Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: NLULE6h5O64E9/rN4HebhgAM521La2AKFkhDgswmUTo=
Subject key identifier: A7:DD:DB:E9:37:2B:17:0B:88:98:4E:C8:71:E0:13:F4:BC:E4:D3:59
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 0196AB437A472B2C947E0D7B60CD4313CF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1115
Signing time: Wed 07 May 2025 15:00:48 +0000
Manifest this update: Wed 07 May 2025 15:00:48 +0000
Manifest next update: Thu 08 May 2025 15:00:48 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: eUJqnetKXr2D0DKAHeG6QxsszNUAQ6hl3H/4elcaQp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:7a:47:2b:2c:94:7e:0d:7b:60:cd:43:13:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: May 7 15:00:48 2025 GMT
Not After : May 8 15:00:48 2025 GMT
Subject: CN=a7dddbe9372b170b88984ec871e013f4bce4d359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:20:ff:54:fd:c9:7a:56:5c:d2:3a:27:59:
11:7f:64:5d:e0:9c:94:aa:9c:eb:27:41:a3:d3:93:
68:41:01:84:43:2a:6d:c1:a8:b8:bf:31:70:9b:57:
ed:6c:a3:95:32:00:a2:60:32:fc:02:82:0d:34:cd:
95:ca:b8:e5:cf:32:0f:b9:30:21:45:05:cb:dc:b9:
45:d9:b7:fb:e8:9c:0f:ab:54:39:bf:01:e5:1f:f8:
6f:ad:d6:fe:13:3a:fa:ef:9c:9c:ef:80:ee:7f:0a:
fa:ef:18:22:44:ee:58:5b:60:d7:80:04:6a:1b:65:
c6:01:a1:a3:1d:fe:71:36:ca:79:fb:5e:dc:c7:63:
af:08:eb:8e:b9:71:b7:a0:9f:2b:88:df:1d:eb:60:
f8:8e:6c:5b:b6:f2:e8:1a:6e:dd:7d:b4:b5:d9:06:
d4:13:6d:7a:1a:4c:e4:50:70:d4:17:f1:fd:90:e2:
0d:4c:61:ab:ed:2e:4b:2b:5e:c0:63:6a:73:d1:c9:
0c:8e:90:5a:4c:d3:8c:44:bc:22:bf:5a:df:cd:a9:
13:bd:56:dc:6c:cb:59:2d:ac:3b:5d:e4:ad:30:04:
d5:42:c0:e9:46:30:1e:0d:78:21:59:04:b8:06:11:
3e:29:93:5f:65:05:92:db:13:ae:fa:94:f1:89:a6:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:DB:E9:37:2B:17:0B:88:98:4E:C8:71:E0:13:F4:BC:E4:D3:59
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:bd:71:1d:6f:00:e2:80:41:97:af:d0:f4:6d:1a:d3:bb:
62:f9:ed:d1:d5:c1:c5:ff:6c:df:4a:02:bb:22:08:09:0e:5a:
fc:69:28:52:99:30:56:b0:4f:d7:63:4c:6a:9a:e5:a6:19:83:
65:78:71:5d:b5:d9:c1:e6:0d:56:8c:5e:c3:1d:4e:63:23:4a:
a6:18:6b:a1:8c:34:56:76:5b:07:96:b3:ab:4e:d7:5f:e7:1d:
4f:a5:52:69:49:e7:de:85:a9:4c:76:3d:b5:3b:c8:76:a4:ad:
11:ba:80:3e:43:48:12:30:a5:00:02:67:48:fc:99:6c:14:40:
59:e2:08:74:7d:be:88:0c:29:3e:3d:b0:ce:38:f7:fd:89:1e:
f4:6e:2c:f4:6d:99:82:43:33:4a:86:02:7b:32:96:af:49:90:
0a:89:d8:73:e8:b8:48:58:b9:50:2a:8b:b5:99:25:48:8b:03:
88:e6:fb:33:95:fc:43:b2:8f:cc:5e:f2:f7:f6:ba:3c:fa:cf:
24:7e:fa:18:20:83:70:67:24:45:a4:9e:9f:de:f3:fd:fa:8c:
b9:29:58:f1:a8:90:66:45:6c:f6:42:d9:44:98:a2:16:84:e3:
21:42:e4:24:cd:44:eb:2f:25:90:f9:9b:8e:99:3c:d5:dd:55:
9b:23:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:34:58 2025 by rpki-client