Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: pz0bHPEpUVJU0mX3yWE4snVXXwkD6J3kBPWEUSvOzq8=
Subject key identifier: 5A:2F:D7:89:01:94:D1:5A:0C:94:CA:79:14:3D:CC:70:F1:AE:46:C7
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 0196C7CD27F745A526CE8D77293F9FA9ADA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 04:00:33 +0000
Manifest this update: Tue 13 May 2025 04:00:33 +0000
Manifest next update: Wed 14 May 2025 04:00:33 +0000
Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: /iGfE01l01jnEw0XTO2JW3XU9bo2GxKWVae0+Zg0nto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:27:f7:45:a5:26:ce:8d:77:29:3f:9f:a9:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: May 13 04:00:33 2025 GMT
Not After : May 14 04:00:33 2025 GMT
Subject: CN=5a2fd7890194d15a0c94ca79143dcc70f1ae46c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b0:1c:a3:ff:b3:92:f0:d6:9b:21:4c:e2:cd:
aa:e0:8d:7e:d5:97:c0:d4:bb:0a:05:b4:2d:81:ef:
24:54:59:b0:b9:48:82:1a:74:1c:81:22:a8:a8:f7:
8f:8c:59:80:55:2e:ed:4a:88:e8:9b:d8:b6:61:31:
5b:e1:da:59:d5:e4:13:97:43:c0:1a:f7:fb:e5:e3:
88:cf:9d:37:fc:1a:6d:a6:f7:8c:d6:6c:ef:00:c2:
f2:da:d1:59:3e:f7:97:b1:69:92:96:74:ea:db:0a:
cf:81:5e:32:e6:1e:fa:eb:f1:a2:da:c2:2f:22:00:
47:0e:ed:46:a8:92:ee:a9:84:3c:9b:fd:b9:8a:49:
02:93:4d:39:6b:e4:a9:77:be:28:39:64:70:bd:a8:
93:f5:80:21:52:7c:d8:7d:ca:ac:8e:ab:c0:67:4c:
eb:fc:61:80:a6:d1:47:1c:48:2b:f1:e5:01:01:74:
9e:e5:8f:94:44:70:c2:c1:79:89:9a:eb:f3:98:ba:
ce:04:e2:8e:4d:26:eb:2a:b0:3b:a1:84:19:f1:9d:
83:f0:c3:ce:55:7d:49:24:77:be:fc:fd:2d:ff:3a:
02:ec:f6:5d:33:bf:e6:22:2d:1c:48:61:32:e8:a9:
22:f3:9d:79:d1:ce:64:66:46:bd:f6:35:ca:1b:cc:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:D7:89:01:94:D1:5A:0C:94:CA:79:14:3D:CC:70:F1:AE:46:C7
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:54:15:cf:84:ed:84:44:7a:0f:44:c6:58:cd:38:7c:bf:
e1:7e:9a:8d:5f:99:21:86:b0:9c:33:75:f0:d8:ff:1b:39:81:
95:9b:4d:ab:5f:53:be:ea:a7:9e:81:10:f7:e4:d3:48:51:52:
31:0e:5f:2f:55:07:d2:b5:ab:53:f1:a3:d8:a1:a7:d3:bd:01:
7d:88:fa:f9:e3:41:d3:fb:b5:2d:ae:2d:98:7f:1e:6d:a1:d5:
25:b8:4e:3b:85:95:09:4e:b4:dc:f0:4b:a1:ac:6f:84:17:3a:
ba:fd:7f:e7:c5:86:b9:3a:f7:a3:07:3a:dd:4d:1a:e6:3c:b9:
bb:97:68:77:64:87:bb:f9:c8:13:2f:cb:8b:19:00:a7:ef:bd:
28:c3:de:0c:80:51:af:87:ad:d9:f1:48:d3:40:29:a0:ce:16:
77:8e:bc:1d:5d:ad:a8:3b:d2:76:c7:77:28:71:63:53:3d:f0:
aa:8e:e8:36:8c:9c:30:da:42:20:62:ea:90:03:9d:3a:72:ed:
48:00:e8:4f:a7:ec:99:9a:41:14:16:06:73:8e:e1:93:ae:e7:
6b:46:24:e5:a7:e9:88:3c:18:d5:89:d7:9f:61:70:37:72:b9:
84:b8:89:14:c0:03:06:bf:dc:65:bd:4d:cf:2b:3d:f4:00:05:
83:64:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:12:24 2025 by rpki-client