Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: NEysekyAtEoa0TVsqKf31ZoP31siAPgSyw9vdheamJw=
Subject key identifier: 39:CE:CE:9E:82:7C:81:79:B8:6A:2D:D1:68:F7:12:4D:69:B7:C5:1F
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0196AE0E5FFBAE0D29A06F8F4A0D26B45FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 04:01:39 +0000
Manifest this update: Thu 08 May 2025 04:01:39 +0000
Manifest next update: Fri 09 May 2025 04:01:39 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: citCSMyINMI+RmqAdXnF0ytmf1B1suctUC5QWAKXuLc=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:5f:fb:ae:0d:29:a0:6f:8f:4a:0d:26:b4:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: May 8 04:01:39 2025 GMT
Not After : May 9 04:01:39 2025 GMT
Subject: CN=39cece9e827c8179b86a2dd168f7124d69b7c51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:b3:84:d8:0b:ec:99:b3:6b:55:62:6b:2b:
17:ea:6e:ea:84:b8:2d:b6:2f:33:36:89:0f:ad:8a:
62:fe:fb:79:b0:6b:73:de:d0:3f:fd:fe:36:78:25:
4d:37:58:97:56:1f:c8:d8:73:ef:90:8d:b2:d2:c6:
e3:90:2b:2c:02:c5:c5:0a:0d:02:d2:72:26:96:3d:
82:87:bf:97:45:19:9c:11:66:16:76:45:77:1d:67:
85:0f:af:35:f1:41:60:f9:7b:b3:11:f9:8a:38:7c:
3c:cb:55:e1:3d:9b:99:05:06:f0:a6:d4:7f:25:f0:
0c:6e:6b:68:d6:2a:03:56:fa:41:92:58:d4:46:d6:
c4:e4:c3:df:6a:4e:25:c1:c6:6f:f6:6e:86:f7:ad:
ce:2b:66:17:a7:be:a0:40:f2:16:65:2c:df:7c:72:
2e:69:31:82:d9:81:70:a3:b8:30:fc:d0:59:ee:02:
4b:e4:e6:b4:7a:ab:70:03:25:de:82:cf:3a:7b:56:
6c:f7:f3:3b:6c:4a:fd:92:2e:27:c1:d0:2c:f2:43:
07:07:f3:a6:1d:88:24:f6:83:ee:d4:c4:4e:e5:63:
23:a4:13:c7:f3:31:56:37:bd:c0:44:37:e1:4c:43:
2d:57:fc:06:68:eb:c0:3a:e8:aa:58:4b:b3:cb:18:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:CE:9E:82:7C:81:79:B8:6A:2D:D1:68:F7:12:4D:69:B7:C5:1F
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:d5:5f:fd:e5:42:81:eb:3b:e1:45:bc:58:3e:36:0e:b7:
c8:99:a4:ca:ae:80:e3:4e:d9:7f:59:35:bb:01:8f:79:cd:c6:
bd:35:96:76:97:0b:c5:4a:1b:8c:b5:48:5c:f4:0c:5c:8c:4b:
c6:df:0a:a3:80:f4:87:22:5b:1a:b5:41:8a:ce:09:54:d6:af:
8d:e1:be:52:87:3c:44:96:e0:46:4e:9d:46:94:28:4e:30:be:
b8:94:9d:22:7b:c0:0e:47:91:05:ea:7c:bd:e1:be:ee:75:67:
c9:ab:b3:22:03:81:16:56:3e:0c:b5:f4:ae:ca:72:90:06:27:
38:8c:c8:6c:f5:70:76:03:f9:4c:b6:06:b0:fb:e3:0a:af:9b:
e8:b2:5c:70:cd:ba:01:a0:e5:de:64:49:74:ac:fa:ea:6f:9a:
ed:47:c7:47:4d:47:7e:b5:16:25:46:d4:46:d4:b5:fe:7c:bc:
48:26:be:7a:08:0a:80:6f:35:93:b7:2c:94:57:c8:7f:a5:26:
78:90:9a:7d:d7:89:ba:79:ac:c3:4d:fc:63:cd:0c:1b:71:6d:
d8:9e:73:c3:fb:42:80:4a:04:61:c6:d6:8d:7e:18:65:37:8f:
3e:87:e0:8f:25:d1:ef:19:91:02:1d:2a:d8:90:5d:02:44:d0:
7b:69:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:34:27 2025 by rpki-client