Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: HrmV1oBiLDYyUhyI4odXSRUwFFxoqDUNxjh9duZS1gg=
Subject key identifier: A9:55:19:EB:25:1D:B1:83:10:B6:02:D7:88:DB:D8:24:70:43:31:F0
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 0196B823B1ACDAEF45B15C0A84AC1DBF6091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 153C
Signing time: Sat 10 May 2025 03:01:08 +0000
Manifest this update: Sat 10 May 2025 03:01:08 +0000
Manifest next update: Sun 11 May 2025 03:01:08 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: P2QvFGJPdb6MNmJtGaz7qu2plSmm44m+/brnmFG9JCk=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:b1:ac:da:ef:45:b1:5c:0a:84:ac:1d:bf:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: May 10 03:01:08 2025 GMT
Not After : May 11 03:01:08 2025 GMT
Subject: CN=a95519eb251db18310b602d788dbd824704331f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:70:13:44:ef:6f:84:0e:3a:88:40:ef:79:
8b:39:00:57:e3:a6:ba:d7:94:1c:cb:e1:e9:05:90:
57:7b:c8:6f:25:b4:e0:3d:ed:5c:f4:0e:ee:cf:22:
63:84:d9:9f:52:b5:3b:e8:79:3f:dd:f8:50:d1:a5:
81:72:f9:52:7f:c8:45:80:bc:aa:fc:94:de:7b:f6:
56:0d:a2:d3:86:83:02:d3:4f:c0:54:fa:6a:2d:fb:
30:c3:d1:95:64:9b:e0:6a:4a:eb:35:ba:d8:bf:37:
4f:9f:84:61:59:ae:0f:28:62:64:1f:1b:2d:bb:c1:
2c:44:95:f3:60:41:6f:e2:9b:62:c2:29:02:dd:d1:
08:54:2e:5c:f6:9c:a5:f2:dd:3b:f1:8d:b5:23:6b:
dc:81:6c:99:5d:9f:a8:42:17:d4:2d:d1:8c:5a:af:
fd:b3:57:ca:cd:1f:32:71:53:d5:fd:d3:15:f0:84:
f7:67:2b:c7:06:ce:dc:4c:6a:15:22:08:79:ac:d3:
95:6e:a1:8b:a2:42:a7:b5:23:8e:8a:97:c3:1b:1a:
bb:c3:6d:de:dd:53:c4:5e:bd:65:4a:c2:37:34:bc:
74:1a:20:02:60:81:8b:95:e6:d9:39:73:fa:6b:47:
3b:72:36:f7:28:75:db:cf:06:bd:c6:a3:64:81:d1:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:19:EB:25:1D:B1:83:10:B6:02:D7:88:DB:D8:24:70:43:31:F0
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:06:4f:0c:ca:09:66:d2:81:03:f5:28:9a:f7:34:b8:59:7d:
fc:c4:6d:63:85:0d:3b:7a:8b:e8:c2:ab:e1:b6:bc:30:86:e4:
61:37:29:9f:9d:a8:75:5a:01:6e:6a:6b:f5:68:ba:cd:e1:78:
47:2f:bf:08:f6:45:08:ed:e0:72:bd:de:8a:b9:69:95:fb:06:
09:0a:8e:97:16:5c:6f:f4:74:0a:b2:24:58:7e:9d:0a:eb:05:
d6:71:c1:a7:c4:b1:f1:34:a9:2b:dd:8d:e8:3d:a5:de:45:ae:
a0:ed:a0:aa:ce:47:01:2a:53:4e:db:96:a7:10:17:7d:b3:ba:
d6:fe:07:ba:58:d5:db:94:ad:19:00:44:50:96:2a:73:69:7c:
76:21:0c:ce:05:de:25:09:db:ef:55:ff:dc:b4:45:85:66:c5:
2d:c5:32:f2:66:9f:5f:65:0e:0d:62:05:62:9d:0b:bd:77:47:
de:23:c1:3d:4d:71:99:f4:91:c7:e2:24:fd:fc:fb:ba:cc:33:
06:02:d2:6b:04:d1:f9:6b:cd:de:c0:3e:7d:73:c6:57:5f:76:
6b:e0:40:ef:95:74:84:21:a4:3a:00:18:99:df:25:c9:78:19:
77:6a:a2:97:b0:0b:d1:2a:3a:06:32:49:35:c1:3e:54:1f:34:
d5:c4:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:46 2025 by rpki-client