Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: h8kXRrWFhzf92u48arrparUBrHffFGgJ9lijVAUh+lk=
Subject key identifier: 30:2A:EE:36:1D:1A:B6:8C:4C:AB:1C:18:C6:6C:B4:35:30:0E:FE:7B
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 0196CBE0D114D9D964955214E2A182681986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 23:00:30 +0000
Manifest this update: Tue 13 May 2025 23:00:30 +0000
Manifest next update: Wed 14 May 2025 23:00:30 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: w8xq/ghUIx0ARRETfPHpzvNLzzdiBC1iw+S4wHHxkSg=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:d1:14:d9:d9:64:95:52:14:e2:a1:82:68:19:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: May 13 23:00:30 2025 GMT
Not After : May 14 23:00:30 2025 GMT
Subject: CN=302aee361d1ab68c4cab1c18c66cb435300efe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:e1:e9:42:c6:f9:e0:9c:2b:16:d2:4d:df:
64:fd:aa:7c:0b:3c:f6:44:05:9d:79:36:4d:3e:ff:
9c:d7:0e:cb:d2:7c:74:c7:55:4c:f2:59:99:c5:ae:
0a:a5:d2:1e:e6:af:78:1e:84:bd:0f:91:a7:5c:da:
aa:ba:6a:62:62:5d:5b:10:04:b5:b7:a9:63:42:7b:
92:7b:03:07:ce:a2:ae:74:21:c8:94:42:8f:22:eb:
e6:ae:ac:f2:d8:2b:09:43:95:71:25:a8:b8:f5:26:
4b:3b:a1:dd:55:b4:e2:db:9f:9a:0a:6d:8f:e8:d1:
8d:7c:5c:83:e6:92:67:0e:de:c3:d5:b1:a8:75:0d:
9e:1b:b6:a1:48:fc:52:02:67:b7:02:5d:05:1f:a7:
bf:35:f9:8c:e4:4f:f3:42:ac:08:a9:75:a8:87:da:
92:66:d7:df:ea:cc:30:4f:6c:85:dc:2c:4d:fe:8e:
19:d4:30:97:60:50:1a:b6:41:e9:f5:b6:a3:a7:fc:
44:4d:ed:ba:eb:58:4e:c5:c9:ea:e1:4e:f8:2b:9f:
14:8d:9b:a5:bc:d5:eb:43:8e:e9:38:5a:01:21:25:
d5:90:34:bc:17:98:f2:1d:52:44:be:5b:cf:b4:39:
d8:8f:7f:82:88:b4:3f:c3:f4:56:dc:6d:4d:1e:48:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:EE:36:1D:1A:B6:8C:4C:AB:1C:18:C6:6C:B4:35:30:0E:FE:7B
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d0:d8:8a:24:8b:e9:5c:74:25:e6:aa:ec:43:d1:2d:4c:cc:
c9:d9:f4:05:00:24:62:dc:99:da:5d:d0:60:2d:2d:e3:e7:80:
d0:71:b2:e4:aa:e4:92:18:dd:34:37:51:07:3b:0d:0f:26:42:
24:1a:20:c7:b0:ab:21:28:6a:cf:e1:ce:d5:d8:c2:63:2c:31:
3a:04:fd:a1:30:82:67:af:9e:43:27:d6:ae:8a:a1:b2:15:60:
62:34:85:7c:6c:41:d9:4a:89:cc:b4:f1:68:95:d2:a7:a8:2e:
41:d1:bf:91:96:2d:0e:cf:11:77:e8:03:43:b0:29:2c:a6:ef:
bc:f9:eb:cf:47:59:aa:f1:3d:e9:8f:e4:fa:a3:94:1a:5b:18:
4e:d3:d1:b6:b5:e6:c2:e1:81:6f:5a:3c:71:59:98:24:73:ad:
00:a4:28:fa:96:50:71:ce:8b:1a:9d:f5:86:c9:ce:1c:13:5c:
d4:74:d2:25:50:cb:aa:e6:ff:ed:de:2c:a6:bc:01:67:26:a8:
7b:bb:69:5d:2c:8c:8b:18:c2:1f:d3:84:e4:c0:78:10:d2:4d:
1b:c0:b9:99:0e:f1:79:60:ae:1b:80:d1:41:6c:a2:eb:98:77:
0e:34:71:37:9d:df:0e:0d:71:1f:9f:26:3a:96:b2:bf:43:53:
e5:18:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:16:12 2025 by rpki-client