Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: oBr3RlMDmsJT8aHlApwBXPl0lECS4kEbwJmLZmp+5T0=
Subject key identifier: 54:BC:41:74:07:6F:37:AB:43:D1:DE:E6:12:F1:79:83:16:F2:F8:6E
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 0196A842F99B3205038A9E31549A4B43E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 01:01:23 +0000
Manifest this update: Wed 07 May 2025 01:01:23 +0000
Manifest next update: Thu 08 May 2025 01:01:23 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: 73wY4kyZFlXNhQvvj7d90qEwUxQ7dEp7LYJYh1xKa9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:f9:9b:32:05:03:8a:9e:31:54:9a:4b:43:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: May 7 01:01:23 2025 GMT
Not After : May 8 01:01:23 2025 GMT
Subject: CN=54bc4174076f37ab43d1dee612f1798316f2f86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:3e:f2:8e:15:f1:5e:70:57:d9:7e:52:6c:
40:2b:b8:d6:fe:53:b2:7d:b8:2b:6d:8a:e5:ec:48:
9e:1a:f4:07:9f:d6:4b:0e:15:98:98:44:99:ad:a6:
83:c9:6b:2e:ce:46:43:49:95:cc:7c:66:65:e1:59:
f9:46:b7:d2:14:31:b8:49:19:82:38:f9:3b:18:26:
5e:57:e6:3f:2c:6f:18:8f:2a:76:75:07:65:ae:82:
2a:a1:9c:0b:76:9a:de:1a:50:40:21:55:5c:c0:65:
37:89:27:eb:74:db:b8:a9:67:a7:63:52:d7:5e:48:
8a:9c:5a:a9:af:74:b4:08:39:96:cd:50:67:7c:5d:
40:43:60:5f:49:50:b3:20:bc:af:d4:3e:ba:c7:12:
13:4c:b3:99:bc:08:a2:b9:3d:77:92:4c:a2:2c:51:
2d:83:79:07:7e:01:7a:10:e9:02:1e:cb:bf:dd:e1:
09:03:53:54:52:78:7a:53:4c:36:7e:fb:cd:69:c7:
86:75:e8:8f:7c:bb:a2:8c:f9:e6:3f:91:d3:77:2f:
b7:e3:06:ef:f6:17:8a:93:01:e9:d8:93:5d:d7:45:
ef:cc:9c:6e:cd:d3:bc:98:b5:d5:96:e7:9e:7c:55:
1a:39:37:72:7c:3e:06:78:4c:b4:08:7e:8c:cd:87:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:41:74:07:6F:37:AB:43:D1:DE:E6:12:F1:79:83:16:F2:F8:6E
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c5:1a:84:f0:ea:1d:05:dd:c2:f8:60:f3:21:8e:bd:df:a2:
52:db:62:5c:9d:18:44:de:81:03:0c:31:48:d6:cf:a8:89:05:
9c:2e:a3:82:86:11:0d:e1:78:45:42:39:b3:06:4f:55:79:0c:
3b:a7:c1:88:53:5d:c8:c1:32:6e:30:d2:73:3f:c4:fb:f8:58:
16:86:6a:9d:90:71:a4:fa:6b:dc:44:78:24:c8:5c:a8:3b:27:
88:92:c1:1b:19:7a:7f:82:36:25:30:43:d6:e6:5b:82:6e:a6:
8a:ba:c9:d9:0b:1a:c7:7a:be:56:0e:af:02:1c:80:69:64:79:
fd:d5:fb:dc:e3:9d:a1:21:61:41:53:a5:e4:2d:57:4d:ff:0e:
2b:ba:d9:cc:fb:15:c9:22:90:3b:d0:eb:31:6b:f1:b7:74:c5:
02:dd:28:d5:ae:7e:05:2c:9a:d0:8e:1d:92:b1:c2:13:22:c1:
d1:75:da:0d:1e:32:65:bc:6a:96:ee:1a:87:24:02:2e:3d:9f:
ba:d8:86:60:85:9c:08:c1:df:e5:21:be:05:6d:71:24:80:00:
aa:b4:21:4a:7d:93:e2:a5:ff:4a:92:9e:91:54:2b:a8:1d:67:
72:b1:c9:35:7e:86:9a:20:39:9d:e4:e5:11:cf:a6:6a:4d:24:
ea:d1:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:30:15 2025 by rpki-client