Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: 0pLlKTmzvwabkSG6H7P4zxVD5r5lISB/o4HwSQnTDDQ=
Subject key identifier: 1B:DF:43:1C:95:F2:07:C5:94:A2:45:19:67:CA:E1:8C:E5:79:A9:3D
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 0196B0D743B0774F3EABE6B9BCA208EB7122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 17:00:19 +0000
Manifest this update: Thu 08 May 2025 17:00:19 +0000
Manifest next update: Fri 09 May 2025 17:00:19 +0000
Files and hashes: 1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: 8PwHDAi4VdyT+rjZWEBtgjUgUZA/LZKZiX47ACVcvRs=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:43:b0:77:4f:3e:ab:e6:b9:bc:a2:08:eb:71:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: May 8 17:00:19 2025 GMT
Not After : May 9 17:00:19 2025 GMT
Subject: CN=1bdf431c95f207c594a2451967cae18ce579a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:d9:38:08:21:26:c8:11:56:a3:75:78:eb:
a8:bd:4e:96:9b:1a:35:22:5f:91:b9:f3:a4:bb:2e:
5f:de:50:9d:49:d0:6c:f5:93:54:54:56:58:e1:95:
4e:b1:7a:d5:f6:bc:5b:a6:52:57:26:1f:89:60:33:
88:8b:0d:58:bc:ec:52:d5:9b:0d:3d:0e:48:5e:36:
e5:39:c9:fd:01:14:06:cf:e1:b3:50:66:ed:6a:63:
11:4f:dc:4f:8a:fc:21:96:05:47:79:63:66:60:57:
0f:41:b3:19:cf:c1:d0:b9:f3:00:68:ca:0e:f6:53:
da:62:cf:92:24:9f:7e:cf:ec:91:0d:e8:3e:8d:14:
87:99:3b:5c:c8:bc:2d:d7:a3:f7:10:43:52:dc:75:
a5:d5:0c:89:af:1a:aa:a1:44:4f:68:7c:c4:39:71:
13:1d:26:5d:49:5b:cf:5c:f4:d4:e5:aa:80:fc:5b:
5f:ea:fa:32:45:87:17:5a:96:39:05:df:bb:05:d8:
d7:db:d1:de:9d:26:a1:68:bd:d4:b6:e6:b1:e3:ba:
56:f6:29:64:9d:09:7d:25:04:bb:4a:ab:f8:32:3e:
ba:3f:bb:17:f1:72:01:e4:a3:b1:ee:63:ad:c2:ba:
e3:10:6f:a3:2e:4b:5b:68:23:94:d6:9c:ec:0d:8c:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:43:1C:95:F2:07:C5:94:A2:45:19:67:CA:E1:8C:E5:79:A9:3D
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:53:d6:eb:d6:b8:ab:64:c9:2a:f4:8f:c1:6c:0e:cb:76:7a:
7b:fa:d0:f4:f8:3f:5a:5b:fd:5b:55:c9:cf:43:12:71:32:2d:
9e:a2:c1:81:7e:31:26:c2:b6:e5:22:80:64:44:69:ae:be:80:
22:52:8d:6e:39:5e:75:7d:09:88:9d:a3:b2:95:c1:9b:ce:da:
32:df:8c:40:b7:e3:0b:e7:45:7b:2c:37:13:dd:c6:21:9f:37:
66:a4:56:7d:dc:1e:47:8f:05:b4:cb:35:18:86:47:a5:02:cc:
3a:13:84:2c:a0:8e:7d:5e:c3:0c:f3:9d:dd:2c:d6:de:25:64:
0b:57:ec:80:2d:65:a5:87:17:43:82:68:05:09:2c:72:35:da:
65:76:2a:b5:4f:f0:95:b7:70:6d:cd:96:7c:e6:65:b4:87:ae:
93:e9:3e:dc:71:f2:c4:de:a7:83:c1:e7:08:bd:3c:80:91:b4:
8b:70:ef:39:47:a3:9b:7d:bf:fe:8e:ac:68:bf:70:7d:c5:ca:
8e:00:b4:cc:7c:13:7d:d1:85:27:92:d6:6a:57:f1:bb:e8:4e:
4f:62:9b:e2:4e:f3:45:75:44:d0:3f:04:66:32:f6:f6:7d:8b:
31:b4:bf:84:81:02:c0:d0:90:13:a0:51:98:d3:ef:26:13:c5:
b3:f6:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:04:02 2025 by rpki-client