Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: SOrwWsACO4GwNtezjG2+pBFXymorMIlZ+aES4TXqUyU=
Subject key identifier: 42:BE:45:2B:AB:1B:CE:9E:21:09:C1:68:D8:8E:90:39:B2:18:A1:68
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 0196BE935C594EB00AD15910F2214C5492FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 09:00:50 +0000
Manifest this update: Sun 11 May 2025 09:00:50 +0000
Manifest next update: Mon 12 May 2025 09:00:50 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: mNosnu2/6gbqSBN6F2TMOMofq2RJgFBYZLCgmT74U9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:5c:59:4e:b0:0a:d1:59:10:f2:21:4c:54:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: May 11 09:00:50 2025 GMT
Not After : May 12 09:00:50 2025 GMT
Subject: CN=42be452bab1bce9e2109c168d88e9039b218a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:56:02:21:e6:06:f3:59:ec:1e:be:ed:7b:
e6:a4:5d:14:dc:28:c5:2f:b7:fd:93:3c:bd:a7:b4:
b3:b9:68:f3:af:98:39:15:c9:9e:6f:dd:4e:09:cb:
1b:94:51:4e:6e:98:82:d7:0f:e7:ff:7e:98:94:99:
d4:36:17:61:13:40:4d:b1:25:78:39:c9:f1:2e:8d:
25:22:13:76:bb:d6:ab:1d:a1:4d:4e:62:e2:1a:f9:
20:aa:34:83:ec:81:ce:b9:32:f5:de:b9:ca:a5:89:
d5:27:b8:78:aa:b0:bd:48:11:c7:3d:66:6a:e1:10:
fc:0e:42:b1:86:08:d1:1b:61:69:d2:ae:e8:da:8b:
5f:a1:c8:53:c4:9f:9d:ed:bd:52:cc:bc:dc:70:50:
7a:27:96:b3:92:88:ab:d4:b5:25:da:2d:01:5b:e4:
e4:d2:5a:b2:38:64:07:69:ff:33:19:a2:7f:05:a3:
5f:7a:4c:79:3e:75:48:9c:b8:08:53:23:d0:fe:76:
38:25:c4:7b:88:86:0e:da:5e:76:cc:eb:6e:18:03:
ab:24:5b:fc:c6:cc:ff:a5:3b:e4:19:86:ae:84:db:
e6:31:18:7d:b3:2f:82:af:7e:18:fc:e8:0f:00:89:
70:f0:42:c4:2a:3c:b2:e1:bc:2a:a1:c1:25:ff:71:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:45:2B:AB:1B:CE:9E:21:09:C1:68:D8:8E:90:39:B2:18:A1:68
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:40:72:c5:b2:90:ea:33:79:76:9d:ad:00:91:40:05:a0:4d:
b0:fc:79:76:5d:62:ff:e5:7b:69:8e:93:eb:d9:af:91:3b:45:
97:62:cb:c6:f9:a3:2d:82:7d:86:92:73:d8:5d:bf:ca:18:81:
3f:f1:a7:71:58:d0:72:72:fa:f3:3c:01:16:21:01:67:32:38:
b2:03:43:8b:6e:6d:88:d9:2f:2f:d4:ad:16:fa:72:c2:bf:9a:
98:cd:65:c1:b0:d6:b0:61:7d:48:67:5d:81:97:8e:8d:db:c4:
f9:5d:6d:22:25:7c:0b:39:c7:8e:5c:ed:c5:11:7b:35:fe:6f:
71:63:05:fc:3e:71:b8:e0:6b:2f:20:70:f4:8c:77:ca:4a:5a:
fc:47:1b:7c:e7:b4:b9:af:72:f0:9c:95:01:6a:2f:66:8d:e6:
cc:5d:e5:6b:2c:6b:0c:d6:16:ad:3c:2b:eb:27:01:a2:6a:8e:
41:27:7a:8f:e6:a5:50:a2:ce:60:1e:37:80:0e:d5:c3:7e:73:
3f:38:c9:7a:e4:c4:ab:97:82:46:e9:54:cb:f4:b3:89:b6:98:
06:aa:23:1b:9c:c1:55:2f:de:d8:b1:86:9d:d2:fd:c3:e9:31:
b2:d2:76:e4:ac:b7:51:86:ba:b4:9f:17:31:80:8c:6d:c7:d9:
e8:72:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:59:57 2025 by rpki-client