Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: PIlI3Ee/IIDb89cD8MPmATQNkNk1Wyop75oWBI2YEWQ=
Subject key identifier: 70:BF:33:49:73:83:C7:BB:E2:32:37:7C:06:AB:18:F5:10:66:02:C9
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0196CCBC6F7ED02F2285BCAA9901EE869658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 03:00:23 +0000
Manifest this update: Wed 14 May 2025 03:00:23 +0000
Manifest next update: Thu 15 May 2025 03:00:23 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: 7r4hoaomVkoScndeg35RNn484vARYwHpTRK83875Cpc=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:bc:6f:7e:d0:2f:22:85:bc:aa:99:01:ee:86:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: May 14 03:00:23 2025 GMT
Not After : May 15 03:00:23 2025 GMT
Subject: CN=70bf33497383c7bbe232377c06ab18f5106602c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:d8:05:82:a4:9b:27:45:2b:05:22:d9:83:
b3:83:19:20:a3:95:db:64:bf:66:c3:b3:54:1a:08:
bd:ec:0c:b0:1b:0d:14:c3:65:43:13:9e:70:bd:49:
d9:21:7f:e8:e7:68:64:8c:04:d1:ae:ac:90:40:f4:
bd:59:5e:2b:d5:5e:ad:39:02:38:74:b3:f1:45:89:
ff:11:88:74:6a:c3:f5:42:8f:85:79:cf:fd:26:b1:
7c:48:97:58:1f:27:9c:8b:b3:38:33:7d:c7:36:cc:
e5:cf:8c:33:38:4d:e8:a9:97:ef:bc:10:7a:1a:d4:
20:87:07:24:f7:c3:f1:f1:d7:53:b2:08:23:48:2d:
eb:90:ac:b5:d2:14:c8:cb:fe:3e:94:fe:44:1f:8e:
73:e1:50:d9:91:26:6e:9e:e2:0c:d3:23:53:46:2a:
dc:19:5e:18:79:86:00:c1:2b:17:4d:dd:ac:3a:cf:
49:f7:10:21:89:ef:e8:c3:00:7f:2f:36:ff:22:d1:
0b:7b:55:3c:dd:0a:ba:92:4b:e9:c5:15:4b:7d:f9:
a3:94:29:83:31:a5:02:18:8d:0f:3a:ae:4a:86:31:
b1:d1:0e:19:a6:b6:0d:36:0e:96:38:0c:72:39:6a:
3b:0d:3c:59:dc:3b:36:c9:c4:fa:85:17:20:7d:55:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BF:33:49:73:83:C7:BB:E2:32:37:7C:06:AB:18:F5:10:66:02:C9
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:f9:9b:86:17:50:e6:65:9a:f7:22:9e:64:92:f6:50:8d:
08:46:49:05:3f:6b:79:02:74:80:6b:7a:dc:3d:26:86:24:8a:
42:9c:5c:d8:69:00:f1:e7:de:56:37:42:30:3f:10:98:2f:66:
dc:91:fd:21:1a:1b:30:37:2c:5f:75:f1:df:ce:04:40:66:e1:
cf:9f:a9:4f:69:46:fd:08:06:4d:46:a4:2d:7a:68:1d:41:b2:
23:9b:ab:d6:89:86:7a:c9:5b:bd:0a:f2:2e:4a:59:75:04:e1:
f2:a0:af:c0:3c:6b:75:dc:4a:25:cb:97:ed:4f:d9:52:d1:a7:
08:51:98:a9:34:46:79:3a:0a:3f:9e:81:70:27:f1:57:47:ae:
c8:d7:37:f8:65:d8:e1:0b:23:51:91:6d:8e:02:1a:16:b0:a2:
b6:41:9c:64:a1:44:ad:95:ef:9a:ad:a8:57:e2:01:4c:ac:b5:
69:16:ec:b3:9a:a3:12:ec:24:e7:c5:b6:52:5d:68:3a:94:32:
fd:b6:eb:fa:0f:e3:9d:83:e7:db:0d:f3:57:c9:cc:63:2b:b8:
8e:2e:7b:5f:c9:da:5d:cf:4f:48:f0:72:26:3a:71:a7:e0:5a:
da:74:07:b5:0e:d2:ad:c9:db:85:94:4f:ce:cd:bb:e4:96:09:
ff:33:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:28:30 2025 by rpki-client