Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: SJQHKdhEgobcC1eXhem2V93T26LpUjqeCgLBGVM9Lg8=
Subject key identifier: 68:61:19:C4:25:2C:D8:D4:13:C9:64:69:E6:EA:23:7C:92:CF:16:EC
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019683FF4EFB003E06AACD7B2510F7E9438E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 00:01:09 +0000
Manifest this update: Wed 30 Apr 2025 00:01:09 +0000
Manifest next update: Thu 01 May 2025 00:01:09 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: LWw7lf4NKr8UKeau8D1x+0l9gMnZqnn9LUD16D0qrNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:4e:fb:00:3e:06:aa:cd:7b:25:10:f7:e9:43:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Apr 30 00:01:09 2025 GMT
Not After : May 1 00:01:09 2025 GMT
Subject: CN=686119c4252cd8d413c96469e6ea237c92cf16ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:7e:06:6d:2a:6d:dd:89:2d:61:c7:b0:ec:
69:0b:fd:cf:97:d7:84:22:9c:8c:df:de:ad:c4:84:
68:dc:a5:49:24:a4:c8:80:c9:1d:39:35:2e:b6:83:
34:70:f5:58:4e:0e:d7:f7:c6:06:18:99:a3:05:5e:
43:04:87:c2:40:64:99:6c:10:d1:38:61:31:95:3d:
57:69:1d:67:a2:99:e5:e5:f1:08:f1:a5:95:b3:7d:
da:dd:c9:e9:74:cd:ad:97:c3:a4:74:d1:ad:95:b1:
c9:99:8e:16:15:c0:34:2a:93:96:fb:46:14:48:39:
fe:f1:4c:fd:65:d8:5e:73:31:84:69:b5:59:05:a9:
c8:d3:82:0a:d8:20:a6:87:42:1e:1e:15:d3:88:07:
12:2f:06:e6:59:4c:04:eb:84:86:49:88:e2:6a:7a:
d5:0e:c6:69:f4:09:49:59:b2:6a:9d:f9:b6:1c:e1:
77:88:5c:61:d4:8c:02:92:b0:3c:66:29:cb:30:92:
ad:1b:e1:8e:9c:c8:85:17:18:28:90:a5:2a:72:de:
29:88:1f:bf:f6:6a:f8:37:21:9a:50:b9:87:1e:7c:
a2:75:6a:8d:33:a7:e3:7e:b1:b2:c5:8a:21:ad:73:
ec:79:85:dd:0a:ce:5c:92:68:4b:11:1a:e4:5f:ea:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:19:C4:25:2C:D8:D4:13:C9:64:69:E6:EA:23:7C:92:CF:16:EC
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b1:eb:27:58:d7:7a:69:6b:c2:48:49:58:f7:85:cc:4b:ae:
de:2d:a1:e6:c3:5d:f4:e5:e6:c0:04:6c:f3:79:23:59:85:6f:
3e:6b:06:c9:fc:40:16:ad:b7:8c:4c:b0:f0:55:88:52:3a:d6:
73:ea:e7:d6:67:83:8a:fb:e4:d3:63:47:e5:59:bd:96:63:5e:
81:8e:c5:c2:1a:8f:bf:a2:c3:6a:9b:88:f9:a2:74:ca:e3:f9:
06:bb:62:3a:67:3b:37:2c:02:42:33:41:95:82:0d:bc:2a:91:
e7:be:cb:7f:15:04:20:87:4b:1d:37:7c:bf:1c:b4:e5:89:28:
00:1e:dd:23:c9:f4:4a:41:2a:89:c0:bf:8a:ab:84:d5:f5:08:
41:d9:af:19:8a:d6:5e:ca:62:33:38:d1:9b:d7:3d:6a:76:14:
20:f1:a0:cd:c2:27:ff:94:05:eb:42:60:87:61:85:55:c1:85:
04:96:55:d2:5e:03:95:62:8e:e6:60:73:bf:2a:8d:00:94:83:
41:00:36:12:31:76:d5:58:b0:78:fc:44:1d:3c:26:ae:44:45:
cb:96:d0:82:5a:f8:1b:a8:7e:ca:b1:23:68:ae:4f:45:37:07:
b9:57:0c:9b:0d:c9:59:fb:7f:1d:93:1b:19:fd:55:94:81:71:
76:10:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:26:13 2025 by rpki-client