Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: bnmasS2vntnlCEnJ2NS3KLUbSZpWcfVZgf84WrssLgE=
Subject key identifier: 64:20:78:E0:3B:65:79:37:37:13:C9:60:A8:F0:1F:07:7A:0D:45:6C
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 01969ED0F1E862C10AD0AD8D9E1C6AC5B06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 05:00:15 +0000
Manifest this update: Mon 05 May 2025 05:00:15 +0000
Manifest next update: Tue 06 May 2025 05:00:15 +0000
Files and hashes: 1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: JP+rTFZZ4C+X+YW6iGvpg0PTsbFMtlYUI84Pc9ZNc04=)
3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:f1:e8:62:c1:0a:d0:ad:8d:9e:1c:6a:c5:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: May 5 05:00:15 2025 GMT
Not After : May 6 05:00:15 2025 GMT
Subject: CN=642078e03b6579373713c960a8f01f077a0d456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:0d:1e:97:06:60:9b:20:2b:ea:92:32:48:
4f:51:24:f6:16:0c:57:1a:93:30:99:d1:68:71:26:
e5:5e:f8:6f:44:ba:bd:15:01:16:3e:a6:27:20:59:
bc:0f:54:3b:c7:9e:1c:01:e0:01:93:13:f0:4a:3d:
19:1b:2f:30:c3:bc:61:1e:bb:d1:4f:37:dd:36:59:
cd:c0:7e:07:5b:a3:bd:c2:b1:e6:12:a5:05:39:92:
51:d8:9a:c2:8c:eb:5d:04:6a:94:70:ab:f3:88:b6:
03:7e:88:1f:d4:41:e5:c3:42:a3:49:b6:35:bf:f1:
ba:82:9f:d2:3a:52:77:91:6b:49:81:f1:c6:fb:b2:
b3:0d:b6:3f:2c:a5:7b:b2:3c:e8:2a:cc:43:26:ee:
54:dc:7d:08:9f:79:33:a1:20:38:16:d2:93:fe:df:
bf:f9:a6:b6:51:7b:9f:f2:05:f2:94:56:eb:c4:9b:
16:4c:c5:f0:d9:9c:88:e9:bd:90:9e:20:c7:14:a6:
14:2c:b6:17:24:17:6b:cc:90:79:b2:b9:1e:99:ad:
bb:9c:47:46:d3:e8:d4:85:b5:c5:ca:3b:dd:31:10:
31:de:12:94:c4:c1:59:fe:32:a3:57:2c:33:be:a8:
e4:fb:5b:e4:86:69:43:2e:d1:eb:b2:eb:a2:38:49:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:78:E0:3B:65:79:37:37:13:C9:60:A8:F0:1F:07:7A:0D:45:6C
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7f:e7:c2:a2:4e:be:07:cd:90:3e:85:d3:ce:d2:6c:71:4c:
a4:ae:24:e3:7a:b4:3e:b1:ee:4e:01:fe:e6:72:3e:c7:71:e9:
65:50:a4:9e:5c:3f:37:ff:be:91:31:63:96:bd:ee:25:c1:88:
90:d9:15:63:2f:cc:0a:a6:bb:13:aa:0d:55:d0:f1:03:c4:21:
55:a7:47:2b:33:0c:77:c7:32:95:6e:2d:d3:cb:b2:a2:ac:93:
b3:f5:da:ab:33:d4:73:36:27:9e:b5:fc:96:99:2d:3b:6b:06:
39:e9:c2:37:03:97:f2:26:34:dc:13:69:46:cb:97:9b:cf:dc:
d6:d8:84:0e:0e:ae:02:74:2d:50:7b:f1:70:df:b4:db:39:1d:
fd:d5:a9:c3:08:d5:28:5b:df:41:37:2c:5f:85:86:64:fb:2e:
f7:4c:a7:2f:4f:ad:fe:32:5b:96:b2:eb:e8:6b:b8:2a:13:a7:
ed:cc:1d:7c:5e:31:dd:0c:f9:de:8d:42:eb:6c:6b:dc:bf:ca:
cd:d4:0d:d6:d1:72:10:67:33:91:6b:4c:67:0c:5c:91:86:21:
c7:a8:ce:a1:b4:95:e2:74:cf:df:18:a6:a8:2a:1e:d6:00:d3:
d0:50:25:9d:ac:c7:57:61:a1:cf:7c:62:05:b2:b8:ef:38:42:
98:36:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:20 2025 by rpki-client