Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: oEyMyqtefsIb9ZLH98u4Tmtcuq3QOZCT/vNN8/FkrQA=
Subject key identifier: F4:D6:AB:4E:8D:26:42:07:30:C8:B8:15:7C:A1:DB:9C:D5:12:F0:D2
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 01968AA5BA9F80A32F73401E388DF9B359E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 07:00:39 +0000
Manifest this update: Thu 01 May 2025 07:00:39 +0000
Manifest next update: Fri 02 May 2025 07:00:39 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: xJ4hqyd2aQ2jtAJ0RGoU1tnM+H1JQsSRI71f/yGV7Vs=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:ba:9f:80:a3:2f:73:40:1e:38:8d:f9:b3:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: May 1 07:00:39 2025 GMT
Not After : May 2 07:00:39 2025 GMT
Subject: CN=f4d6ab4e8d26420730c8b8157ca1db9cd512f0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:0a:26:e2:9f:e9:27:1c:29:1e:03:d1:fe:
12:f7:f4:7a:dc:b6:b8:87:92:fb:a3:82:f8:20:33:
84:aa:36:8a:dd:71:5b:2f:6f:53:09:62:d9:7f:f0:
13:18:eb:f2:51:9f:1a:38:3f:a9:53:af:bf:41:98:
b6:8d:ef:f2:87:c0:1b:fd:c2:d4:b0:ba:ea:63:ea:
76:59:c7:c7:53:e2:36:51:b9:c4:e7:af:71:4a:75:
56:15:26:c2:35:7d:03:67:3f:0e:ae:70:a5:7d:67:
f3:e2:2d:1a:bf:46:1f:b4:59:2b:12:73:88:4f:09:
f8:82:33:1c:4b:7c:47:2f:49:e2:e0:40:76:55:f6:
ec:a2:b5:be:3d:15:53:42:63:1e:80:b1:32:ce:0e:
99:02:ab:ea:e3:2c:dc:11:5d:d7:e3:2c:eb:69:ce:
63:c2:ae:4b:c1:56:e9:03:6f:b8:c3:9b:c3:8d:b6:
5e:ea:de:8b:03:f5:80:c3:f0:a8:02:f9:f2:4b:72:
12:9e:28:1c:c3:f7:a8:0f:7d:4a:25:d3:24:65:f3:
07:f8:9c:47:43:1c:d8:ef:e0:2f:26:a0:0c:43:f6:
f5:4d:ff:40:bb:e6:c5:14:14:42:60:16:4b:e7:f1:
0c:16:a6:78:ef:59:38:89:c4:24:95:a9:bd:c4:bf:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:AB:4E:8D:26:42:07:30:C8:B8:15:7C:A1:DB:9C:D5:12:F0:D2
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8e:d2:e3:83:ea:96:c4:ec:7e:f7:25:3e:ff:b1:b5:09:7b:
9a:c0:2d:bc:41:d3:14:e2:7b:ab:73:1e:2f:3f:cd:22:55:ce:
12:51:89:ff:dc:41:f8:54:b4:df:00:03:4a:67:1e:2a:e0:6a:
a7:e7:a9:9a:4c:fc:08:0f:be:b1:c4:c3:00:f8:ff:21:bd:68:
58:05:a6:86:1a:fa:ff:ba:c5:83:95:ff:66:6a:e2:c9:9c:e7:
61:27:53:0d:6c:c8:1b:ec:a4:aa:88:c0:63:fd:d2:9d:aa:b7:
a9:f7:69:69:7f:79:6d:70:5c:b3:df:3d:50:dc:e7:65:55:3a:
dd:f0:99:59:43:ab:4e:12:5b:e3:41:b9:90:2d:91:28:c9:40:
20:a5:1f:96:fc:b1:a9:ec:e0:c6:5f:32:fa:1d:44:95:34:b7:
ef:3e:25:03:63:d7:d1:73:9c:01:a0:6a:90:3d:71:b4:37:c3:
64:b9:0b:6e:c3:72:34:9d:21:69:a8:c4:d2:24:53:ef:a1:5e:
d2:e9:db:b9:40:7c:ab:2d:bd:23:57:f2:6b:19:52:d3:bf:4a:
9f:80:9e:61:c9:40:5c:fc:00:e9:c5:8e:b1:bd:d5:0f:b4:b5:
97:85:55:8b:45:4c:68:5c:49:6e:7f:8d:a3:ba:da:61:97:bd:
32:8e:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:03:29 2025 by rpki-client