Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: Fzgb5cdk0H97yT580NZp/friomYXA7hRnS6uE1pNuto=
Subject key identifier: 52:3C:14:90:12:45:08:F0:85:99:B1:6A:5B:8B:40:2C:13:13:3E:49
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 0196DAE64B3AC18B4F8CE7D64345F6E4C080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 148A
Signing time: Fri 16 May 2025 21:00:47 +0000
Manifest this update: Fri 16 May 2025 21:00:47 +0000
Manifest next update: Sat 17 May 2025 21:00:47 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: mThVGH+thucsWE2FvxmO/x/8QUqGH2smdsm5O0kvXHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:4b:3a:c1:8b:4f:8c:e7:d6:43:45:f6:e4:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: May 16 21:00:47 2025 GMT
Not After : May 17 21:00:47 2025 GMT
Subject: CN=523c1490124508f08599b16a5b8b402c13133e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:46:67:9a:98:c0:99:83:c4:8e:e1:50:4b:
67:16:bc:14:33:4d:9b:5b:81:87:5b:7f:de:86:7c:
9e:21:64:af:d0:b4:fe:7e:ff:28:d0:6d:6b:8f:1d:
a6:cf:a9:b6:dc:ed:e5:1c:3b:70:da:bb:64:90:1e:
5d:d3:b4:89:bd:b1:ee:85:b8:03:c9:ed:01:53:fc:
c1:e6:fa:6a:d9:78:8e:1c:66:18:d1:7b:de:d0:d3:
42:5b:26:52:ee:ea:38:46:84:a3:68:32:d7:f2:28:
b0:ec:bf:8d:8d:ee:1b:c9:bd:5d:5f:f4:31:bc:8f:
d6:0f:77:ae:c1:89:37:e9:0a:27:34:f3:a5:1a:50:
07:9e:ed:5a:60:94:a3:e0:34:fd:14:9e:bc:04:1b:
3c:68:8c:5e:ca:0a:7a:3f:f5:6a:ac:0b:4d:b0:9f:
0e:d4:8f:53:7f:39:49:1c:f6:fc:68:2e:6d:09:1a:
b2:63:4a:61:0e:f9:e4:13:aa:24:25:02:ac:a7:a7:
ab:ee:16:93:44:da:38:c6:13:12:f0:34:82:c7:0f:
1c:68:58:1c:3b:04:73:c4:5a:c9:fd:bc:97:3f:8d:
94:dc:d4:f5:3c:a5:62:55:5a:c6:a1:63:53:77:5a:
cf:10:0a:5b:56:ba:2c:72:0e:32:1b:07:38:49:03:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:14:90:12:45:08:F0:85:99:B1:6A:5B:8B:40:2C:13:13:3E:49
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4f:c7:b7:0f:d2:f1:bd:10:64:6b:fa:e8:4d:09:6c:e9:d2:
83:85:91:3e:d9:c0:71:12:8b:2e:81:8d:33:72:2d:a6:b8:04:
09:ee:59:74:f7:1a:12:9f:97:cd:f7:d0:fb:f2:71:8b:99:c8:
6d:81:ad:dc:22:88:38:ef:94:f0:08:5c:18:fd:53:f4:18:ce:
ca:cc:38:e1:48:2f:68:af:25:03:5e:11:48:72:13:3a:3e:24:
97:80:96:70:09:76:e4:2e:36:ff:0c:ea:e5:f9:cb:34:9f:5f:
9f:3c:d0:7e:08:f7:0d:96:27:cd:88:da:1d:a2:42:97:4d:b5:
a9:4e:f2:96:46:00:81:99:3a:23:01:a6:d1:1b:f6:9e:2b:1f:
b9:f5:d4:1b:19:05:2c:08:2d:76:75:63:cc:cd:d8:63:35:d5:
9a:c8:d1:91:38:92:a3:30:95:bc:2b:89:7e:7a:94:0a:1d:78:
d9:a2:a6:e5:49:ff:b3:b6:08:3a:99:66:ce:6d:ec:56:be:6f:
4f:f1:a3:40:b9:6d:be:6d:c5:de:32:ee:ce:45:50:2b:ba:c1:
68:2a:0f:42:3c:ef:a5:d3:ae:49:ae:e6:15:6a:1e:d5:e9:8d:
f7:e2:2b:c6:b4:56:24:84:a6:7f:5b:c6:25:9e:e8:9a:99:d9:
88:43:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:20:29 2025 by rpki-client