Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: nTRoubBYAYWQtGyyzUtM+aqJ0ClpxHpGQ26P2ThKZkI=
Subject key identifier: DA:1F:25:71:6A:82:82:DD:D4:3F:C9:95:BF:38:C8:76:8B:76:16:16
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0196CFF456C4033757CA8FE0DEEBC5594FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 18:00:18 +0000
Manifest this update: Wed 14 May 2025 18:00:18 +0000
Manifest next update: Thu 15 May 2025 18:00:18 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: GPkVbS4EShFM0IpcIKNIKBT0VleswQY9ypKFtE/nfDI=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:56:c4:03:37:57:ca:8f:e0:de:eb:c5:59:4f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: May 14 18:00:18 2025 GMT
Not After : May 15 18:00:18 2025 GMT
Subject: CN=da1f25716a8282ddd43fc995bf38c8768b761616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:d8:04:81:82:59:22:85:97:51:be:0e:eb:
5d:1c:88:0f:68:60:0e:1f:19:3d:a3:ed:14:12:f5:
ed:36:11:d4:f5:64:82:d9:1b:c4:67:9f:63:76:57:
a1:94:a7:2a:15:72:fe:73:10:fd:9d:f7:26:89:04:
0b:14:4a:13:a0:b0:97:c7:13:37:db:f8:67:4c:cd:
72:0c:cd:62:f1:33:8c:cb:b4:b7:af:7a:90:2b:2e:
b6:01:74:3a:c2:07:3a:21:91:1f:bc:a6:bd:87:e1:
4d:f4:3f:dc:8a:f1:e7:5d:77:c3:9f:9f:f5:78:33:
2f:1e:df:b7:1d:a7:22:11:de:9e:bb:b0:90:32:9c:
ef:9c:66:42:f6:45:b2:39:2c:c7:f0:67:56:5f:4c:
ff:ac:38:64:10:23:dc:9c:7d:17:8c:cf:8d:14:64:
88:20:ef:86:ca:d0:2b:ba:e0:1a:7f:cb:3f:5a:a5:
1f:e6:0a:3a:fd:26:89:1d:0b:b3:7a:43:71:94:17:
6a:29:9b:d8:12:b5:c6:53:ad:2b:98:c2:23:e3:9a:
4d:78:89:a5:06:f0:40:2f:a6:1f:4d:5e:e2:f0:a0:
91:02:4e:eb:28:63:d7:2b:e2:d6:14:09:f2:9a:48:
58:b5:c8:4a:83:05:db:f3:da:92:17:25:19:e0:eb:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:25:71:6A:82:82:DD:D4:3F:C9:95:BF:38:C8:76:8B:76:16:16
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:09:6f:b7:ed:5c:5f:84:25:55:35:db:c8:58:f9:2e:9b:
c2:81:44:af:53:53:54:0a:8f:89:38:50:a6:26:d8:a4:f9:81:
09:d8:51:ad:a5:62:27:0e:c3:d3:e8:6d:6b:c0:3a:46:6c:83:
3a:f0:3e:6e:d7:8d:e1:e2:49:82:78:e7:bf:01:aa:6e:1a:c7:
b6:8b:ff:d7:76:2e:5d:2e:2d:ca:13:b3:18:00:91:7c:c2:2c:
88:11:4c:2b:24:c8:11:dc:14:ec:b1:8c:c9:bb:f6:4b:90:4a:
18:f9:d6:82:e7:9b:03:11:ef:ce:7d:52:a1:d0:b2:72:dc:7f:
a8:dd:9f:d4:1a:4b:cb:1a:3b:bb:d6:8f:81:05:09:bb:f6:ec:
2c:70:61:cc:20:e2:cd:40:e8:d2:e8:26:8e:0e:83:08:71:8a:
4b:09:1d:ff:c2:bb:db:96:f6:e2:8c:6b:0b:bc:d6:5b:ad:36:
72:10:91:3e:eb:c3:8b:48:1a:7b:18:13:4a:90:be:5f:3f:c1:
07:6f:49:7c:a9:14:6c:d1:4f:8e:1e:87:dd:4a:37:94:68:95:
a8:b1:67:b3:4e:ed:7c:59:48:91:ea:c1:25:4d:d9:0d:3b:4f:
0c:23:4e:86:fa:86:3a:fd:98:3c:c1:a1:2f:e6:81:1e:26:dd:
64:4f:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:25:16 2025 by rpki-client