Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: z1KMB5SsGTWo57Sme9K+YszaYWiKEaGOxLnlGwwpq3o=
Subject key identifier: ED:4F:CB:F0:8D:2A:BC:99:EE:B1:40:FC:B2:AB:1E:5C:CD:7C:B1:2B
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0196C201FA59FD459320C98D500C865AE2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 01:00:31 +0000
Manifest this update: Mon 12 May 2025 01:00:31 +0000
Manifest next update: Tue 13 May 2025 01:00:31 +0000
Files and hashes: 1: Ha4iqiemRVs4K0apcX26aGgxEQM.roa (hash: Y9w0WT6CR9hlG1wNToGxOj1Wt0I5gYiZH++6mqrNiy0=)
2: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: mz+r0jxQtuIDEbhhn/pnF6CEyqBi+IH0Tx1xbQ1GBX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:fa:59:fd:45:93:20:c9:8d:50:0c:86:5a:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: May 12 01:00:31 2025 GMT
Not After : May 13 01:00:31 2025 GMT
Subject: CN=ed4fcbf08d2abc99eeb140fcb2ab1e5ccd7cb12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:a2:84:5f:50:3a:25:5b:58:b3:d0:14:98:
27:5f:91:9a:eb:eb:76:67:36:7b:2d:8b:0b:5c:1b:
48:17:ac:80:19:9d:7f:aa:b6:42:61:69:e4:1e:f0:
91:19:27:1b:1e:47:ff:5f:96:07:59:00:8f:c6:33:
a7:21:ac:59:fd:2e:8e:43:8d:b7:27:f7:ba:2e:c7:
1c:80:1a:ac:9c:70:2b:ed:09:c7:4f:59:72:6b:22:
d9:d7:8f:6e:3f:f9:76:6a:73:1b:35:94:d7:c9:a9:
53:1d:2d:bc:74:e2:38:2f:df:4a:78:fa:25:d4:35:
01:f3:dc:74:e8:dd:71:95:5c:67:1c:3a:c0:5b:a8:
9e:eb:b2:4c:74:cb:16:d1:05:f6:4f:a5:6f:5b:b0:
82:04:28:c9:d5:15:88:48:58:fd:9e:e0:2a:4c:ec:
53:92:e3:59:18:fc:50:88:bf:91:1c:00:ee:61:f9:
86:bb:b4:16:00:8a:73:a3:dd:27:a8:75:29:fe:c7:
4d:23:bf:ef:6f:04:87:80:c5:e5:f2:be:a1:63:a2:
c7:4b:3d:84:94:fd:48:fa:56:98:f5:ca:e3:ed:80:
7f:ac:af:ae:b6:70:47:c9:e3:2e:96:30:47:26:af:
90:6b:da:fc:c7:84:f3:24:4b:6d:59:bf:2b:3f:58:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4F:CB:F0:8D:2A:BC:99:EE:B1:40:FC:B2:AB:1E:5C:CD:7C:B1:2B
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e5:5f:1e:49:7e:ad:a1:f9:60:3c:04:df:0b:5a:f6:67:30:
fc:7c:f6:f1:10:12:79:75:a9:0a:aa:40:1a:3e:0a:99:95:b9:
c6:16:1f:a7:5f:43:d1:13:b4:49:42:b9:3e:7b:73:88:aa:7b:
a2:23:7c:d7:c5:ba:a5:46:a3:3f:a4:d2:b9:de:47:4e:70:4c:
bb:9c:24:a6:f7:72:f8:94:bf:fb:37:42:67:3f:7e:00:db:9b:
2e:92:6f:fd:3c:40:21:9b:71:1a:de:e5:53:9b:80:b6:06:b6:
63:0c:9c:f1:17:2e:0d:a6:95:d6:26:bd:11:2b:6a:d9:8b:35:
00:0b:65:82:b2:3b:b7:ec:28:b9:8b:55:e8:4a:81:c4:8c:8f:
3f:fa:40:cf:69:81:b7:f4:3d:d2:76:68:aa:df:f0:a0:f9:66:
1c:30:04:27:50:c1:ab:69:4f:bf:c0:47:11:a9:27:f1:16:c5:
95:2b:5e:df:94:6c:e1:d7:c2:c8:23:91:fa:16:29:2c:88:26:
58:a3:43:11:4c:36:df:8f:49:cc:5c:d1:3f:48:60:2d:b2:02:
b1:28:94:1e:5a:72:15:9d:46:c7:a6:f6:00:e7:27:9f:87:4c:
eb:5e:9c:4d:c0:53:12:c3:cb:d5:33:5a:19:46:b2:3c:0f:8d:
27:fc:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:23:15 2025 by rpki-client