Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: N+0Ba7nARzNF/uEU5Ux9QqyY0krGShMhVbxYeRd7SyE=
Subject key identifier: 1C:F7:57:95:A2:14:55:C7:64:D1:C0:C8:EB:07:E4:7A:00:C8:41:2D
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0196AFFC05EC3E2355942233DD3BCC538790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 13:00:51 +0000
Manifest this update: Thu 08 May 2025 13:00:51 +0000
Manifest next update: Fri 09 May 2025 13:00:51 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: iBD7wQcDeePp0uBGjn860+QcYDKB04e+R+YKz2WKKSw=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:05:ec:3e:23:55:94:22:33:dd:3b:cc:53:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: May 8 13:00:51 2025 GMT
Not After : May 9 13:00:51 2025 GMT
Subject: CN=1cf75795a21455c764d1c0c8eb07e47a00c8412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:d0:b9:4d:af:22:68:05:40:32:b3:04:b9:
59:a5:a3:47:0a:af:4f:99:14:bb:06:64:35:98:54:
4c:ba:08:7d:82:f7:46:eb:bd:cd:2a:0f:7d:d7:3e:
fb:08:52:58:87:b7:72:09:32:e9:f8:c7:b5:29:3d:
84:ea:ad:14:2b:62:f8:2e:4e:ce:5a:4c:0d:dd:09:
ae:fb:91:b6:1d:cf:41:8f:3d:12:9e:93:be:b3:9b:
8b:43:97:b4:56:55:99:a5:44:02:ac:4b:83:7c:b0:
be:3b:25:c3:9c:b9:46:e5:f4:a1:a4:dd:11:a8:fc:
f3:86:3f:6c:b2:77:c8:3d:c7:9f:e2:ac:97:10:7d:
12:2f:7d:4f:02:a9:fe:bb:41:d3:e2:29:76:9a:83:
f8:73:f6:d9:11:3b:11:c7:84:cf:8d:80:da:65:74:
7f:9c:22:aa:c8:70:25:ac:70:b8:c1:03:e8:93:7b:
65:6e:18:5b:27:2e:7e:c3:72:8f:16:6e:cd:9e:11:
d1:d3:0c:a1:66:60:7a:a9:6a:46:42:7d:b4:6c:bb:
7b:e3:a9:27:4a:e5:5c:cf:87:17:7a:fe:71:e5:58:
81:52:23:6b:8c:d9:9b:19:17:8e:cf:c3:9f:5f:98:
36:25:51:fc:15:f8:a0:8f:79:9c:87:4c:66:8a:66:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:57:95:A2:14:55:C7:64:D1:C0:C8:EB:07:E4:7A:00:C8:41:2D
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bc:19:a8:89:b9:ad:9e:cb:1d:e0:6a:fc:ae:7b:09:b8:c1:
19:6e:2f:68:b1:02:06:68:23:d0:38:7d:41:b6:94:d8:c4:c7:
1a:a3:c7:79:54:35:d5:0d:e3:8d:54:32:06:ef:21:78:bf:df:
4f:49:fa:62:a8:9b:d1:45:99:f4:c8:44:4f:d2:5a:70:21:85:
6e:16:52:6f:18:3f:8c:77:09:69:62:fb:c5:36:01:cb:b6:56:
85:7c:24:1b:62:dc:1a:d9:ad:bd:0f:9f:5e:f8:56:5b:ca:72:
2c:49:27:8b:2a:05:a7:8a:e0:1b:fd:c6:c4:66:95:44:db:67:
18:57:ed:f1:86:ee:9f:d1:c1:3c:f4:85:6d:1d:a5:03:ec:9b:
5e:52:5f:6a:fb:14:63:86:b7:ba:dc:85:a6:a6:6c:72:a2:eb:
8e:65:10:e8:30:97:28:b0:89:20:69:be:77:89:ff:7f:dc:81:
2d:43:a7:e7:22:25:2c:f6:25:42:27:87:93:5a:f3:88:99:a8:
a2:42:de:d5:65:d4:47:8c:0d:ac:7b:57:6e:18:cd:ea:9a:c6:
80:1a:f1:db:ee:1f:ef:16:e5:a7:9e:8c:14:fa:e7:f1:59:2f:
cc:54:ee:cc:42:22:08:c5:d9:ba:58:8a:2b:b7:76:97:45:ba:
f8:c8:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:48:38 2025 by rpki-client