Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: 1nblyNd7EhySjG7SFQGua5kNISr6h1GMH7WdRCstUbY=
Subject key identifier: D7:DF:C4:BE:D0:28:92:69:2C:D2:D6:36:AF:45:B0:78:7A:9D:5E:09
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 0196C8721544783A7A2D1F1F568E00A3649A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 07:00:41 +0000
Manifest this update: Tue 13 May 2025 07:00:41 +0000
Manifest next update: Wed 14 May 2025 07:00:41 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: fkVmBgF+xRN1aIHuLWqL0HL5UVW4ELSJ4AwkLe5rvKk=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:15:44:78:3a:7a:2d:1f:1f:56:8e:00:a3:64:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: May 13 07:00:41 2025 GMT
Not After : May 14 07:00:41 2025 GMT
Subject: CN=d7dfc4bed02892692cd2d636af45b0787a9d5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:99:f3:bb:5c:dc:92:4b:2d:76:f9:f5:c2:
19:e8:74:3d:95:4e:d5:b9:22:c8:dd:a2:4d:a6:20:
64:a7:6f:bd:25:c9:a7:74:a5:52:36:9b:79:9f:e6:
cc:54:1e:74:8b:1b:1f:32:c4:fb:b4:4a:91:b2:7a:
4e:72:83:42:d0:c2:37:6f:ca:db:89:d4:36:44:98:
4f:c8:11:32:43:d1:a3:80:0f:c4:df:84:f4:e5:1f:
55:b3:5a:96:80:da:6b:95:5a:ec:b0:33:a0:07:e5:
67:ef:f4:8a:32:4c:2a:91:d7:90:8d:fc:1e:13:28:
e7:18:4c:c8:c2:f0:87:8c:dd:7c:35:d8:d7:4d:79:
df:b2:0f:b9:3a:2a:33:3c:29:92:85:2c:d8:01:69:
fc:b9:8f:ea:65:57:20:a5:a2:f6:da:b3:bd:27:e8:
06:95:f2:b6:45:71:06:31:a8:0b:42:98:be:1d:d1:
73:79:94:95:0b:ca:91:2f:42:73:6b:15:20:97:80:
04:43:72:a1:d7:d7:43:09:9e:cb:5c:b8:ff:e4:0c:
0b:54:11:2d:32:50:4c:22:5b:f0:5c:f7:26:85:7a:
32:c1:a2:2d:01:df:5f:cf:be:10:3a:fe:b8:83:4d:
98:92:4d:cd:3f:9f:fc:1d:27:7d:1e:7b:29:30:d9:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:C4:BE:D0:28:92:69:2C:D2:D6:36:AF:45:B0:78:7A:9D:5E:09
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:5d:ee:fb:aa:cf:dd:d4:7e:8c:33:d0:f0:0f:cb:c4:c1:
85:8a:da:e7:e9:54:b7:cc:c6:17:70:52:32:7d:a8:cd:53:c9:
02:7f:bd:f8:f5:56:10:3d:45:7f:f0:48:6c:97:df:97:6b:4d:
8b:25:9d:a9:b6:14:2d:19:0d:82:f3:11:41:46:7e:d3:d6:90:
57:0c:ff:2a:41:52:c0:b6:c9:fd:e1:9c:b8:f4:47:e8:53:5c:
eb:67:b8:40:ee:ad:a4:88:94:cf:27:0c:03:01:d5:90:50:e7:
36:07:b6:20:9a:ae:36:45:de:6a:c0:7b:df:6d:af:47:21:a4:
5d:90:0a:b0:a0:49:0f:35:cc:b2:56:c1:9a:d5:18:16:e7:59:
58:0d:67:6b:8a:86:c6:e6:48:b9:af:a5:ac:a2:4f:62:8f:36:
f8:43:46:60:01:b1:27:17:5d:d0:a0:19:8d:ae:70:72:7a:f3:
48:a6:76:43:20:ed:0f:3f:ee:79:ad:8f:b4:57:f3:e2:e7:c0:
0c:95:86:68:31:35:75:5b:25:3b:5a:a9:e0:43:ae:3a:4c:82:
b2:db:a8:72:42:55:69:89:e0:e2:60:a7:a6:18:37:9f:10:c5:
2d:11:a2:ce:9d:41:06:af:e8:f1:90:e7:e2:2c:db:e3:ad:c8:
1c:cb:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:15:18 2025 by rpki-client