Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: eYKQPCoTyQTWjfYK1Fu2TIBgvELrJ5HTYBANu+/1vNg=
Subject key identifier: E7:D3:20:92:B6:09:7A:41:05:C6:F3:F3:AD:40:DC:11:DB:65:B4:18
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0196C26FCD1B8B331F73A53B2EEA48EC4EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: 9vui8acuVvKRLmf9aLi9CXi5r6dzAIXmyYUgJzrmdjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cd:1b:8b:33:1f:73:a5:3b:2e:ea:48:ec:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=e7d32092b6097a4105c6f3f3ad40dc11db65b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:56:2d:e7:5c:35:56:85:e2:c9:77:92:94:
78:17:43:50:1f:7c:bf:33:7f:69:02:7a:aa:05:da:
e3:ee:b6:9b:fb:69:b2:a7:ed:16:67:01:f2:da:cf:
6d:7b:c4:16:97:90:fd:38:2c:8c:90:7d:01:42:2b:
a1:f6:55:68:b9:bc:37:a9:2f:a2:13:32:a7:c0:0f:
3a:2c:b5:d9:b7:65:ac:3b:be:98:50:ec:95:12:6a:
ad:e0:f4:03:28:10:e2:e4:51:b8:40:d1:4e:34:7b:
db:58:89:c7:8a:90:6e:94:2f:0b:e7:19:a4:1e:1e:
c2:ce:0a:4e:e4:2d:db:49:d5:b7:54:bf:cb:2d:ef:
e7:de:fe:bb:aa:2e:d6:3e:f4:f9:fa:52:c8:b4:b6:
b1:ec:38:93:6a:26:34:b9:c1:15:3d:aa:93:d0:00:
ba:ff:cd:d2:7b:07:1e:6d:b1:ed:c1:f5:e9:c3:1d:
30:a3:6b:65:5c:c7:22:2a:1f:bb:41:02:ad:11:55:
51:d5:e4:a4:6a:25:07:99:52:f0:ec:32:b9:40:04:
ed:e2:eb:3d:02:d7:e2:fe:d9:7c:7d:1f:63:ae:ff:
00:bc:d6:b8:1b:14:a7:d7:93:63:d8:05:1a:b8:56:
b4:ee:4a:9f:24:4f:d4:86:c8:58:22:3d:02:62:f7:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:20:92:B6:09:7A:41:05:C6:F3:F3:AD:40:DC:11:DB:65:B4:18
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:e6:79:44:c0:43:ff:ad:51:8f:9c:52:5c:0b:db:5e:f5:
26:50:dd:36:74:43:a6:e0:2f:74:58:2f:ed:9f:4f:d5:30:42:
ca:59:9a:c6:b9:f5:a2:6c:d7:38:b9:01:e7:7e:e4:c5:b8:a2:
94:fb:2e:4d:19:9a:ab:8c:d5:a0:33:32:00:bc:7f:0b:4b:06:
c3:1e:64:bc:20:84:24:9b:97:f2:68:35:55:ff:f2:35:fe:39:
5c:9e:69:a6:c4:bc:4a:24:16:a1:83:e3:f6:15:d3:ed:cb:fc:
88:ed:40:8a:ad:4b:e7:d1:d7:5b:1b:19:d7:21:61:29:b8:10:
9d:2d:16:f6:21:18:0f:d5:ce:7d:ed:2b:3d:0d:34:bb:d3:de:
94:c8:fa:e3:a8:fb:5f:cc:3f:0d:8d:c1:61:8c:93:62:73:2a:
de:47:42:f5:82:c7:c8:47:05:f0:ef:3f:7c:5b:0b:11:fe:9f:
a8:72:2d:5d:e1:54:ee:1f:ee:17:9a:1b:1d:61:02:6f:53:c1:
ba:61:e5:14:2f:60:a2:d5:23:7c:ad:5d:2a:fe:fb:a4:db:99:
f4:de:b4:f1:40:aa:2c:2a:e3:eb:fd:5d:c1:4a:27:da:39:8a:
3e:36:e1:6e:88:2a:b3:bd:34:b1:16:a8:be:28:01:a6:cc:33:
84:db:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:41:24 2025 by rpki-client