Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: fjZfQcKuJUYcXeyel2tRUVRSmdBes+VRNVMOTHSqN8I=
Subject key identifier: 33:6B:3B:BE:EF:D3:4E:35:B8:5C:9F:22:23:83:13:1A:7C:C0:87:6E
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0196AFFC73C6A70F61CCE722AFC49E2AD2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 13:01:19 +0000
Manifest this update: Thu 08 May 2025 13:01:19 +0000
Manifest next update: Fri 09 May 2025 13:01:19 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: MgLTqnpC6enSp4JZhMBdTj6xTXhynWpL2OEDBpIWGns=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:73:c6:a7:0f:61:cc:e7:22:af:c4:9e:2a:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: May 8 13:01:19 2025 GMT
Not After : May 9 13:01:19 2025 GMT
Subject: CN=336b3bbeefd34e35b85c9f222383131a7cc0876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:25:73:de:3b:79:26:2a:5d:aa:84:80:a0:
a4:f9:c9:5b:21:65:73:ca:9f:0a:cc:74:d8:79:45:
67:76:95:65:53:91:35:9f:dc:a2:c3:ad:3d:9a:12:
97:32:e0:20:64:40:1b:4a:ea:10:3d:e9:2f:00:18:
bf:82:1a:49:af:75:e3:29:ef:c5:cd:03:70:f4:a8:
af:a0:ed:c7:99:55:98:37:e1:20:1f:28:d8:f9:58:
c7:35:81:6d:81:13:46:3e:77:1c:44:59:37:1b:23:
e8:3d:98:6d:26:04:e6:1c:a9:9d:e6:da:24:fb:1d:
19:08:aa:db:02:39:f6:fd:74:ea:b0:58:0e:ce:74:
4b:73:c4:67:19:2b:ac:7b:90:87:9d:39:4c:49:0a:
85:1d:ff:f8:05:ff:b5:79:fa:d4:95:57:94:dd:a2:
e1:00:c1:f8:66:a2:46:8b:c5:2b:81:fb:63:e7:21:
df:e2:a0:c5:08:f7:e5:c1:42:5e:82:2d:b1:1d:df:
cd:07:2f:51:ff:9a:59:f0:0d:28:a3:22:17:c2:52:
b0:a6:2d:ba:62:8a:89:6a:27:97:6a:f9:fc:b7:db:
fb:ad:76:66:be:76:9b:a9:c2:51:9b:8c:18:78:fb:
55:ab:aa:a3:b1:3f:fe:ef:69:66:a3:43:23:77:6c:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:3B:BE:EF:D3:4E:35:B8:5C:9F:22:23:83:13:1A:7C:C0:87:6E
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:9f:01:99:9d:d9:83:42:c0:e0:03:c7:84:ea:ad:92:9c:
8f:f5:21:df:8f:38:04:22:e6:46:13:0b:d4:eb:7e:9c:50:43:
b2:a8:30:62:21:3a:90:dd:43:3e:10:43:a3:0a:fb:51:78:f9:
fd:1c:df:63:8c:35:50:3c:65:53:fa:c6:4e:88:da:a7:07:32:
df:9a:ed:3b:ca:36:e8:49:69:57:89:af:33:dd:9e:e9:28:9a:
8c:54:a6:ca:79:1b:63:cc:be:54:ce:5b:89:8a:5e:5f:4c:97:
87:db:dd:dc:25:b0:4e:d0:76:3d:6f:22:75:c6:da:50:57:3a:
c0:26:6f:ad:cd:65:47:fe:ab:5c:c9:87:7e:28:7e:e5:0b:e8:
fd:ce:19:88:6d:2d:a7:dd:78:10:6a:c5:a2:25:19:65:ac:b5:
38:ed:c6:12:1d:88:28:52:b9:56:65:e8:66:b1:8e:1a:2d:cc:
13:38:72:fb:e3:3c:19:b4:8a:b9:90:61:c6:3f:d4:22:a5:e7:
f4:fd:3a:98:50:db:de:54:d9:fe:71:f3:7e:8c:54:a2:0b:26:
44:ef:3b:dc:41:b3:bb:c6:2a:96:93:4f:c6:81:d1:38:11:0c:
6e:87:f9:b7:94:24:d3:3f:3b:22:e1:94:cd:6c:06:a3:07:a0:
10:88:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:20:29 2025 by rpki-client