Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: qOLMbD1mFfw9soFh2v/ctHgxA+Ank+DJj//7WTui0t4=
Subject key identifier: A9:FC:4F:B4:0B:FD:FB:1F:51:13:8A:C7:DB:77:F0:8A:77:AB:CA:C0
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0196C8A8FDF535BAF80498D114C8EABFD016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 08:00:40 +0000
Manifest this update: Tue 13 May 2025 08:00:40 +0000
Manifest next update: Wed 14 May 2025 08:00:40 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: gdBhzake56JqzlTjAqVX/ut4NrOG2vVZSRLMayk1xSs=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:fd:f5:35:ba:f8:04:98:d1:14:c8:ea:bf:d0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: May 13 08:00:40 2025 GMT
Not After : May 14 08:00:40 2025 GMT
Subject: CN=a9fc4fb40bfdfb1f51138ac7db77f08a77abcac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:95:1f:46:c4:59:5f:83:e9:22:3a:10:41:
c3:2f:c2:6a:4b:70:e2:35:59:82:42:c6:10:ba:df:
f9:c6:8f:90:3e:eb:3e:58:ea:86:a9:53:56:68:47:
22:81:6b:c7:2d:d4:e7:bc:c1:82:3b:34:1a:36:4d:
2a:7c:78:27:10:5d:83:72:9f:a1:ee:0c:60:8c:88:
9b:c0:54:72:5c:40:86:52:d2:9e:71:b2:b7:58:94:
79:36:77:7d:10:97:59:87:cd:75:b6:44:bf:47:0a:
fd:25:c3:eb:ab:33:2b:25:bc:4e:a5:e1:1a:91:fc:
4a:78:2f:2a:23:76:cb:3f:bc:4c:c9:c0:4a:a2:7f:
b7:d0:58:06:47:7f:75:62:6b:af:60:5b:36:37:43:
19:a4:c9:69:ff:97:d9:5b:a6:6b:98:6a:71:bf:5e:
db:35:49:4f:28:c1:dd:a0:11:32:1c:26:d3:9a:4f:
be:da:c5:e1:94:05:96:0b:bf:96:fc:d3:1c:9c:12:
d2:47:dd:4e:47:df:be:23:7c:99:7c:86:f1:23:3e:
64:06:5c:e0:29:59:09:8a:e3:f9:96:16:f3:a2:b0:
f2:54:87:17:46:4b:12:34:ca:3a:95:a9:7e:4c:8b:
bc:e6:fd:b5:aa:5b:d6:6b:66:1f:ea:11:8c:3b:6c:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:4F:B4:0B:FD:FB:1F:51:13:8A:C7:DB:77:F0:8A:77:AB:CA:C0
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b1:dd:00:80:f3:b7:14:1f:59:af:c3:b5:ae:52:f4:8e:b7:
be:2d:c9:d2:a9:9c:39:dc:36:b1:ef:be:5f:02:41:74:1a:13:
50:8c:62:31:96:9b:bd:bf:13:9c:41:a4:ad:af:a9:0d:c8:6a:
4a:cb:1a:03:42:ae:ad:54:cb:18:89:1a:cd:7f:66:6f:30:2e:
fb:58:53:24:32:69:9f:f2:22:f7:81:11:58:ea:43:11:ff:f9:
77:da:13:c6:41:e2:9d:f8:26:bc:11:0b:f8:16:d2:49:46:10:
b4:7b:f3:65:29:2c:43:28:a3:dc:54:d0:43:71:07:b2:bd:36:
e3:ad:41:a5:80:77:c1:62:5b:83:43:3b:73:0e:92:ab:ee:53:
66:01:b6:94:28:07:ec:c1:4c:d9:fd:19:9d:98:44:ce:3f:9d:
01:d1:84:ae:6b:b5:b3:66:14:35:bc:c4:15:a2:e9:fa:a5:56:
84:03:59:17:4b:58:0e:ab:d7:9f:01:70:1b:33:75:44:86:cf:
0c:7b:05:f9:2e:3a:ab:95:02:ab:fa:2d:da:92:0b:90:59:b4:
e5:81:f9:2d:70:3e:96:fc:b0:d7:0a:1a:ec:80:48:1f:db:4f:
69:f4:bd:49:1a:83:54:6c:b4:b5:a8:bc:d9:14:a4:fb:24:28:
3e:f4:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:32:05 2025 by rpki-client