Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: L1aosKcVjCnO1bQE+W/fS+6vQ2ADe5Q8cotELgR1Yy0=
Subject key identifier: 77:0E:3F:38:9B:7E:5C:AD:C9:56:C6:FB:EB:50:20:1B:E5:ED:4D:E5
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 0196AA6739ECD7AC00C2458C6514A2D1A3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 11:00:13 +0000
Manifest this update: Wed 07 May 2025 11:00:13 +0000
Manifest next update: Thu 08 May 2025 11:00:13 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: Xo1OgBPKyxjrD3lJUuP4Ayg0rszx+78mVxoACo/XC7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:39:ec:d7:ac:00:c2:45:8c:65:14:a2:d1:a3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: May 7 11:00:13 2025 GMT
Not After : May 8 11:00:13 2025 GMT
Subject: CN=770e3f389b7e5cadc956c6fbeb50201be5ed4de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:55:b9:85:89:0c:c7:73:30:f0:f1:e5:49:
7c:e4:39:40:72:0d:e2:dc:b3:b0:c7:52:45:92:f0:
88:47:01:85:56:df:ef:20:fd:6d:89:38:7f:ba:59:
19:ee:ba:33:c3:1e:fe:f2:98:03:01:1d:f2:83:a3:
87:18:6d:c0:5f:d7:bd:a1:72:8e:e6:66:b7:81:ee:
39:b5:7f:c3:4a:a4:c2:f0:f2:52:30:6d:78:18:a8:
dd:3c:72:96:e2:2e:06:7c:61:10:d5:ab:65:71:a6:
67:d1:e2:f0:a7:32:cd:01:81:54:4d:5e:f5:66:63:
6c:5e:6d:59:ac:c2:07:8f:d5:9a:b3:f2:c3:d5:20:
f5:ce:e0:c4:f9:82:f3:33:54:56:f9:06:31:b2:74:
31:76:6b:f3:b8:df:17:d5:0c:ef:07:c0:01:e6:3b:
41:4f:84:14:41:30:8c:e5:65:de:af:17:c3:59:aa:
c9:e0:ce:24:57:29:b8:14:b8:7d:a4:2a:22:2e:55:
8d:d8:1e:c3:fc:60:84:86:23:bb:9d:15:3b:d3:8e:
b2:40:4b:b2:7c:7d:13:d4:4f:4e:6f:42:4f:7f:bd:
09:78:18:87:3c:3a:bf:54:04:9e:de:82:2e:b7:88:
3b:fc:aa:bb:53:8b:0e:17:a7:31:22:75:6a:36:15:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0E:3F:38:9B:7E:5C:AD:C9:56:C6:FB:EB:50:20:1B:E5:ED:4D:E5
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f6:5b:a9:d8:9d:30:9b:75:82:ce:ad:4c:9f:34:49:5c:78:
fd:04:44:bb:8a:d4:90:19:f4:f0:84:c2:c8:9f:7e:51:8f:64:
18:99:94:32:67:07:24:13:0c:a9:7f:4d:19:65:0d:9c:bd:39:
1f:2a:83:1e:e2:e6:c6:69:97:a0:a8:37:5f:ae:bc:60:f1:e1:
60:a2:5e:54:c9:5a:be:20:00:a3:ce:47:8c:69:42:d1:03:6a:
62:70:f6:a8:47:eb:b9:e3:f6:92:0e:f7:48:24:e4:d2:0f:99:
a0:93:bd:59:d3:de:16:ed:36:f1:b8:91:ae:b6:a9:d9:0e:bb:
61:f8:e5:3a:22:c6:9f:2e:c9:1c:79:05:c3:6d:0d:48:88:1d:
63:00:c7:f5:38:9d:ff:9e:9c:a4:d4:30:f8:e4:1d:ea:a2:e6:
ed:7d:69:fa:8f:8b:61:c3:d5:b4:b2:16:2b:9c:bf:61:e6:94:
33:c0:fc:5c:90:b8:89:91:be:ed:91:00:06:87:4a:53:7d:0e:
24:0a:dc:88:9b:a9:59:ee:e5:53:4c:6a:52:24:ca:0a:88:93:
61:ba:78:db:01:34:ef:85:95:cd:71:93:49:41:86:56:57:03:
39:2d:d9:f8:1a:91:41:c8:fc:99:6b:68:31:f7:43:6e:7f:e0:
3e:4e:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:39:16 2025 by rpki-client