Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: otjeTT1+BLB1Wi75YQg7aZ0FhK9X+WdIWWYbN28Qr6g=
Subject key identifier: B2:19:F0:CD:19:42:E6:8E:28:AE:E4:C0:67:0C:D4:8D:48:FB:97:A2
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 01969115FCE517F4B9747AA117DA57E1314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 13:00:59 +0000
Manifest this update: Fri 02 May 2025 13:00:59 +0000
Manifest next update: Sat 03 May 2025 13:00:59 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: 2rkx9A7onZ1Ufg06B09+QAVCLtlPGhedqDQDDaAjdPM=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:fc:e5:17:f4:b9:74:7a:a1:17:da:57:e1:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: May 2 13:00:59 2025 GMT
Not After : May 3 13:00:59 2025 GMT
Subject: CN=b219f0cd1942e68e28aee4c0670cd48d48fb97a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:2b:96:77:c8:e7:90:b5:53:be:d7:6d:d9:
06:11:92:52:dd:57:dd:62:28:64:88:27:de:6f:25:
fd:55:f6:df:3b:ca:51:a2:48:f6:46:40:fa:fc:8b:
1d:5d:30:56:95:92:8a:06:82:b2:df:33:83:36:69:
5b:1a:e2:53:c5:52:42:10:3c:70:25:38:de:a0:cc:
4d:cd:10:32:9f:97:0d:41:1d:0a:52:9d:b1:ae:b1:
93:99:a9:9d:7f:ef:20:a8:d9:46:1f:36:a0:4d:73:
b5:f7:f1:30:62:f5:01:32:80:2f:92:fb:81:55:be:
40:32:58:79:66:5d:34:d6:24:1f:1a:7c:15:bd:1b:
bf:7f:fe:63:a2:11:d3:08:df:02:cc:9e:81:08:35:
6b:3b:16:32:b2:0f:2e:67:8d:2b:fd:68:32:22:b7:
e4:13:df:54:0d:fe:71:76:1d:74:38:19:c4:15:ad:
04:5c:ef:09:94:ea:84:91:86:df:97:e6:7e:86:c6:
2d:4d:2d:bb:b7:22:c1:ab:af:b9:0f:4d:5b:76:8e:
c3:e3:b4:b2:34:d6:ff:75:f9:0d:8b:0c:32:86:95:
5a:7e:0a:cf:33:68:95:06:c8:22:d0:7a:7d:d7:f0:
bd:e2:3e:1b:c7:e6:b2:86:3e:b0:28:a6:02:1b:55:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:F0:CD:19:42:E6:8E:28:AE:E4:C0:67:0C:D4:8D:48:FB:97:A2
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:ff:fc:cc:8b:8e:a7:30:49:33:f7:c5:2e:7a:77:c1:8d:
c8:1e:07:1b:29:7b:73:42:e6:be:40:0b:ea:57:9a:b4:a9:3e:
a3:f3:ea:f7:8c:f7:bd:f3:4d:39:18:3a:d9:23:de:f3:60:22:
ce:96:4d:e1:f8:10:c2:b4:5c:4e:25:98:85:a2:58:3e:69:1f:
31:8e:19:83:30:c6:3f:15:55:66:1f:e1:67:9c:e8:93:c6:db:
0d:82:11:22:e1:bb:ef:6a:d8:da:14:2d:65:86:4a:35:08:9c:
c3:7c:91:28:ef:99:78:28:26:57:c3:44:9c:be:2b:92:55:0d:
59:c2:c8:0c:e2:5a:46:be:bd:ff:f6:78:f1:78:9e:b3:56:d8:
50:b1:d1:ae:4e:76:ec:26:d0:72:3e:e9:61:e2:d3:c2:93:52:
70:97:b4:43:df:26:ed:52:7c:d7:06:d1:cf:42:eb:6c:91:1d:
15:f3:88:d6:c0:94:84:49:1c:81:14:e7:14:d9:a5:31:df:a9:
1e:7b:97:f6:3f:ef:a3:c1:84:6d:a4:08:fe:35:2f:06:a3:50:
08:7f:39:3d:65:c0:05:30:08:91:4f:2a:17:11:5c:a7:62:2f:
52:21:b7:4b:1b:24:2c:f2:f7:d3:72:3f:57:31:0c:c5:ce:81:
57:5a:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:13:43 2025 by rpki-client