Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: xGAxXVWJzEwHyH97uyma+1Mx/0sGkoagcC9VGkcRsDc=
Subject key identifier: 59:5A:C1:46:0F:23:DA:D1:39:C1:B7:2E:FA:34:06:16:38:31:73:F8
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 0196CB72D93AD8B0270C2EB8312CEE07DCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 21:00:23 +0000
Manifest this update: Tue 13 May 2025 21:00:23 +0000
Manifest next update: Wed 14 May 2025 21:00:23 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: fHcQfBn9rE1XYU7LfrFhxFZk7FmH/HGPAg5dQmeX3ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:d9:3a:d8:b0:27:0c:2e:b8:31:2c:ee:07:dc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: May 13 21:00:23 2025 GMT
Not After : May 14 21:00:23 2025 GMT
Subject: CN=595ac1460f23dad139c1b72efa340616383173f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:68:70:30:43:0b:98:71:f4:03:74:c8:9b:
d9:9c:7a:91:e3:f6:8b:fe:ea:cf:e4:fc:ea:a2:b9:
a5:27:a6:f5:af:87:a6:a3:10:f5:5e:db:0c:0f:57:
ab:1c:1e:48:a1:9a:65:a0:fa:57:5a:fd:f0:1d:7c:
f7:11:6e:45:06:35:14:14:1e:92:7b:c9:8f:62:73:
f5:bd:70:e2:4d:fa:97:23:3b:f3:76:a9:0b:b2:67:
62:65:03:78:fe:1e:ce:ba:18:aa:a4:1f:10:b4:80:
e5:4d:2a:c7:2e:5e:f1:68:4a:a2:f2:de:40:25:e6:
c6:9f:9a:73:b5:f9:ff:35:ac:db:15:56:89:33:cd:
7b:16:b7:eb:08:b4:46:54:6c:e1:64:b4:ea:4c:f4:
8b:15:19:ae:a0:42:2f:0d:89:5e:97:50:df:47:dc:
a9:30:28:f0:45:cc:e7:9e:2e:d1:51:00:fc:33:69:
7e:c4:07:67:ce:24:b9:e3:ac:47:9d:b3:8d:d1:e1:
33:90:15:79:2e:47:c3:c8:02:35:7f:a4:4b:ef:55:
64:dd:1f:c8:b5:cd:a7:d1:7f:86:d2:34:90:91:f3:
12:4f:08:88:bd:87:37:cf:8b:7e:5d:49:a3:dd:35:
d5:ef:d1:e2:3b:f0:7e:79:02:23:45:26:76:a3:0e:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:C1:46:0F:23:DA:D1:39:C1:B7:2E:FA:34:06:16:38:31:73:F8
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:29:a2:3a:01:ee:d3:aa:a6:20:ac:a2:53:1b:64:87:99:23:
80:d7:b9:03:32:d9:48:10:5e:cc:78:e0:2f:98:4d:aa:97:ed:
6d:df:f0:e3:72:6b:e9:90:a7:46:08:e7:6c:5a:76:b3:3f:c3:
35:71:b1:28:59:e3:7b:5a:5d:ac:2f:b2:b3:e3:99:b9:1d:d7:
5b:a7:9a:82:eb:3a:90:50:09:03:20:0c:ca:22:0b:2a:ed:bd:
d2:61:2d:2c:f4:d1:61:b7:0f:37:cc:51:d6:f3:44:df:45:30:
ba:89:38:73:51:5d:11:47:a9:8c:01:df:85:83:4b:87:e3:ae:
e0:63:8f:9d:64:6f:c9:af:6a:6b:84:64:1a:db:99:96:b4:e8:
f7:d2:cb:5b:de:e0:a3:41:31:e0:75:cc:ba:46:c3:5e:13:aa:
ce:8e:92:08:e2:72:b8:46:4f:f3:66:78:7d:16:ce:fd:37:6b:
75:6f:7f:bf:ad:21:93:5c:ba:76:d0:8f:e1:a6:f4:64:d3:9d:
55:b5:f4:db:3c:e2:ce:1b:91:fb:a8:d6:62:7d:51:0a:6d:10:
b2:bf:62:24:45:da:1b:67:91:e7:a8:9c:80:b6:b1:30:9b:88:
d0:ee:84:8b:02:30:4d:89:3f:51:7a:11:c1:24:dd:f3:6c:d8:
b2:27:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:57:16 2025 by rpki-client