Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: 8F7ChlISRlDeEPmA1VFpHlLjmGrz2OytgFOwEgxY+90=
Subject key identifier: F8:31:72:BD:14:71:5C:CD:22:24:BA:1E:CD:FC:87:E0:FF:5E:21:3F
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 0196BAED1423325D5C0F12262E98C8E49925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 16:00:21 +0000
Manifest this update: Sat 10 May 2025 16:00:21 +0000
Manifest next update: Sun 11 May 2025 16:00:21 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: 7oooCXajXqkw6ZXeHdUovp5nPkqTYEKg3nyzKzDndFQ=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:14:23:32:5d:5c:0f:12:26:2e:98:c8:e4:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: May 10 16:00:21 2025 GMT
Not After : May 11 16:00:21 2025 GMT
Subject: CN=f83172bd14715ccd2224ba1ecdfc87e0ff5e213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:71:35:fe:0c:4c:8c:c4:5c:d5:9c:5d:89:
74:73:eb:40:0e:8a:6c:50:c1:87:f2:5b:d4:c0:28:
45:62:5b:93:1a:fb:37:e9:6e:89:19:e2:93:e7:b1:
62:84:ef:e5:cf:1d:16:06:66:4d:50:36:d1:7a:45:
9c:fd:f5:34:02:03:28:35:3e:08:04:f8:74:bc:9d:
3a:b3:8e:46:23:3a:e7:b3:5e:f3:a8:77:bb:40:f4:
1a:21:1c:81:38:59:d5:34:d6:3f:38:31:e9:06:af:
dd:26:7e:5f:6b:7d:b7:ba:6a:45:94:20:60:57:93:
9d:d1:1a:86:01:6c:ab:b0:1a:b2:ab:ad:48:9e:7d:
47:69:95:08:d6:ca:ec:c0:7f:2d:8a:df:25:19:8e:
8c:8c:b7:e7:c3:ab:75:7b:7c:1e:13:de:97:78:1d:
54:62:14:3d:be:2d:7e:67:a9:65:f3:51:c7:33:86:
57:22:6d:e2:5c:17:77:e2:06:2c:bf:51:ba:47:ce:
a0:3d:de:d0:4d:3d:62:29:d5:3f:69:63:a8:c6:42:
d6:a3:f7:7d:72:07:c4:01:97:ef:52:8c:54:0b:f5:
37:c4:8a:9f:0c:2d:34:8c:05:d1:ce:89:44:3b:80:
79:4f:79:49:fd:17:e8:f0:aa:08:b1:77:eb:dc:49:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:31:72:BD:14:71:5C:CD:22:24:BA:1E:CD:FC:87:E0:FF:5E:21:3F
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9f:1b:50:b6:57:21:bf:d9:e6:db:b5:f8:15:4b:94:04:dd:
99:c9:80:f7:ff:e4:cb:73:99:5e:6c:d3:12:ee:cf:cb:4c:7e:
06:07:16:33:9d:2c:12:01:43:c1:3e:7b:a6:89:9a:58:49:55:
9e:fd:7d:e0:5f:89:9e:97:9b:ca:9f:fa:af:6a:f0:a9:ce:05:
1b:7a:27:34:c6:6e:f7:1d:62:bc:54:86:0e:18:c9:8d:ba:83:
a0:24:fb:c8:df:05:08:d1:59:08:5d:3c:1b:2c:a1:07:3d:ad:
44:47:96:4a:79:05:0f:91:bd:09:6e:ed:9e:01:36:4e:9e:8f:
1f:bf:e8:6f:34:e1:73:40:e1:55:0d:4e:1c:3e:80:f4:9a:fe:
a3:10:72:7b:bb:97:f2:a7:20:a2:3d:65:48:f7:58:ea:14:4e:
6f:b1:a6:5a:7b:52:ad:bd:2a:61:8f:e7:22:42:c1:12:96:81:
50:5b:ec:54:29:fb:31:bd:55:19:59:f1:45:b4:ee:be:89:93:
3a:90:65:ea:f0:c5:ce:f5:42:61:66:7f:b7:8c:78:5d:1b:90:
73:bd:de:6c:f6:af:79:c2:6f:31:da:f9:f5:c1:b2:63:7d:35:
23:d1:87:3a:c1:9a:33:76:b1:d4:a1:29:e7:87:9c:b6:aa:3a:
c9:f1:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:28:43 2025 by rpki-client