Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: /82kvEdwI776TE31sz++Rk/YIOdOUNr7BWyeOx27XVw=
Subject key identifier: D3:15:52:FC:55:98:21:41:71:3E:7B:E6:13:80:67:9D:05:2A:2F:26
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01967F46680830BDEAD230896B54CB875E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 02:00:42 +0000
Manifest this update: Tue 29 Apr 2025 02:00:42 +0000
Manifest next update: Wed 30 Apr 2025 02:00:42 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: hj8az/tPkPvClQsMT2KHIdnEWWOqxZjC0xHg2iN/aJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:68:08:30:bd:ea:d2:30:89:6b:54:cb:87:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Apr 29 02:00:42 2025 GMT
Not After : Apr 30 02:00:42 2025 GMT
Subject: CN=d31552fc55982141713e7be61380679d052a2f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:d9:ec:20:ab:39:98:ba:4d:c5:b7:bf:02:
c5:7c:9e:79:47:77:10:98:0d:4f:b9:83:48:96:08:
ef:35:b7:71:56:83:09:bc:00:40:67:55:6e:21:3c:
08:43:a7:5f:95:86:76:0d:b9:98:2a:36:94:d7:3d:
d9:a3:c2:04:13:8d:83:fa:64:72:45:13:c0:d1:96:
72:5c:59:fe:ac:af:c4:9e:46:81:2e:94:42:ca:c2:
42:71:b7:e4:a3:48:43:4a:da:22:e3:e5:29:5d:0a:
03:21:53:1d:8b:b0:b8:ea:5a:ba:59:ef:7a:50:2e:
80:fd:05:36:f9:71:d9:b5:59:93:d3:ba:93:df:0f:
91:32:79:52:a8:61:2a:52:96:17:8c:bc:d0:2c:64:
79:f0:74:23:8e:bb:3f:d4:a7:be:dd:7e:64:9b:1a:
c0:aa:dd:65:f6:25:ec:59:be:6f:2c:54:25:3c:c6:
a3:bb:fd:45:7c:ea:b2:ac:ba:5c:a9:29:ea:c5:55:
32:6e:b7:48:a2:bf:a4:5a:87:11:d2:fc:75:92:0a:
69:b6:01:a4:c8:ca:3b:ec:d7:c0:01:af:aa:b0:1b:
fa:7f:97:b9:89:04:81:1c:de:1d:30:76:fd:3c:25:
09:92:4a:69:5f:dc:5b:34:d7:6b:16:ef:e5:a5:31:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:52:FC:55:98:21:41:71:3E:7B:E6:13:80:67:9D:05:2A:2F:26
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4e:07:bf:ef:f3:ab:e3:49:0e:eb:e6:2c:c4:81:e3:bf:d0:
62:f0:fa:5d:7c:3c:25:42:88:a2:ea:f5:e7:9b:f8:e8:15:cd:
04:11:bc:93:1f:f5:c4:6a:f1:b8:d5:e1:bb:07:83:4a:cc:a3:
8c:3d:8f:72:b0:42:f3:25:86:a2:32:e2:51:b2:02:ff:2d:fd:
aa:6e:7a:81:57:52:a1:d2:a5:53:4a:4e:44:98:88:c3:2d:01:
04:4b:d7:5a:8d:d1:24:5c:41:6e:ec:15:6b:65:3f:3d:25:8a:
ec:25:70:f2:b0:c9:3c:ad:ef:e7:9a:e3:b4:a0:d3:2f:3c:ed:
8a:38:05:b8:71:29:9a:4e:f0:0e:01:a8:b7:e3:6a:0b:85:b9:
aa:a7:c0:a8:3a:9a:51:53:b9:e9:59:7a:2d:35:c6:b8:f4:d7:
4d:af:c2:f3:fc:bf:a2:a7:ac:0e:66:fe:db:6c:f4:6a:a0:f5:
68:0f:4a:58:15:02:a1:d9:b8:a5:cd:0a:79:a2:74:c5:28:5e:
5d:bc:18:9a:05:c1:e7:ec:14:9b:3d:66:97:21:9e:dc:46:b5:
74:8d:02:90:3b:37:68:5f:b7:9e:88:6f:24:ce:8c:44:4c:23:
0e:af:b0:ba:90:a5:24:d5:09:86:f6:8d:dd:22:7e:e3:47:cb:
22:87:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:25:33 2025 by rpki-client