Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: KRLt0OPkAD1UTbci8Mcm7iZmflMaVuKsPEMnsqrgOPE=
Subject key identifier: 33:7B:7A:F6:61:EB:95:9A:10:7D:97:D9:40:37:4C:AF:52:2A:0B:AB
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 0196BFA56884E0381DA27AF8B5D1FCAD41BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 153D
Signing time: Sun 11 May 2025 14:00:10 +0000
Manifest this update: Sun 11 May 2025 14:00:10 +0000
Manifest next update: Mon 12 May 2025 14:00:10 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: z8JlEkVn41URnih+bmZbxeNgTIOktk7ft7fFx5PxX8Y=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:68:84:e0:38:1d:a2:7a:f8:b5:d1:fc:ad:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: May 11 14:00:10 2025 GMT
Not After : May 12 14:00:10 2025 GMT
Subject: CN=337b7af661eb959a107d97d940374caf522a0bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:65:2d:88:33:dc:43:a3:cf:a7:31:23:aa:
f9:bb:09:60:eb:75:1e:41:02:8f:09:f0:a6:2a:a2:
f1:f1:0a:e1:2f:a3:ab:25:6e:18:d0:fb:b2:dd:e6:
35:2b:03:62:ab:32:de:de:cd:39:af:2d:b9:f2:6f:
b2:ac:27:11:42:7a:3d:c6:ad:85:6b:b3:6d:b6:a7:
48:da:4c:cf:37:64:9a:66:5b:8a:5f:87:fb:d7:f1:
80:b7:85:df:99:48:d5:a7:6b:6f:d1:b1:c7:46:f5:
ce:83:27:c7:3c:a4:53:1c:60:fd:e9:93:d0:39:5f:
c2:c3:d5:30:d0:15:96:69:77:03:3d:a6:db:a5:8e:
fd:b6:89:a5:cd:a1:d1:24:28:db:66:a4:6e:ae:7c:
cd:77:ae:b3:13:bf:3f:50:c5:39:7b:a1:40:7a:47:
c8:5d:26:3e:55:e6:fb:5c:86:11:d8:1e:fb:b3:20:
22:23:73:bd:e4:01:40:42:a2:b6:77:f2:57:31:42:
38:7d:d6:ce:12:be:8f:b9:2c:2c:5f:dd:06:58:95:
69:02:55:d7:48:48:46:f6:de:65:e0:08:7b:d5:a2:
b3:e4:c5:fe:58:78:fd:59:20:da:e6:30:34:a2:27:
39:e6:5f:eb:fc:24:6b:9a:21:06:d0:bf:c0:2a:4a:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:7A:F6:61:EB:95:9A:10:7D:97:D9:40:37:4C:AF:52:2A:0B:AB
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:74:be:39:36:2f:ef:a1:6b:85:08:7c:37:c3:e6:08:b6:b2:
5b:6d:8e:8c:f4:5b:f0:88:f6:cb:8c:83:8c:95:bb:6c:5e:cf:
3e:86:47:85:99:69:1d:d2:db:16:52:fb:44:31:17:97:7c:52:
b9:fa:21:d5:1a:2a:c7:e3:c3:86:d1:db:97:ea:ec:d7:ac:82:
ed:a5:2c:c7:e9:3b:71:56:b2:e1:fe:ac:e8:f0:25:85:fc:cb:
c0:8f:7c:b9:dd:21:62:ca:a2:6d:c0:d1:2f:77:4b:a6:2d:71:
d8:a4:24:d5:c3:6d:76:67:fb:46:c8:48:08:ae:30:ff:cd:db:
aa:b5:6e:03:a8:bc:78:dc:8b:a9:fc:63:29:7c:43:1c:a6:99:
6e:ee:e1:4a:56:08:bb:9e:ed:20:5d:4c:c4:11:b1:36:67:da:
71:76:e8:b3:3c:f4:68:37:7c:2c:61:c1:88:a1:08:95:b6:f9:
8a:69:1d:fc:61:b9:d0:9c:bf:ea:b3:a6:5e:ff:af:da:e3:a8:
14:6b:3d:94:c7:11:33:ec:61:60:cb:10:c7:ef:24:8d:4c:39:
f6:74:67:61:1c:67:e8:e5:78:b1:87:6b:2f:94:a7:af:3d:4e:
b9:57:e7:87:d5:d8:26:44:f4:7b:c4:d0:d4:63:d6:c0:72:e5:
ed:37:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:13:43 2025 by rpki-client