Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: aCxLqtljpVrY540Qr2K4ymh66WdBWWcvPBBv90olRsk=
Subject key identifier: 20:D5:A0:0F:DC:0A:FD:E0:82:13:1C:FE:39:E6:ED:9C:6B:E4:31:FE
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 0196C0B82C441E8999232A13CBAF7B1B3A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 19:00:17 +0000
Manifest this update: Sun 11 May 2025 19:00:17 +0000
Manifest next update: Mon 12 May 2025 19:00:17 +0000
Files and hashes: 1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: MXQ6Ksp/ysEgv5hjwkoogZlavi4EZlp8QZdCRRtFlXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:2c:44:1e:89:99:23:2a:13:cb:af:7b:1b:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: May 11 19:00:17 2025 GMT
Not After : May 12 19:00:17 2025 GMT
Subject: CN=20d5a00fdc0afde082131cfe39e6ed9c6be431fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:44:98:20:35:c6:72:a0:e1:d4:1e:62:cc:
30:68:c5:52:13:f7:95:f0:e0:96:d6:8c:76:61:be:
8f:41:37:72:25:57:05:34:3f:f2:42:d2:cb:6c:9d:
1b:0b:3d:b6:d1:8f:3a:f6:d7:5d:13:53:9b:c2:f9:
bf:24:64:2c:22:3a:12:3d:c2:5c:cc:6f:9a:76:9d:
b2:1d:a3:9c:87:d9:65:61:4a:fe:35:52:79:12:cd:
bf:3a:d5:b2:de:1e:b3:91:a0:62:d1:d3:45:a7:c4:
0f:95:95:2a:e0:97:b6:3a:b4:95:b5:79:04:d7:7f:
df:2c:dc:09:79:76:97:e6:07:9f:a5:77:73:8b:36:
f8:18:2f:7b:18:44:4a:17:f6:8c:fc:bd:a3:46:7a:
b8:02:fb:d6:34:6e:c4:69:11:1e:e1:51:1e:77:ce:
06:d4:e2:41:76:6f:f7:e2:06:f9:d5:7f:b0:10:e6:
53:fc:ad:9d:d6:77:a4:65:ff:86:f7:f0:f3:2a:95:
b1:82:af:15:26:c8:d2:a7:b3:08:9b:5c:49:48:49:
6e:ef:6f:d5:20:75:ca:cd:ae:33:92:56:ba:57:44:
ba:b4:ba:16:27:09:1d:ee:6b:8d:e9:d2:e8:e1:c5:
d8:2e:e3:41:12:19:dc:da:b1:6e:2f:c3:5b:cc:df:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:A0:0F:DC:0A:FD:E0:82:13:1C:FE:39:E6:ED:9C:6B:E4:31:FE
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:3f:14:b8:ae:a0:86:12:fa:cf:bd:fb:c2:60:03:26:b7:
14:3e:39:7f:f2:e2:2e:ac:d5:9d:fe:0b:fa:56:f3:16:67:ee:
f9:2d:7b:6f:f6:ca:b8:e2:0a:68:db:b4:00:ab:a4:c0:5c:d5:
a5:07:41:07:06:8a:b5:21:57:37:81:21:49:65:7b:6c:96:65:
77:d4:98:ef:6e:24:81:cc:6d:13:af:80:cc:cd:79:f7:a6:28:
fa:30:26:f9:6b:e6:ff:0e:1f:69:d9:92:45:4d:a3:fe:46:4b:
46:46:c5:d7:83:85:31:a8:c5:40:d6:b7:43:65:f1:67:34:23:
2b:01:8e:52:36:ee:75:97:07:68:a0:e1:26:45:a3:2f:61:3c:
af:5c:08:45:11:68:87:8a:1b:f0:6c:7c:af:54:96:e2:15:fa:
70:e5:72:b0:64:65:e7:af:10:df:71:bb:e2:ae:31:b0:97:65:
91:92:d8:a1:11:7a:66:c2:ed:42:89:6b:83:6f:04:fc:a6:cf:
da:0a:06:79:6b:ff:48:41:4a:a1:1a:24:d6:71:63:54:ac:cb:
8c:04:77:02:05:23:f9:16:11:6e:73:14:1f:a3:77:11:87:62:
9a:b9:91:a8:7b:2b:b3:7d:f3:98:fe:0d:83:5d:05:46:02:f1:
0b:4e:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:51:26 2025 by rpki-client