Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: GWUvFCmZaxO5BcZcHDhK7sJZ4lGwUjwYA3xqnK9f8uM=
Subject key identifier: 33:E2:45:E2:24:9A:AB:9D:ED:2C:11:2D:D8:C6:51:19:E0:CB:F1:F0
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 0196C0B8C1216F6F7DA5C3FB49BFC1DE73FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:55 +0000
Manifest this update: Sun 11 May 2025 19:00:55 +0000
Manifest next update: Mon 12 May 2025 19:00:55 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: 6r7CzeaaDrMDNrgLF5t0hd4eETzKJ+MJYOK3PGIrMa0=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c1:21:6f:6f:7d:a5:c3:fb:49:bf:c1:de:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: May 11 19:00:55 2025 GMT
Not After : May 12 19:00:55 2025 GMT
Subject: CN=33e245e2249aab9ded2c112dd8c65119e0cbf1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:69:23:c4:22:5a:90:5a:33:f4:6f:4c:8a:
2f:c4:78:dd:e3:a6:8c:e3:3c:92:9f:8c:de:c6:89:
51:7c:d2:13:e9:9c:53:3a:67:3c:b3:37:07:d0:22:
df:de:06:fe:5a:24:01:d2:a7:ed:62:c5:20:a0:4d:
d3:74:fd:03:81:8e:81:79:dc:17:d9:b8:28:df:a0:
3d:35:40:43:ce:eb:bb:24:0d:71:5e:a2:af:49:f2:
81:d0:d6:78:ea:d6:3a:55:f7:db:69:87:68:23:82:
a8:cb:9f:00:02:12:86:74:08:cf:63:31:73:e8:02:
63:cb:dd:a1:d0:62:20:69:e8:3d:5e:90:43:49:c3:
92:14:ab:eb:d9:f5:89:fc:7c:29:82:3e:21:a2:29:
05:d9:2e:db:80:9c:03:eb:f5:b6:13:8d:2f:d5:6d:
08:b7:52:a2:32:fd:9b:c4:7b:6e:c1:5e:83:52:14:
00:2e:48:1e:58:f2:68:d2:3d:fb:96:31:ee:2b:85:
21:ba:cc:e1:9a:fa:5b:64:e8:20:63:c6:8f:90:fb:
1e:a7:c2:03:1f:3b:07:45:80:fd:e5:1e:ba:63:e8:
75:13:e6:1c:e7:1b:19:d5:8e:dc:9f:9d:b6:d0:c5:
90:3d:42:8c:7a:91:6f:a4:00:38:bf:04:e2:0b:c6:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:45:E2:24:9A:AB:9D:ED:2C:11:2D:D8:C6:51:19:E0:CB:F1:F0
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b8:db:cc:ed:0b:3d:40:cc:7e:aa:33:0d:dd:0e:0b:18:45:
b7:34:23:fc:24:0c:49:18:a4:27:3a:dc:24:25:36:da:14:05:
61:c0:e0:72:03:13:b1:23:69:16:8c:fc:dd:28:02:cb:03:f0:
e0:6c:13:da:ea:8f:20:1f:ae:2f:6e:78:9a:fe:b3:40:db:a0:
46:b3:4e:a2:c7:c4:21:81:98:b1:1b:11:77:51:ce:26:53:87:
38:e3:b5:24:2b:ed:1f:b0:c4:a3:07:10:80:92:e1:7d:ce:ac:
56:f5:e4:d8:db:1d:f4:77:3e:09:bf:60:a1:bf:6d:f8:9f:35:
68:99:e0:61:28:c6:bf:59:47:4f:78:47:1d:09:62:8c:f3:8c:
4f:7f:0b:ce:05:0f:4b:d4:e4:09:ad:cd:a5:d1:6b:94:30:0e:
8a:a9:9d:41:52:7a:a8:2a:e4:88:41:7a:57:59:33:68:ed:64:
4b:8b:f6:74:1f:6e:ed:30:a9:2c:7b:06:14:e6:e8:2e:28:97:
f9:2d:84:27:96:35:d3:9b:ae:8f:27:e0:0e:19:0d:aa:85:cf:
9e:b3:50:41:d2:0c:4c:02:fc:2b:8a:fe:4e:1d:11:10:98:91:
b7:27:9d:6a:d5:64:c8:09:cb:a0:b3:35:ab:4d:2c:4a:c0:08:
7c:db:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:41:20 2025 by rpki-client