Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: MqTaHEuIs3GJ4LeWtvpRUokcT5A5iVPVFCpZb6/Ey/w=
Subject key identifier: 46:38:E9:8A:84:E8:7A:7B:7F:E8:96:91:7A:1F:CC:40:A2:3A:82:61
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 0196CEE2887621EF6EB10C13500AB7E9FF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 13:01:14 +0000
Manifest this update: Wed 14 May 2025 13:01:14 +0000
Manifest next update: Thu 15 May 2025 13:01:14 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: bS1C27+fsrctWb/VJjyH8ADgNiX7We2zJ58+D+iqHAg=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:88:76:21:ef:6e:b1:0c:13:50:0a:b7:e9:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: May 14 13:01:14 2025 GMT
Not After : May 15 13:01:14 2025 GMT
Subject: CN=4638e98a84e87a7b7fe896917a1fcc40a23a8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:43:0b:c5:43:90:60:dd:54:78:21:6f:41:
62:1a:34:48:8d:bb:8f:30:32:59:1c:cb:5a:12:d9:
08:61:5a:1e:16:26:56:32:30:4c:8e:00:24:f2:b0:
25:ed:c7:3c:4c:bd:ee:da:94:bf:c6:3f:cf:57:7d:
4e:84:8c:dc:84:68:8d:68:a8:cd:a4:c0:23:ef:6e:
31:03:d3:8c:ef:a1:fa:d2:00:d9:8f:41:86:63:47:
85:4e:61:c2:c5:55:f6:a5:05:b4:83:47:19:45:58:
03:81:49:76:91:fa:77:d0:58:d8:9a:da:3a:1b:3f:
77:f3:43:1d:c1:6a:e8:74:47:4a:90:be:ae:b6:57:
17:33:be:61:37:08:ff:75:e2:4a:a9:7a:6d:37:e5:
a1:88:08:17:7f:82:f4:89:a3:63:9f:99:fe:10:79:
36:77:9d:08:91:64:fb:cf:7c:01:db:05:58:a9:29:
eb:14:80:b2:9d:78:26:a6:70:8c:3a:59:92:92:e5:
a8:05:51:9f:c7:72:76:04:f6:62:ec:d9:b6:81:2c:
8e:ec:b8:a9:a7:3e:ff:b0:9d:b6:84:33:c8:80:46:
55:a0:07:28:e8:e4:f0:cc:3f:40:93:f2:42:57:60:
fc:1c:1b:d8:50:3a:e9:44:ab:b0:27:76:5b:11:86:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:E9:8A:84:E8:7A:7B:7F:E8:96:91:7A:1F:CC:40:A2:3A:82:61
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:fb:6a:4e:8c:0e:8a:b1:54:26:db:fa:6e:bf:6b:8d:b8:
68:af:1f:e7:a2:e3:d4:8a:2d:e2:c4:ce:c5:fc:1a:b4:5f:53:
e3:16:b9:7c:e1:ab:27:4e:79:6f:16:67:a7:a8:4a:f6:9b:05:
8d:26:7b:68:87:98:14:77:7c:76:b4:ad:ab:34:9b:d2:87:42:
13:5b:a5:f3:03:c1:2c:99:d7:90:35:77:31:cd:e1:cb:ca:a4:
6c:31:08:12:94:57:c5:07:dc:3d:a0:f3:4f:08:cf:d3:77:9a:
3d:c0:78:c9:88:f2:d5:2d:38:46:88:43:bf:1a:89:95:72:05:
c3:23:d7:64:0b:29:50:ad:3a:0a:99:a8:7b:23:7b:91:5e:76:
1f:dc:02:d7:ac:29:cd:c4:3d:10:cf:ec:23:70:6c:49:59:17:
ab:71:72:c5:05:41:e5:58:03:d7:b1:93:29:f3:35:f7:8e:f4:
b6:de:6c:90:be:fb:0f:56:c3:8a:f3:62:4d:da:fa:41:1a:c7:
a7:74:3a:e9:45:d0:0b:21:63:8f:1a:99:c9:82:9b:48:8b:c8:
da:e5:2e:19:d9:e7:ff:59:3b:fa:04:11:75:5c:a2:7f:8a:55:
7d:af:6d:45:f7:97:4e:66:21:18:c0:72:07:34:80:e3:68:e4:
58:6d:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:50:29 2025 by rpki-client