6e:a5:5b:20:2e:08:09:e0:66:0e:
04:29:ce:18:0f:1e:32:bd:c6:2d:83:52:0d:59:95:
cc:c7:86:ef:e3:c3:cc:7d:2b:7d:e7:67:9f:1b:8b:
aa:69:45:a8:fd:b3:1d:9b:ff:19:07:4a:ae:88:14:
80:86:a3:e2:de:f7:88:a9:30:56:a0:55:42:af:a7:
e2:64:0a:0a:72:1e:75:c2:2d:4a:4f:47:ac:b2:99:
1e:7e:53:89:7c:92:4a:c0:0b:0b:ff:83:f1:fa:f8:
64:18:10:54:e5:20:1c:a5:b2:d1:58:25:73:d4:34:
7a:40:02:1e:8d:ac:fa:ff:86:3a:34:e6:c0:2d:2d:
9c:cb:38:cb:82:e9:f5:be:bf:4b:25:13:88:58:4b:
9e:d9:c9:b6:55:fd:03:e5:7e:26:ff:5f:ce:30:0c:
0a:11:06:64:46:58:9d:48:d6:25:66:de:9a:1c:38:
29:e6:3b:31:dc:96:c4:26:5c:45:2a:fe:59:a8:98:
34:51:21:37:01:e4:c3:52:70:32:46:a4:04:5b:a3:
83:72:35:46:d3:4b:a0:70:4a:38:7a:d6:e3:ae:9f:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:6B:F9:72:2D:41:77:D8:C1:C7:9B:C5:54:E4:7C:CD:2F:55:04
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a7:6c:87:17:2a:97:98:e4:c9:b6:31:09:3c:56:b9:54:d6:
bf:33:a1:55:7d:a7:8f:fc:04:51:54:d8:a2:34:bc:f1:74:04:
b7:51:d4:3c:4e:86:8d:8b:a1:9e:04:9b:5c:91:9c:6a:9c:dd:
7f:a4:0e:da:91:e7:db:d4:09:85:02:d3:43:1c:5a:03:a5:65:
41:75:49:bc:21:12:98:36:f3:cd:bc:ec:20:b7:00:e3:a5:88:
c0:b4:25:5e:01:9e:f8:e2:57:f4:eb:dd:9a:27:ec:f5:98:90:
64:d2:fb:39:8e:b1:31:d0:2d:16:06:be:eb:98:e2:ab:7c:02:
6e:a8:c1:91:2e:9f:1a:a9:2c:96:12:cb:f1:2b:93:39:3a:45:
83:0a:23:cc:45:27:5f:78:61:9e:e7:a9:47:19:8c:37:15:53:
5b:f7:52:e6:4c:c0:2b:09:dd:33:4a:b5:0b:36:9f:a1:ea:4d:
1f:5a:2e:14:d9:5f:26:72:a9:21:81:3a:cc:eb:6b:60:2e:fb:
01:ef:81:8e:14:f8:49:92:bc:ea:82:37:3f:15:32:3e:9d:c5:
e0:5f:3a:04:63:bb:6b:2c:79:19:9e:69:8c:cd:e2:d7:bd:63:
23:37:52:4d:7d:22:09:28:0b:3a:3d:e7:a9:2a:90:72:b5:f3:
d9:19:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:55:04 2025 by rpki-client