Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: uzJqyVrgIoWuK0JyFlGOLevuxNM3MuBUTQagTkNE5T8=
Subject key identifier: E3:60:AD:59:E2:32:32:0D:A2:1C:18:7B:DF:2D:6D:AB:C0:3E:48:E0
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 0196B5FD7D5AAFF175E30863CB498F9B7C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 17:00:10 +0000
Manifest this update: Fri 09 May 2025 17:00:10 +0000
Manifest next update: Sat 10 May 2025 17:00:10 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: LvLli+uuWYlVjlo1S9k65u8/WU11jkHHdilTeIK+zP4=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:7d:5a:af:f1:75:e3:08:63:cb:49:8f:9b:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: May 9 17:00:10 2025 GMT
Not After : May 10 17:00:10 2025 GMT
Subject: CN=e360ad59e232320da21c187bdf2d6dabc03e48e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:2f:29:1a:87:09:88:b0:15:4a:2b:02:13:
8c:42:b9:7e:14:69:4e:3f:d6:37:13:77:cd:cf:f5:
88:5f:ba:ec:4a:57:9f:00:ef:86:00:09:ff:d6:96:
39:76:96:5b:fd:d1:db:81:0d:93:17:fa:f9:6a:ad:
9c:8b:8d:38:e0:96:29:79:8d:f4:9c:e8:33:b2:5c:
fc:53:eb:76:16:8f:d2:43:cf:9c:a8:08:2f:03:2c:
89:11:1a:6b:1d:52:19:8f:fa:fe:62:02:70:8d:fd:
e5:4c:bd:27:a7:54:c7:d4:5e:b5:f7:e1:a8:2b:bc:
a4:fe:ed:91:c5:f1:7d:ce:8d:d8:46:17:12:5c:a3:
6d:79:29:dd:e8:2a:ae:1b:6e:b4:c5:58:e5:32:0c:
ac:68:2f:f4:05:04:36:2c:60:44:dc:b6:58:3d:fc:
ed:f4:25:f7:a6:36:14:58:2b:06:1a:c2:42:2a:f5:
eb:ea:41:86:b0:5d:b4:51:70:f3:fc:e6:dd:e3:37:
46:4c:42:9c:39:47:fa:d8:15:c8:2a:54:de:f7:53:
72:fd:0f:64:b1:ef:c2:3e:53:55:15:5c:a0:3e:9c:
65:8b:5e:94:0b:1c:58:b2:0a:b2:18:7d:fc:fe:5b:
4f:c8:e7:2e:03:94:6f:07:9c:2c:7f:19:94:93:53:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:AD:59:E2:32:32:0D:A2:1C:18:7B:DF:2D:6D:AB:C0:3E:48:E0
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b5:dc:40:1d:c3:a0:48:32:a2:6a:1d:34:17:df:1a:30:0e:
df:5d:2b:3a:d8:7e:7a:61:e1:ab:4d:b5:9b:e7:df:d3:fe:53:
e3:ad:f8:35:12:58:1e:4d:86:e7:c4:06:25:d4:05:d8:e7:17:
d3:da:69:22:6e:41:bd:63:34:39:f7:86:9f:8e:25:67:bd:b8:
0a:89:4b:71:33:f1:0d:6c:46:4e:a0:a0:36:35:e6:b5:ce:d4:
32:3e:bf:90:47:b4:6f:de:39:15:37:db:88:ad:65:e9:8c:ab:
70:d4:23:76:c7:0e:e0:ab:1f:7c:f6:cc:b9:de:a3:1a:6a:cd:
03:ca:8c:de:4e:2c:c3:78:6c:66:bf:a3:20:84:b8:df:c2:e9:
55:11:66:9e:33:2b:e8:cb:7d:9f:d2:d2:97:50:42:95:f3:d8:
7b:e1:f9:bb:e3:7e:37:94:27:0f:90:e9:f8:81:cc:1d:35:10:
81:13:57:d8:65:ab:f4:9d:43:8e:c6:06:cf:da:55:08:4d:be:
58:56:22:b5:86:ff:7e:84:6e:fc:1a:ff:3c:e5:80:e0:ba:db:
e3:5e:51:b5:28:2e:20:f0:f0:6b:a1:b0:f7:b5:6d:fc:a6:d5:
d6:cf:fd:ae:64:3c:3b:23:9e:7b:ef:84:df:5b:3f:81:50:6a:
a3:0c:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:42:08 2025 by rpki-client