Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: 4oUnr+ihBQNg5GIcD5KWfKaTsRXGa0IDAGMeosR2OMs=
Subject key identifier: 7F:62:8D:55:FC:47:31:4A:67:46:25:2D:55:04:E8:CA:51:26:12:F1
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0196A653B2D7F18F478DEA11481318CA59FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 16:00:25 +0000
Manifest this update: Tue 06 May 2025 16:00:25 +0000
Manifest next update: Wed 07 May 2025 16:00:25 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: Q4yQWBnve9yAbIXzgv5KI3aijhNMm0JWQZDFsfY0+SM=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:b2:d7:f1:8f:47:8d:ea:11:48:13:18:ca:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: May 6 16:00:25 2025 GMT
Not After : May 7 16:00:25 2025 GMT
Subject: CN=7f628d55fc47314a6746252d5504e8ca512612f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:f5:6c:29:1d:ae:f8:31:5d:ce:6a:cf:77:
85:1d:48:ea:ff:80:49:3f:c7:3d:c4:d9:57:a5:84:
c2:9b:4a:3c:13:c2:75:20:96:ab:78:04:73:49:b2:
d2:df:60:dc:c2:1e:37:f3:9d:4f:47:54:c8:7c:82:
bf:bd:f9:f9:6d:c1:77:82:c2:b7:54:e0:2b:99:3a:
0b:24:02:db:a0:a3:2b:79:72:63:ed:1a:16:f9:5e:
1c:eb:be:e5:c5:5c:dc:04:55:11:74:f0:bc:72:fe:
a0:e6:52:66:cc:8f:89:a5:cd:1e:b7:af:b9:18:96:
a8:e4:b4:03:65:40:b3:70:07:c4:f6:89:c7:ad:2a:
28:5f:ff:0f:77:8b:a4:44:5d:17:82:4f:88:c0:5d:
be:ea:85:39:e5:41:ec:b8:21:f0:78:ec:73:4a:d2:
bd:b5:f6:1f:f5:8a:90:69:6e:c3:af:01:63:ca:01:
a6:e9:95:7a:19:06:f7:dc:71:99:25:e9:d5:ea:a9:
36:64:c9:85:a5:46:db:7d:f8:f8:0e:35:e7:02:6f:
25:03:1d:ec:09:e8:32:eb:e1:85:52:da:7f:71:72:
42:2e:fe:56:65:6e:4a:1b:fc:b2:81:21:68:86:b6:
47:6d:c7:b5:05:86:52:22:38:58:15:f7:9d:1c:33:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:8D:55:FC:47:31:4A:67:46:25:2D:55:04:E8:CA:51:26:12:F1
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:2f:2a:36:84:30:6d:68:f9:aa:70:21:f0:50:41:fd:2a:
b3:39:29:72:8b:6d:ae:c5:4b:7f:6a:4d:ba:4e:27:dd:c2:6d:
e7:82:49:76:0a:2c:38:91:55:f8:09:ab:a6:93:b4:10:44:28:
31:85:7b:54:d8:bc:a3:7d:cd:4d:06:24:83:ed:3f:93:62:20:
46:87:55:6c:b8:6b:62:06:8a:b4:e7:13:bb:49:51:d0:e4:1c:
e3:44:87:58:c5:86:05:cd:34:ba:07:9d:fe:2d:40:9b:55:a1:
41:2c:7a:57:76:bf:8f:01:db:8a:b7:1c:6c:5f:e4:4a:3b:4f:
46:dd:23:fc:11:89:2f:27:68:82:e9:40:77:fd:0d:de:d2:c0:
51:51:65:e2:0c:01:0a:bc:7d:44:65:95:42:0c:4a:9d:7e:84:
14:61:ce:17:91:16:73:9a:c7:1e:33:31:01:97:eb:86:1a:ab:
7e:75:fb:e2:7a:30:7a:a4:48:f7:95:d9:81:6e:61:4e:1d:99:
79:c6:59:b2:3e:6a:68:0e:e0:e0:4a:45:bb:e0:0f:fa:d2:68:
f2:3e:6a:a3:46:95:1a:36:bc:cc:e5:c8:7a:59:1d:fb:29:21:
26:92:ac:d2:9b:87:17:24:5f:19:ff:3b:a7:5f:41:54:be:ad:
62:26:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:11:15 2025 by rpki-client