Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: Fm0hBVogsTkg+eyJgUNM6j02tuiP632rdO1R1cXMM/Y=
Subject key identifier: A4:A8:F8:34:C4:BF:C2:A4:29:C7:27:62:2E:15:61:45:31:19:3C:AB
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 0196A5783E8D6AC1D8A99BD9A4996BF4BC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 152F
Signing time: Tue 06 May 2025 12:00:42 +0000
Manifest this update: Tue 06 May 2025 12:00:42 +0000
Manifest next update: Wed 07 May 2025 12:00:42 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: cRt6gMAV+HdIeiUrvB1zMx3Q0WVbzg0Ornk5K+q5dwE=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:3e:8d:6a:c1:d8:a9:9b:d9:a4:99:6b:f4:bc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: May 6 12:00:42 2025 GMT
Not After : May 7 12:00:42 2025 GMT
Subject: CN=a4a8f834c4bfc2a429c727622e15614531193cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:29:66:63:bf:11:36:0d:bb:f9:9c:1e:17:
1e:ee:67:bd:c7:36:8c:66:90:f0:12:ea:22:38:84:
af:ae:99:01:2b:a4:6d:fe:52:22:7f:24:99:31:23:
a4:84:c2:a5:a6:b7:7b:bb:0a:16:5e:f3:98:4c:bc:
98:63:42:d7:43:1c:f3:9c:52:3d:6a:80:02:19:20:
38:73:70:3f:c5:e0:62:c1:77:0f:d8:53:ff:73:bb:
06:77:1e:44:7f:22:cd:61:bf:43:2b:2d:17:c4:e3:
e4:6e:41:42:de:69:96:d4:12:37:f4:d1:c7:aa:12:
4b:ff:c7:c7:b3:49:ba:18:8d:8b:9f:d4:cf:4f:42:
04:62:df:ac:f7:4c:79:31:76:be:3e:e2:53:16:ce:
76:f8:3b:c5:e3:09:b1:7c:59:6c:a7:3b:eb:4e:de:
6e:8e:7f:58:7f:df:ee:94:64:f5:e7:13:03:66:95:
92:9a:47:cc:85:72:39:ab:8f:a0:a2:ec:59:cb:15:
f8:c9:88:ff:a0:d6:ac:5d:db:3c:a1:e6:2d:07:c0:
e5:6a:de:4c:c6:61:95:9a:99:b8:b6:5a:bd:76:7a:
aa:89:73:7e:83:82:a7:c9:d3:0d:c1:d2:c5:bd:db:
3b:5c:50:7e:7a:18:31:f7:7c:ba:3e:73:dd:54:1c:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:F8:34:C4:BF:C2:A4:29:C7:27:62:2E:15:61:45:31:19:3C:AB
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:ea:fc:2f:c4:bd:b6:31:f0:06:7a:74:3f:3e:a2:6b:9d:
3a:89:d4:4e:1f:d2:64:b5:32:0a:4e:b8:f0:2d:9f:76:3f:ce:
bf:02:70:1e:0c:6a:81:9e:12:62:43:7f:52:f4:ca:52:6a:ab:
68:59:f7:f5:f9:ca:aa:c6:78:62:c7:25:72:2d:a7:9d:34:4f:
8e:d2:3e:32:c3:32:d4:6b:19:e6:0c:99:02:c4:42:fa:2e:36:
15:05:54:3a:f2:79:22:17:5b:a3:53:6d:94:ed:3c:21:8c:4f:
98:24:51:8b:05:79:bb:78:e0:3d:38:7f:f9:d8:e5:11:2c:88:
63:45:ce:74:b8:aa:7b:7e:ec:7d:f7:cc:98:83:d8:f0:6c:e3:
b9:fc:9a:9b:2d:e0:88:76:88:2b:aa:f3:ae:b0:97:cb:3e:45:
89:e4:94:92:c3:43:ef:3b:c4:0a:80:e9:8d:d4:0c:6b:3e:36:
2a:98:4c:c6:44:3b:1e:dc:29:6f:95:c3:5c:e8:08:f4:ba:28:
45:d6:9a:12:7f:37:f8:cf:cf:d1:0a:0e:10:51:d4:85:bf:e0:
6f:d6:85:e1:5c:64:55:f7:b7:9c:7b:65:43:c8:8d:6a:45:33:
4e:d8:e3:33:e2:65:4d:b1:c0:5f:e8:54:1c:0e:8b:a0:de:91:
b6:e0:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:20:57 2025 by rpki-client