Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: nuZWrg6XLmTxJnhqWuvc0zisNoj23+kcQEiBCIXj8EE=
Subject key identifier: F3:5C:90:85:41:F8:14:8A:86:B7:42:41:97:65:F5:92:15:33:DA:FA
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0196BA119AEE5341E3758C7DDB911BB8FA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1493
Signing time: Sat 10 May 2025 12:00:37 +0000
Manifest this update: Sat 10 May 2025 12:00:37 +0000
Manifest next update: Sun 11 May 2025 12:00:37 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: SpnF4AgElQtv3nBf7lYPFtVmt+H7NSJUmfYs+uDT1rE=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:9a:ee:53:41:e3:75:8c:7d:db:91:1b:b8:fa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: May 10 12:00:37 2025 GMT
Not After : May 11 12:00:37 2025 GMT
Subject: CN=f35c908541f8148a86b742419765f5921533dafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:fe:0f:c4:07:f6:b0:ee:6a:77:55:56:6e:
32:46:e2:89:26:30:68:7f:0a:0e:5c:52:1c:b8:c1:
2e:e8:9b:13:0e:84:d6:4f:f3:69:e1:cc:c1:95:e5:
ee:76:0a:45:45:cf:80:24:d7:77:b0:e9:47:92:52:
c2:77:cb:c8:be:50:e9:24:51:6e:d4:f9:4c:fb:97:
38:7a:86:bc:29:53:81:40:81:39:fc:7f:7a:80:2c:
ac:24:37:f2:74:30:da:9d:58:78:ed:8f:33:f8:ea:
ca:2e:09:c3:d1:e9:d6:10:f1:c3:b2:1a:55:1b:71:
2a:10:72:e2:7d:65:39:d0:4a:19:a7:2e:04:98:2a:
9b:5f:54:73:f8:88:70:f0:a1:d4:55:cb:5b:9e:d5:
bf:e1:da:b0:4d:87:65:74:a0:41:ea:c8:9b:d8:d8:
10:2e:0a:22:af:a9:9a:16:11:62:29:0a:15:63:27:
a9:de:f0:30:80:5b:e3:2a:0b:34:f1:96:cb:49:07:
aa:cb:36:ea:cb:33:dc:82:12:e8:43:96:60:a5:dc:
fd:b5:f4:9a:e8:24:8e:83:c9:27:6c:ea:32:2d:94:
74:76:1a:f9:56:58:3d:53:c6:f2:53:01:d1:e0:de:
03:dd:80:f6:36:9d:df:47:43:ee:0d:54:30:a3:b9:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:90:85:41:F8:14:8A:86:B7:42:41:97:65:F5:92:15:33:DA:FA
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:12:16:dc:2a:bf:e2:36:56:c0:44:14:1f:15:a8:97:54:e9:
5f:22:2a:29:81:5b:9f:72:e3:e7:d8:0f:f9:fa:4c:1a:de:ea:
19:93:0f:5c:f6:2a:dd:42:39:ae:cc:f1:d2:f1:f6:ca:24:ae:
3e:18:c4:fc:0b:45:b2:ec:f7:25:b9:29:42:97:3d:35:ab:7e:
10:20:86:2a:b2:38:6a:1f:95:71:00:ef:19:73:e6:9d:e1:16:
27:58:72:28:5c:78:68:0d:5c:86:2c:e0:65:ba:79:de:c7:36:
ba:47:47:63:b3:56:a7:65:11:e9:4d:69:e7:68:83:4a:ce:b0:
3b:b2:5e:af:f6:53:54:ab:ca:0e:db:0a:19:1b:7c:c7:3d:41:
00:eb:ba:1f:33:b2:44:f3:a0:26:32:b2:0d:11:a2:5c:b4:61:
1b:06:b2:67:b5:7e:ae:3e:72:5e:fa:93:48:65:ba:6c:20:e1:
1d:a0:1b:2e:be:7d:50:6e:0d:71:4b:7d:b9:3b:58:8d:0d:68:
bd:b0:ad:a8:0f:5b:79:e8:76:19:30:7f:bd:37:31:1b:96:2b:
d9:48:87:13:64:6c:79:84:1c:42:29:2c:b8:f7:62:fc:cd:53:
7e:a4:e9:28:ff:a1:e7:59:c2:6d:27:54:37:5a:a9:24:24:54:
45:df:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:35:54 2025 by rpki-client