Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: YB8vDf2DqYSl7/PY9umoPmzo4XLVVxIwhOYk7tE3ZXA=
Subject key identifier: 63:3A:40:7C:EA:48:30:F6:99:74:2A:75:A3:81:EA:73:9C:8E:65:3F
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 0196C239855D5591972A23020A4AE27C03C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 02:01:11 +0000
Manifest this update: Mon 12 May 2025 02:01:11 +0000
Manifest next update: Tue 13 May 2025 02:01:11 +0000
Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: 6cHaQw+6vH+QW1efHZoQdh9bBn+rFkcynW1F81Mbzt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:85:5d:55:91:97:2a:23:02:0a:4a:e2:7c:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: May 12 02:01:11 2025 GMT
Not After : May 13 02:01:11 2025 GMT
Subject: CN=633a407cea4830f699742a75a381ea739c8e653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:64:d3:41:7b:ff:80:1c:cc:6f:5c:d5:00:
f8:4b:fa:e3:ec:c7:5c:f0:23:0b:bf:b4:cf:ac:48:
95:0e:25:7c:41:0a:a7:ab:bd:67:b8:00:9f:d5:e0:
d7:42:d3:f5:3c:e0:29:86:7d:2c:42:3c:b5:b0:bb:
cb:c8:b2:be:c5:0f:49:fd:ab:74:fc:57:14:8a:4f:
b6:a3:33:36:89:86:51:94:96:30:b3:d5:b4:bf:7b:
23:70:ad:fd:42:79:20:dd:6a:d7:7f:bf:55:aa:66:
5e:e7:ff:80:b3:af:58:e9:ae:64:12:08:36:23:85:
02:dd:ba:40:be:c7:87:72:a3:ee:df:65:74:9a:fa:
58:5a:8c:56:73:92:bd:cd:13:9c:2c:f9:a4:6b:4a:
ce:cb:10:83:3e:a5:11:12:89:e8:66:c0:a4:1f:83:
4f:5d:e5:b6:5b:07:c8:3c:9b:e0:e7:c0:0a:12:11:
25:5d:f7:bb:ff:3e:dc:02:74:31:f3:c2:1c:fe:25:
20:2c:ab:3f:27:3e:f9:ca:53:46:f0:7e:69:32:1f:
c3:9c:66:02:f9:ce:62:e7:d5:2b:7f:7a:6c:1a:07:
62:2b:63:b1:54:06:7f:71:0a:ff:fb:26:21:87:f1:
4d:7e:14:be:29:c4:27:01:c5:45:73:6b:9d:16:a8:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:40:7C:EA:48:30:F6:99:74:2A:75:A3:81:EA:73:9C:8E:65:3F
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:44:3c:40:db:ac:37:2c:b8:66:37:63:4b:3f:6f:10:40:c7:
5a:a5:c6:92:34:b0:a7:58:fe:cd:96:6d:60:d3:33:7c:36:e4:
e3:79:e2:a3:60:5a:58:67:39:ac:33:ed:d5:ff:76:fc:a7:a7:
50:ff:98:79:cb:de:68:5c:7d:ee:a9:f2:19:8d:00:ce:79:11:
97:17:b8:91:eb:07:95:5a:aa:bd:29:e9:30:1a:2d:ce:16:f3:
46:a3:c0:53:58:27:dc:31:94:03:01:93:e2:7a:e7:8e:bb:39:
a7:bb:32:57:c8:66:30:69:cb:85:7e:d8:44:e1:9d:11:cc:cb:
0e:91:96:4f:d4:e3:33:39:1b:51:07:13:25:e2:37:6a:d1:ac:
cd:c5:78:8a:9f:d5:80:5b:c3:46:9e:2b:ec:ac:67:a6:6d:0c:
19:d2:94:f1:2b:55:b7:1b:de:be:bb:eb:d5:98:25:ec:9b:e1:
9b:7e:40:2c:48:62:84:1f:bd:0a:74:4f:22:a9:6c:81:01:6e:
62:18:1d:c9:10:35:ba:54:18:77:a5:7e:d0:b7:b1:a7:26:f8:
eb:ee:a2:76:1d:15:9d:b9:1d:40:5c:d7:7a:18:44:d5:65:04:
14:46:a9:fe:c5:b2:4f:66:83:f1:60:9e:f1:3a:af:43:c6:75:
62:72:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:45:02 2025 by rpki-client