Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: 7Wg2RADRZZWmdhIpvpCouXFf1Xun3aC9+3218EvJWKw=
Subject key identifier: 76:AA:11:DF:70:F5:53:1A:BE:A1:D7:2C:BC:A0:87:0A:55:F6:C7:8A
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 0196ABB138E2EBE02F7034423FC2A9C7D488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 17:00:40 +0000
Manifest this update: Wed 07 May 2025 17:00:40 +0000
Manifest next update: Thu 08 May 2025 17:00:40 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: RGR7LawBuR9Qu+X5t8ZhODpdhU7Z7RLX0ySttn1kWqI=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:38:e2:eb:e0:2f:70:34:42:3f:c2:a9:c7:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: May 7 17:00:40 2025 GMT
Not After : May 8 17:00:40 2025 GMT
Subject: CN=76aa11df70f5531abea1d72cbca0870a55f6c78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:e1:f7:cf:a1:e6:de:4e:41:72:b4:ce:32:
2d:68:20:e6:a4:23:9b:88:70:44:cd:56:34:07:39:
76:3d:72:2a:9c:bb:08:07:12:91:0c:5c:86:c5:59:
79:00:70:2a:63:14:07:f6:2e:33:79:a6:12:a5:1f:
04:3a:ab:7f:16:38:db:0b:51:eb:9c:c2:53:21:fa:
ac:fa:b4:55:b1:46:98:83:5d:b4:4d:7f:de:c1:ea:
05:85:61:05:00:22:0c:18:ed:9d:77:1e:3e:5d:61:
cf:0c:f5:9c:e5:eb:37:2f:6e:75:f6:8c:27:22:c2:
58:ec:f4:d9:fd:4c:36:f9:0e:02:1b:14:9a:92:fc:
d9:83:3d:4a:1f:d1:a4:2d:7e:b4:47:7c:d8:08:f8:
84:dc:dd:de:51:19:b1:df:37:8d:2d:0b:82:c7:32:
18:28:65:1f:9f:73:cd:11:b8:22:19:2e:f1:4b:87:
f1:a9:09:c4:02:51:25:9d:17:5b:ac:38:e1:60:de:
82:e2:92:3e:dc:d1:0f:69:20:4a:94:30:ef:dd:82:
33:4d:94:af:c1:b6:cb:d8:62:03:fa:a9:fc:53:70:
be:01:e8:97:94:99:10:0e:3c:f9:3f:29:7d:41:7d:
45:67:a8:e5:88:42:4d:08:49:ac:60:78:5e:ec:1f:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:11:DF:70:F5:53:1A:BE:A1:D7:2C:BC:A0:87:0A:55:F6:C7:8A
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:10:ca:fa:97:bd:99:ae:ed:2a:ad:1b:ce:36:e3:b3:06:1c:
d7:77:6c:05:ce:26:ee:c8:24:72:65:e3:4c:98:c1:40:5b:c7:
9b:30:8d:ec:73:b7:e9:d0:6b:ff:da:59:db:7c:2f:bd:8a:c8:
19:69:89:a6:ac:27:d8:ab:75:f4:ba:6c:77:f5:33:e4:07:23:
a8:7c:a2:78:b4:14:d6:df:29:f7:fc:38:98:61:c7:a3:73:d9:
c7:6a:6c:c7:b7:90:df:b8:d0:36:ad:ce:26:6b:56:2d:25:d1:
a6:86:7b:ef:9e:ac:b8:08:53:75:60:b0:b6:8d:64:f0:58:a1:
49:39:64:f0:29:3b:aa:8c:da:f3:c5:4e:62:3b:9e:a0:84:12:
0f:a7:6d:f2:af:1c:bb:8d:e5:4a:10:62:81:95:93:02:0a:26:
ba:98:b5:35:44:48:97:07:fb:55:39:d8:6d:a0:c1:0d:66:cf:
ca:e7:c9:8d:c4:4a:e7:3e:68:e4:78:1e:c6:c5:ac:06:29:cb:
63:0a:6f:76:a6:3d:0b:c9:ba:61:8d:f3:10:7b:ed:e3:e8:b8:
1d:c3:d0:5a:66:42:cb:79:17:3d:e0:fe:4b:01:47:29:ae:c9:
3f:80:a2:12:3f:56:38:53:ef:b2:1a:6a:e7:7b:e0:c1:8d:76:
72:f4:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:47:30 2025 by rpki-client