Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: GXLl6bvZrrZy9qCXXGQzpW5QavmOfox17AJR4CY3Kxg=
Subject key identifier: 51:A4:50:52:40:FB:40:65:17:9A:F8:E0:ED:9E:6A:97:3D:F2:C8:72
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 0196B7EC853212C1A1CE8FD32237932DDA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 02:00:53 +0000
Manifest this update: Sat 10 May 2025 02:00:53 +0000
Manifest next update: Sun 11 May 2025 02:00:53 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: x/V86joKkQgi/r7hNVTyfXrveqT58PCuIYIItsdqOSQ=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:85:32:12:c1:a1:ce:8f:d3:22:37:93:2d:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: May 10 02:00:53 2025 GMT
Not After : May 11 02:00:53 2025 GMT
Subject: CN=51a4505240fb4065179af8e0ed9e6a973df2c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:f2:41:2a:c5:83:88:f2:c1:38:13:7f:66:
24:fb:e2:fe:d0:8a:4b:98:52:5f:6d:ab:60:0c:4e:
4d:b1:e6:26:98:85:42:f0:05:f2:b2:ec:fb:18:66:
9a:db:99:09:a8:81:d6:00:9e:cd:99:78:b8:fc:31:
05:19:19:62:ac:fe:ee:8d:53:eb:34:0b:fe:05:6c:
b3:22:fd:7f:aa:d7:f5:9d:29:23:44:b8:2a:fe:97:
f3:aa:62:c0:c3:b6:b6:e2:ec:ec:e9:be:f6:68:71:
e5:fa:86:df:c2:72:2c:11:43:cb:bb:c6:c1:c3:b0:
5d:b5:8f:0d:d0:92:da:5a:bf:18:17:12:6c:dd:57:
c9:b7:a0:48:50:44:71:fa:84:0e:2d:f7:ec:bf:d5:
5d:ef:29:e0:ac:41:40:d8:47:6a:ec:fe:89:6e:cf:
ff:d4:eb:14:79:3a:2f:5d:bc:a8:e6:10:86:d3:10:
28:6f:80:cd:4b:28:cf:64:05:c5:e7:c7:12:bf:95:
9d:f9:cc:fc:63:d7:5b:61:36:9b:ac:c8:cf:94:77:
52:c6:9f:0d:68:64:91:c4:93:b5:ad:91:a6:06:78:
d0:69:d2:f9:1b:f6:55:1c:b0:af:4f:ac:dc:e1:1d:
00:7e:6f:9f:ac:ed:d1:df:58:51:85:43:4b:91:e9:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:50:52:40:FB:40:65:17:9A:F8:E0:ED:9E:6A:97:3D:F2:C8:72
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:09:08:da:39:81:6a:be:99:18:c4:63:ee:da:e8:5c:eb:
9d:9b:f5:4c:1c:47:fe:80:57:47:cc:74:4f:82:1e:a0:1c:9d:
e4:78:8a:e6:94:47:fe:b7:cb:4f:81:94:55:f7:18:c4:36:b6:
53:b5:25:df:5b:63:20:9a:16:78:28:56:0c:da:f0:27:87:81:
f4:e7:73:42:55:5d:ef:19:ac:39:52:7d:e1:90:2c:b3:ac:de:
ae:33:29:8a:07:91:92:13:50:bb:e5:11:9a:55:06:53:2a:52:
8a:48:7d:4e:55:e2:10:ea:28:3d:05:37:47:f4:ef:df:c3:cd:
dc:04:3b:eb:7b:3e:0b:78:cc:b0:48:e1:c8:a1:4f:8e:8e:a4:
eb:e4:dd:ad:6f:fd:4b:d6:0b:3c:71:91:a2:b9:79:5c:92:be:
e6:38:75:ea:1e:0b:61:f7:0e:24:b4:6d:ea:de:e1:21:4c:0a:
bb:84:40:6f:ec:63:33:4e:07:2f:6c:d3:d5:89:54:df:6d:a0:
15:21:a6:55:c9:20:89:0b:89:e9:aa:62:92:6e:d0:8d:87:fc:
1f:d6:80:c9:b9:a5:3e:e4:82:f8:6e:0c:ee:86:a1:56:58:4b:
14:58:1e:a6:64:f3:15:42:24:8a:34:c3:b1:d7:2f:ed:20:15:
97:51:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:40 2025 by rpki-client