Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: NedxuCjW9fpGX8jGjGuXIi+SLPn6IHaq7BUlZmw8nE4=
Subject key identifier: B5:AF:E5:72:D7:2B:38:0D:F1:76:9B:5B:1C:2F:49:04:3A:65:E1:9F
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 0196B0D7CA8D054A31F522877CD4E84B2192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 17:00:53 +0000
Manifest this update: Thu 08 May 2025 17:00:53 +0000
Manifest next update: Fri 09 May 2025 17:00:53 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: HRL6U2oTRKLJmtdMgq1CKevPyClfR1LQKiOjwx6aEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:ca:8d:05:4a:31:f5:22:87:7c:d4:e8:4b:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: May 8 17:00:53 2025 GMT
Not After : May 9 17:00:53 2025 GMT
Subject: CN=b5afe572d72b380df1769b5b1c2f49043a65e19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:d8:40:64:ee:79:a0:7a:df:f6:37:30:58:
a7:44:77:dd:da:05:76:ad:68:e1:42:30:c2:d8:69:
32:20:a9:20:19:fd:24:a9:81:d2:35:dd:a0:6b:8b:
9a:03:cc:13:b6:ef:34:fd:9a:d4:3c:3b:86:19:56:
b7:2d:8c:e0:ad:85:7f:36:08:3e:fb:46:55:cf:53:
8b:06:f1:0c:e0:5b:ea:93:9e:68:88:fd:8a:ce:42:
7a:e3:fb:5f:83:4e:5f:7c:d7:8f:ef:b0:81:c8:3d:
a6:c8:98:42:95:a3:43:a8:0b:40:a6:d2:90:ed:f2:
0b:02:42:cc:38:8e:f9:9a:c0:f2:d0:1f:31:5a:be:
bf:29:e6:58:20:50:cc:8e:da:3e:54:84:92:ec:15:
7d:72:08:fc:56:e2:39:e1:37:3f:9f:f1:1f:af:78:
1b:34:d7:a6:06:2b:12:30:9e:86:11:87:40:ac:dd:
3d:5a:8a:dd:b1:f8:a1:94:54:47:52:5b:fc:2a:ea:
ba:72:5b:9c:2d:c9:52:10:5c:7f:5b:f2:69:2c:0a:
0c:22:21:1a:51:70:b9:28:01:b5:6a:d5:86:f1:82:
a6:5c:03:c3:58:d6:06:c4:c0:c4:01:63:a6:12:79:
d0:de:16:a9:ef:62:36:c9:14:af:14:c9:3f:8b:df:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AF:E5:72:D7:2B:38:0D:F1:76:9B:5B:1C:2F:49:04:3A:65:E1:9F
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:ce:48:ac:79:e0:6a:15:b5:0b:db:c6:53:50:92:8e:a3:
c5:02:bf:3e:b5:f4:e6:44:81:87:d8:da:a3:02:38:ed:cf:b3:
23:fa:14:2d:8f:bc:33:27:6c:c9:0c:56:cb:8c:90:9d:9a:39:
05:74:9c:f6:5d:42:d9:e2:f3:47:45:1c:a0:8f:6e:c4:7b:fc:
53:bd:37:ba:b2:1a:2d:8f:46:e3:e7:6f:80:63:b8:0b:7a:cd:
45:15:00:c4:fc:0b:c9:c1:96:eb:47:5a:06:c7:7c:28:14:23:
e3:36:4d:c1:28:07:4d:a0:e9:dc:1e:b0:b3:20:fa:df:55:60:
5e:c2:e0:23:d0:93:ff:fb:84:7c:15:ca:ff:62:6e:67:98:23:
40:af:e9:4d:a0:88:ec:8c:ca:43:ed:1d:b0:ba:6c:55:9c:f8:
bd:60:85:32:fe:bd:c6:bf:2b:95:90:30:1a:d3:53:80:4a:0f:
00:04:e7:92:55:3a:6b:b8:41:13:c8:97:e6:4a:db:ac:15:d9:
d6:2b:fe:8c:d8:dd:0e:e1:27:db:b8:56:20:8f:ab:77:a7:3c:
a4:0d:0b:db:19:1f:c5:02:76:b1:ca:32:64:40:d5:a1:ef:4c:
f5:8e:8f:12:91:fe:78:4b:92:56:d3:d6:55:11:b0:43:5e:fe:
b0:ee:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:03:16 2025 by rpki-client