Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: Bbx58albxpr9HkTEGdx3MEY98PT7KGrVNOOba+aRhr4=
Subject key identifier: 90:A7:EB:AD:A4:DD:D5:27:46:99:13:46:6C:E9:6E:92:F8:56:35:74
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0196AC56216F5B9694355108117C210E153E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 20:00:47 +0000
Manifest this update: Wed 07 May 2025 20:00:47 +0000
Manifest next update: Thu 08 May 2025 20:00:47 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: W1hjI81U4TyVMmA4tLLRdF/guWa4aU15Gx7JiPKcRYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:56:21:6f:5b:96:94:35:51:08:11:7c:21:0e:15:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: May 7 20:00:47 2025 GMT
Not After : May 8 20:00:47 2025 GMT
Subject: CN=90a7ebada4ddd527469913466ce96e92f8563574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:34:85:a6:97:eb:19:a9:29:1f:8d:90:63:
3c:90:f0:ef:08:15:25:41:59:cc:51:0f:ed:2c:f5:
15:cc:7f:22:d5:ea:87:3b:f1:a9:d4:05:ac:66:f8:
3f:bf:94:8c:aa:80:63:eb:d5:5d:6c:22:2e:6a:2c:
4b:20:d7:f1:0c:fe:3e:71:b9:f5:55:1f:99:08:6f:
bb:cc:ec:fd:87:3b:47:69:ec:4e:b4:c1:cb:cd:0c:
14:23:99:a8:08:cf:ae:48:ff:a2:85:75:11:a3:13:
c1:1f:9b:16:24:92:90:85:b3:de:cd:49:1d:e7:be:
fd:7c:28:92:ad:41:5e:e0:c4:3d:d2:73:fc:53:2b:
b7:0a:b4:a4:f1:85:7f:1c:11:aa:60:5a:92:20:b1:
5c:06:ee:a4:9d:43:94:f9:70:99:12:1b:a7:19:07:
ba:8b:ba:5d:10:d0:05:32:54:83:51:4c:56:90:60:
ef:5d:02:e0:9c:4e:3a:4a:70:b1:3e:39:fb:e9:16:
e2:65:32:96:22:5f:07:cc:37:fa:44:0a:b7:97:a1:
e1:35:92:0c:76:a5:26:bf:85:27:fd:a6:57:06:70:
ca:b3:ff:32:97:d8:e3:35:64:cc:c7:e7:04:02:eb:
c4:06:79:32:a0:4f:ea:f5:90:31:58:66:bd:1e:6d:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:EB:AD:A4:DD:D5:27:46:99:13:46:6C:E9:6E:92:F8:56:35:74
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:74:e3:8a:00:d1:a2:02:72:09:01:bd:69:ab:3a:ea:52:52:
69:c1:27:77:53:90:ec:7c:4b:56:df:78:91:55:c5:ff:74:fe:
df:ff:85:a4:79:f6:d2:54:3d:3c:10:da:ed:46:48:54:97:b9:
02:66:33:a8:c2:05:92:4a:71:bc:51:9c:30:ba:ef:5b:48:74:
af:f6:3c:11:ca:4c:31:b7:30:55:0b:da:fb:92:d6:80:7a:9d:
fc:fe:ad:76:20:a5:38:a7:52:ec:fe:2e:2f:42:b5:04:ac:ac:
f9:68:bb:88:cf:22:d1:8a:36:99:fb:b1:ab:31:98:28:30:e5:
9f:72:a3:5e:d7:75:c2:1e:16:81:12:dd:43:4a:61:0a:be:a5:
e7:4a:1d:05:1f:d6:bd:68:a4:90:c6:53:38:86:3b:51:f7:bb:
19:4d:bf:3f:7f:5d:91:37:18:44:9d:58:e4:bd:cb:37:e6:f2:
33:3f:d3:d4:0e:03:bd:ea:43:1f:17:59:3a:fe:6c:74:57:04:
33:01:ff:53:5a:c2:75:ad:df:bc:de:a6:37:48:64:57:44:13:
90:2f:80:ed:33:19:43:89:7b:02:eb:88:70:61:d0:7e:4e:ce:
de:45:78:23:6e:ce:43:41:d5:36:75:43:13:71:b4:ce:2f:23:
56:36:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:05:03 2025 by rpki-client