Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: JT524O7L0Xtkd0qm3XpH/VeHelKp3Vu/6BJg5RFwSds=
Subject key identifier: 80:BC:B0:80:95:9F:1A:E1:4B:5F:BC:4A:AF:EB:2A:D1:80:F1:EB:F9
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 0196C04ACD75129926B7B950A438CC09BBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 03D8
Signing time: Sun 11 May 2025 17:00:49 +0000
Manifest this update: Sun 11 May 2025 17:00:49 +0000
Manifest next update: Mon 12 May 2025 17:00:49 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: tuy7U6hfDyZDOs2bSwwJBuzriC6tTerdcUc36Z36Yb4=)
2: QB5FpuPpmowESfKF6nGgHMXmFsg.roa (hash: 4U84FI9f905V3/Hwf++fcBDHdTLLsUUQSR6ku8lze+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:cd:75:12:99:26:b7:b9:50:a4:38:cc:09:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: May 11 17:00:49 2025 GMT
Not After : May 12 17:00:49 2025 GMT
Subject: CN=80bcb080959f1ae14b5fbc4aafeb2ad180f1ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:20:fd:fa:07:69:2b:65:ee:63:5a:fd:89:
13:2c:ad:25:fd:a0:88:3f:2d:34:ff:2b:0b:d9:e2:
7d:7d:52:8b:a5:e6:05:70:31:14:f4:ec:8a:01:c7:
d6:2a:b9:7f:d0:fc:8f:a4:7b:71:a5:e8:72:86:48:
d6:5d:08:8d:66:ee:b5:1d:a2:b2:8e:0b:97:49:37:
4a:83:25:22:9b:20:15:a2:f0:f4:f3:09:01:d6:2a:
ed:14:c8:5e:9c:ff:0b:a2:6c:1e:75:75:9c:b2:39:
06:26:89:b2:20:ea:4a:1a:65:19:82:d2:0b:cb:96:
68:39:5c:04:f1:29:df:f0:9c:bc:63:f8:17:60:eb:
3f:e1:dc:a3:34:1a:f6:a5:58:cf:b5:3a:98:ec:ed:
a7:2d:98:2b:10:b6:f9:4f:3e:5e:7c:0c:45:53:d5:
75:d0:3e:bc:e3:a2:77:8b:dd:03:74:65:9e:41:a6:
26:f3:c2:c6:fb:76:66:b7:f1:94:6a:57:80:8a:cc:
64:8d:66:50:77:99:a2:1d:2d:2b:1f:7d:cc:79:9c:
de:78:e2:49:b8:fd:82:5b:81:a6:5c:99:95:82:01:
b5:6e:41:2a:62:d9:be:34:21:05:8c:91:24:59:c0:
b9:f8:4a:df:62:bd:ab:ef:77:87:be:b3:6a:36:f9:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:B0:80:95:9F:1A:E1:4B:5F:BC:4A:AF:EB:2A:D1:80:F1:EB:F9
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e7:78:c3:9e:7a:25:be:03:6c:a2:98:fb:b1:05:0e:8f:52:
4d:f7:a0:b2:93:13:ee:05:58:f9:8e:2c:df:26:90:f9:7e:08:
79:c3:ae:b0:43:1a:60:b4:a0:a6:75:ae:33:e9:23:bd:52:eb:
fe:73:c2:98:8a:16:65:4b:34:e4:c7:92:f6:28:ec:5b:a3:5a:
33:41:ea:28:5c:2e:02:69:c9:e9:72:73:98:31:e4:e8:06:6f:
14:f2:79:57:06:87:59:bc:2e:85:34:5e:23:e3:e1:fc:98:dc:
6d:e1:99:03:57:20:2d:c7:01:59:15:e8:eb:5f:35:28:8b:d9:
a4:94:23:ff:19:6b:5c:2d:d8:36:0b:e1:bd:4f:dd:40:3e:ef:
15:34:f2:3f:41:9a:15:22:f7:84:fc:4d:81:75:4a:1f:6f:af:
b1:0b:3a:63:27:7f:a8:03:3f:2e:9d:06:8c:4d:fc:7d:45:99:
0e:3e:33:52:d9:ef:2a:41:d4:da:84:a5:ba:cf:3f:b9:53:98:
21:63:4e:9c:11:29:a4:74:b0:b8:0d:fa:1f:64:ab:4e:5b:98:
bc:80:58:f3:09:0d:0a:49:f0:35:bb:5f:76:65:29:c5:13:3e:
46:a7:de:3c:7e:e1:66:33:91:13:3b:79:26:2f:d0:3f:0d:a7:
95:5a:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:24:48 2025 by rpki-client