Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: D6QfZ7cex2yt7uJwTlD1ZBlb4GtZY1/LBt+K9f6R9jM=
Subject key identifier: 82:F2:AC:0C:11:3B:7D:C3:5C:3E:00:26:83:18:F2:AF:E9:AF:8A:5E
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 0196AEB2418C918E6AC363E28C5C5288D6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 07:00:39 +0000
Manifest this update: Thu 08 May 2025 07:00:39 +0000
Manifest next update: Fri 09 May 2025 07:00:39 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: lFyPibh98bha621HarylS9EPi6IshwC8iAH4x6QnAyY=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:41:8c:91:8e:6a:c3:63:e2:8c:5c:52:88:d6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: May 8 07:00:39 2025 GMT
Not After : May 9 07:00:39 2025 GMT
Subject: CN=82f2ac0c113b7dc35c3e00268318f2afe9af8a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:b7:70:8f:73:b6:1e:18:c3:c3:37:1f:29:
44:10:41:6d:28:03:59:73:d8:e9:97:8e:05:53:58:
6b:8b:82:1f:d4:bb:1b:21:75:fb:a7:05:9c:4f:dd:
0d:af:fe:da:2b:49:b3:ac:86:7c:24:2d:88:1e:2f:
a8:a2:ca:32:83:27:e6:4b:4e:aa:c1:5e:82:e4:f7:
eb:97:6d:23:11:16:14:7c:1f:f8:18:ff:a1:ae:29:
5c:2a:61:a2:6e:e8:11:2d:dd:91:4e:91:16:1a:2f:
38:8b:23:4a:2e:4b:af:91:0f:2a:80:74:e4:fa:d6:
f3:32:3d:39:f3:62:79:fe:b8:3a:1f:17:7f:58:05:
ad:85:e5:f7:69:3a:b9:90:c8:b5:fa:de:60:2a:61:
35:6f:d1:7b:7b:dd:05:6a:8d:73:85:f7:3d:0d:4f:
d6:bd:c3:67:a7:42:15:c7:e7:09:b7:25:82:ec:07:
6e:47:30:bc:64:3a:7f:0a:77:20:cb:47:3b:f6:42:
92:6f:b3:66:d0:ff:3f:4f:4d:0e:57:4c:aa:4e:cb:
af:30:39:7e:94:77:64:89:99:56:53:ba:8e:5a:ef:
d0:4d:35:85:30:86:de:8c:28:36:c2:77:1c:1e:13:
0e:6f:ef:26:5d:3a:5d:81:63:97:73:e8:9e:ed:84:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:AC:0C:11:3B:7D:C3:5C:3E:00:26:83:18:F2:AF:E9:AF:8A:5E
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:17:0d:bf:b4:18:cc:d9:94:fa:0f:f7:a7:24:2a:71:66:
aa:c5:b7:b2:ff:c3:19:49:55:8b:15:6d:1b:91:95:1c:82:99:
6f:a6:18:17:a9:16:c1:c7:93:90:0b:92:e1:4f:5f:16:d6:a0:
8b:fe:42:c8:68:45:ba:50:01:61:ef:04:9e:e3:9c:a2:f1:90:
85:d2:a6:27:a1:1d:41:10:95:ea:54:1d:36:ad:67:29:be:99:
d9:e5:4a:3b:13:67:93:3d:56:2d:61:77:d6:d9:45:88:05:72:
7a:33:5e:89:19:f4:76:e4:b2:43:6c:6e:1f:7d:1e:87:ba:65:
70:83:5f:c1:d0:e7:90:a8:20:e8:c3:7c:88:13:91:3f:7a:20:
b3:03:e2:35:3b:5d:30:0f:3e:8d:4b:21:e2:27:10:61:fd:d8:
eb:d7:d3:8c:21:aa:bb:7e:e7:c5:90:e0:6b:61:c7:01:2c:0d:
12:7c:81:4c:cb:4c:34:7d:de:ba:44:6d:5d:4a:67:2d:3c:5a:
8a:21:e5:af:db:1f:53:42:23:6c:fa:3c:bf:e9:ff:af:a1:ed:
80:0b:64:6d:49:39:3a:86:c7:4f:a1:b5:af:04:67:14:98:c3:
71:f4:70:02:e9:bb:45:31:b4:c0:44:c6:1b:fa:7f:8d:46:b2:
c6:d7:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:06:31 2025 by rpki-client