Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: n8lTsC3N/+EhlYqmM4hkl3okVP/NS252VAzlX8JDeDY=
Subject key identifier: F5:0C:7A:10:83:BC:C1:2C:CF:AA:8B:00:93:41:D5:E7:B8:D3:E4:1C
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 01968DDD58114C1A4ED8953AAF91626B469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 151F
Signing time: Thu 01 May 2025 22:00:15 +0000
Manifest this update: Thu 01 May 2025 22:00:15 +0000
Manifest next update: Fri 02 May 2025 22:00:15 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: OIT3CTd9UWURPnDx2yi4ZdHptzOCV+Sg/3McYm7Owhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:58:11:4c:1a:4e:d8:95:3a:af:91:62:6b:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: May 1 22:00:15 2025 GMT
Not After : May 2 22:00:15 2025 GMT
Subject: CN=f50c7a1083bcc12ccfaa8b009341d5e7b8d3e41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:49:b7:9b:54:a6:0a:19:58:43:eb:1d:10:
9e:9e:9c:c2:99:a8:e2:b9:e9:0f:e6:32:f0:55:a9:
cc:a3:58:8c:27:07:e8:6d:8c:22:05:6f:5b:c4:04:
2f:8d:c1:bd:e2:03:7b:ec:ea:5c:08:6e:d0:bf:30:
91:15:c7:4f:c1:b1:db:1f:3f:95:eb:9d:ae:14:81:
74:d6:8e:c8:9a:84:51:ab:f8:67:df:9c:22:f1:ba:
16:06:44:f2:6f:cc:3f:1b:d0:c1:05:86:04:76:fa:
0b:6f:4c:c5:5f:ff:3c:9d:8e:75:7f:d2:a2:83:89:
b8:4a:b6:cc:c4:4b:5a:fe:18:9b:1f:52:ce:a3:f7:
e9:fa:57:64:9d:44:a8:e6:9e:57:c7:d4:a6:e8:1f:
1c:63:66:82:fe:b1:42:57:37:f0:41:0e:12:b0:df:
f9:2e:da:82:51:73:5b:1d:e5:e5:46:6e:4d:32:e8:
45:9e:32:ee:df:b4:d8:04:88:44:ca:6b:8d:ff:b6:
12:ef:3b:5f:2e:38:06:e7:ce:af:9d:66:92:0e:21:
89:85:68:40:f8:f1:1f:7c:38:95:29:24:45:fe:f8:
73:ec:79:10:57:fd:11:c5:ca:a5:73:90:40:eb:4b:
2d:dd:f8:f0:f7:1f:96:49:7f:73:b3:d5:a8:48:4f:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:7A:10:83:BC:C1:2C:CF:AA:8B:00:93:41:D5:E7:B8:D3:E4:1C
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:b7:15:64:17:c4:f4:1d:df:eb:8d:32:86:d6:73:83:c9:
fc:91:bb:dc:b2:18:48:63:d1:0d:b9:cf:cd:ab:65:99:a9:b6:
9f:66:e4:1f:40:d1:6a:28:d9:07:80:0a:ae:20:ff:b3:78:9d:
04:a3:8d:53:98:d2:39:00:5b:00:06:6c:3a:76:5a:71:fa:0c:
11:c8:1b:ed:16:ea:be:e4:f7:fd:6a:92:2c:08:5a:c8:0c:ae:
72:94:b5:81:ca:cb:aa:5f:22:a6:74:1a:dc:6a:f4:2c:33:aa:
dc:b2:96:80:65:f3:8f:ae:9d:40:12:51:d5:50:a4:64:96:88:
69:21:ba:ea:28:47:af:a2:42:1d:4e:2b:6f:97:9c:1b:f7:1b:
bb:bd:a7:d7:d8:70:27:18:a4:19:c5:57:d6:db:3d:ee:ff:59:
ea:84:f6:b7:23:8c:c6:2b:ac:cb:34:b2:87:bb:4a:e1:2c:99:
ba:12:0b:da:b7:28:72:9d:4b:ce:c1:f0:76:05:96:76:80:59:
46:89:3e:e1:1a:94:d1:5c:aa:43:e0:da:a0:33:4b:49:ac:90:
94:94:87:15:19:f3:4c:d2:85:4c:0c:9a:e0:d4:21:9c:4d:8e:
d1:c6:17:d0:46:5d:76:8d:ea:60:41:86:8e:86:8f:29:a9:5c:
70:37:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:57:33 2025 by rpki-client