Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: XzddS5OxFQiy91/KFWysoYDc/a6qUf7STjc8/2n6By8=
Subject key identifier: A2:BB:92:7A:AB:4A:0A:80:A3:16:41:1A:4C:B2:52:45:4F:18:9B:3F
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 0196CE73C5DEA09FC134E2E4B440AA15302F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 11:00:15 +0000
Manifest this update: Wed 14 May 2025 11:00:15 +0000
Manifest next update: Thu 15 May 2025 11:00:15 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: QkndeBwT1Aj/EkGQMdL/3n8l6WtI7PGRBEni067P9AU=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:73:c5:de:a0:9f:c1:34:e2:e4:b4:40:aa:15:30:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: May 14 11:00:15 2025 GMT
Not After : May 15 11:00:15 2025 GMT
Subject: CN=a2bb927aab4a0a80a316411a4cb252454f189b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a7:28:e2:c7:a8:f1:af:50:01:70:76:aa:27:
d3:17:a4:d6:67:b6:c6:e5:ca:8a:02:07:53:02:ac:
01:0c:6c:6e:b5:30:e7:b2:1f:85:7c:7a:b9:fa:bb:
34:d2:14:c6:25:b9:e5:a6:d2:76:ab:3a:71:7b:91:
3e:36:43:05:df:6a:b6:b1:a5:ca:f5:9d:bc:d7:35:
f1:3b:fd:1e:d1:bc:99:bb:2d:67:0e:22:b0:51:1b:
79:00:d9:96:25:f9:e9:66:5b:ea:d9:1a:de:4b:d2:
52:a2:ce:09:92:a1:7c:9d:bc:a9:1d:d3:da:28:38:
39:08:2d:33:a0:d1:22:f4:43:df:b6:0a:2a:48:84:
38:bc:d2:6d:63:2b:89:40:48:9d:80:dc:d5:87:85:
58:ea:ea:83:f5:06:b3:e4:24:05:2b:e9:8d:e1:61:
8f:1f:c0:7b:e3:53:69:1f:f0:08:24:65:3d:e2:7e:
5c:fd:8e:3f:9c:f5:f4:d3:4f:b1:2a:97:a2:42:8a:
25:d4:6b:66:b0:07:d1:e0:6d:4e:fd:4c:bf:1d:13:
0d:50:ed:2d:89:47:02:65:76:a9:3d:87:5c:67:a9:
09:42:63:52:6e:3b:98:4a:ca:9e:69:0b:28:1e:a6:
20:47:57:05:7f:dd:95:c1:8f:9c:5f:80:e6:5a:85:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:92:7A:AB:4A:0A:80:A3:16:41:1A:4C:B2:52:45:4F:18:9B:3F
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:90:bf:14:e9:4a:3f:b0:50:aa:81:d4:85:4e:d7:2e:60:2d:
a2:d2:a0:3a:b9:b1:08:a3:7b:b8:37:7a:63:8e:52:6f:9e:e5:
f4:24:9e:8f:96:08:8a:44:09:ea:4f:03:2a:5f:a8:78:dd:0f:
48:24:5d:ff:d7:8a:7c:24:c1:bd:b3:7c:6b:28:8c:f2:de:01:
04:60:2a:9e:ea:a9:56:bb:6b:38:e0:45:bf:19:ed:01:e5:e5:
0c:7d:c0:c9:67:8d:5f:c9:6d:d5:91:21:80:d1:46:00:14:41:
2a:a6:2e:7d:53:10:35:07:2f:1b:dc:8b:4c:4c:35:2e:f0:91:
25:9d:97:d7:86:44:1d:8b:69:ac:b3:9e:20:21:1c:c2:cc:21:
79:51:70:ae:2f:34:b2:6b:9a:c3:02:e0:de:bb:6e:fe:41:1d:
43:47:7e:2a:82:fe:03:7a:a5:84:b8:62:2a:bf:c3:e1:94:a8:
02:9d:98:1f:69:20:6a:0e:67:69:d0:46:62:66:ce:11:e9:56:
5d:28:30:9b:a2:8f:2d:11:8b:fb:2d:27:ad:3a:4f:47:80:df:
4a:0e:ca:d6:6b:5b:3a:bc:5b:7c:9d:22:78:5b:5c:ff:29:bf:
e0:9f:fb:4d:87:9a:2e:cb:29:01:c3:a4:83:48:f8:d8:7a:32:
c6:50:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:54:15 2025 by rpki-client