Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier: u2WdADBm/VglRSmCJDFYz6rvWdMhsKuM8s4kFZCRLJc=
Subject key identifier: 08:E7:DE:51:C1:04:11:46:3E:36:A2:2A:E5:5A:66:0B:D8:FC:BF:C6
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 0196B2588A6FD4989569C9A52894E726CDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 00:01:09 +0000
Manifest this update: Fri 09 May 2025 00:01:09 +0000
Manifest next update: Sat 10 May 2025 00:01:09 +0000
Files and hashes: 1: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (hash: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=)
2: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (hash: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=)
3: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: ody9YK4xZTbAKYFh2FE5/xckvvTV4RPs3XDDtFKa9W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:8a:6f:d4:98:95:69:c9:a5:28:94:e7:26:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: May 9 00:01:09 2025 GMT
Not After : May 10 00:01:09 2025 GMT
Subject: CN=08e7de51c10411463e36a22ae55a660bd8fcbfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:26:47:d1:dd:d4:09:9e:93:6f:c8:26:1a:
22:4b:3a:24:5d:18:69:84:73:e7:02:f2:84:76:bc:
18:20:5c:d1:fb:f9:b2:16:18:56:97:d0:ef:3e:aa:
ef:ac:93:40:7d:d0:ce:39:03:f7:10:89:94:84:37:
40:81:83:6d:7b:6f:b3:eb:0b:4b:44:70:99:a5:65:
60:93:fb:a9:d3:da:44:32:ac:80:f6:a7:c5:df:a2:
af:90:a3:c4:df:7a:20:25:77:86:d8:f2:6f:6c:a3:
d7:8e:29:63:cd:42:79:e4:00:40:23:c1:95:b0:10:
f1:34:6f:98:4d:cc:ca:cc:ff:00:ec:b3:1e:7b:e4:
a1:b5:7d:3b:60:b3:45:dd:a9:87:13:7e:b7:67:92:
f6:3f:78:9c:b7:94:2b:d2:18:41:c7:8c:7a:e2:45:
e3:a1:c0:b0:8b:2a:40:38:a2:b0:79:42:dc:c7:e7:
a4:8a:e3:f6:7e:e1:c0:45:73:f7:b6:50:eb:39:fd:
72:da:dc:f0:17:44:75:20:3f:58:a1:e8:7d:66:68:
e0:12:f1:43:c5:cf:c9:5b:b5:ed:df:53:13:4b:fb:
2f:cc:3a:60:ec:e5:38:96:05:e6:02:90:88:ae:50:
7f:10:bb:29:88:08:bb:96:87:58:e5:6f:85:f8:95:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:DE:51:C1:04:11:46:3E:36:A2:2A:E5:5A:66:0B:D8:FC:BF:C6
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:99:25:a9:1c:02:dd:b1:8f:5d:c7:87:0f:34:b5:02:f5:
8f:c2:a8:9d:11:fd:5f:03:73:64:2a:69:49:8e:0a:5d:3a:6a:
1d:d3:1e:ad:c1:ce:58:7d:91:ae:7d:04:1f:42:63:f0:de:cf:
0b:18:a9:c0:06:b8:57:14:2f:3c:08:6e:cd:a4:81:e7:bc:d4:
0e:15:50:71:ae:9e:4d:d5:91:ef:e3:f8:e0:42:b4:78:a9:37:
34:ea:16:28:ee:f8:b8:d6:98:f4:e5:af:3c:ea:8b:0a:97:d4:
4c:15:e3:fc:2f:04:ee:bc:d5:76:5a:d6:55:67:f9:01:db:9d:
6b:d2:86:d0:e0:36:8a:eb:b2:11:5f:48:f9:77:03:15:f8:42:
11:b6:a7:17:a6:e3:97:68:ba:52:50:d6:3a:86:61:33:9b:9c:
8f:13:d2:5a:e6:fe:87:10:d5:06:41:c9:07:56:f3:2d:43:f7:
c2:52:a3:6a:c6:d4:5d:9c:00:45:26:67:1e:50:f6:30:c9:a0:
72:ae:eb:3d:b5:26:ef:a3:5e:20:0f:af:d0:bd:51:39:dd:60:
75:9a:5e:fe:f5:ed:6e:10:94:18:c0:93:6f:5f:bd:66:15:71:
bb:37:a5:01:f1:85:a6:d5:e7:79:32:9e:67:61:8c:1a:03:a2:
93:e2:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:48:50 2025 by rpki-client