Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: nBAzGfvzkyc+jXPKrZ9E3lMkZI65dPCzFPEavGp1C68=
Subject key identifier: 39:6E:56:3E:B2:5B:3F:93:4E:48:9D:15:16:41:DB:21:2F:4C:E6:3D
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 0196A6C167C8CAE7FD6DE5AA8F8096BDAD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 18:00:14 +0000
Manifest this update: Tue 06 May 2025 18:00:14 +0000
Manifest next update: Wed 07 May 2025 18:00:14 +0000
Files and hashes: 1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: z4LZCD8w/j0HkOC/c2zCZdYj2yxEXMr3fa5a65gv4Zo=)
2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:67:c8:ca:e7:fd:6d:e5:aa:8f:80:96:bd:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: May 6 18:00:14 2025 GMT
Not After : May 7 18:00:14 2025 GMT
Subject: CN=396e563eb25b3f934e489d151641db212f4ce63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:50:a6:bc:58:d7:72:cf:cf:38:2c:be:0f:
c6:f2:f0:36:e9:36:2e:89:fa:12:90:2a:78:35:26:
25:3a:22:72:e1:02:94:db:82:77:06:2f:ec:3d:5f:
73:3c:dc:aa:49:b1:b5:10:17:d8:ca:38:66:d4:8f:
9d:a8:3f:03:f9:1c:3e:09:a8:f8:0c:d2:02:04:af:
2b:81:54:ec:c6:dc:ab:22:8b:8c:62:62:ed:7e:b1:
84:56:d8:6b:ce:fc:c4:fa:57:db:f1:4c:8b:66:ae:
d9:5a:88:1c:ad:d9:a3:6d:22:b5:76:35:39:32:61:
99:fb:2f:66:89:6a:fb:05:2c:9c:4a:2f:d7:1b:c7:
ad:d0:e1:5b:be:b2:89:38:de:0b:9b:d4:1d:ae:de:
50:98:db:15:e9:bf:50:ec:d1:a3:74:bf:15:9f:53:
69:29:94:fe:3e:21:fd:31:c2:bc:d2:dc:5e:79:a4:
79:66:67:96:3e:e7:90:f2:b6:ad:fe:0b:0e:a2:09:
d0:80:ee:2a:95:b7:d2:0f:3e:10:c6:0b:e0:34:4f:
77:8e:32:96:63:f5:70:04:0a:bb:be:5d:5a:8e:b1:
25:d8:4b:98:91:85:1c:a8:e7:8b:b6:0e:be:12:6b:
9c:88:7a:05:78:31:3b:c3:61:d4:0d:25:a9:4d:b3:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:56:3E:B2:5B:3F:93:4E:48:9D:15:16:41:DB:21:2F:4C:E6:3D
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b0:9e:26:7c:49:d2:7e:02:34:40:19:f5:4e:62:09:58:7b:
03:3e:b6:18:ac:0d:da:de:0c:30:8d:4f:c8:13:24:09:4a:37:
5c:ed:b8:0a:2b:bc:fc:18:86:d3:08:9c:a1:11:82:57:d4:29:
c3:d9:a7:b2:7f:72:32:6f:6b:a4:50:f9:d9:3c:95:6e:55:96:
1c:f5:83:90:60:59:16:ef:20:b9:dd:7d:b5:c2:84:53:8f:99:
b2:a5:cc:fb:26:48:f8:c4:9b:fc:d9:0c:77:e7:08:26:e2:c4:
5c:e9:b5:06:cb:7e:76:a5:39:f1:a4:e5:33:c8:a3:a7:6c:62:
9a:eb:17:63:51:bb:d1:73:64:b1:11:a2:35:a5:35:24:8a:fa:
78:ed:fc:12:23:37:4a:40:dc:aa:55:0c:43:01:a6:62:4c:56:
fc:a3:9c:af:02:0d:94:9a:24:c4:f9:fe:41:2d:7c:0c:68:1d:
6e:b0:63:58:05:7e:aa:e4:d5:80:8c:e9:b7:0d:22:20:30:40:
00:05:d4:3b:7b:c3:13:03:67:74:02:d8:82:bc:10:9c:8a:62:
e6:6f:e0:32:f9:38:9e:2a:08:28:e0:b2:d5:8d:5e:d5:d4:a7:
e1:1e:ee:3c:b2:5d:b0:9e:1d:91:e7:38:0e:60:5b:7f:06:2b:
11:9c:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:05:17 2025 by rpki-client