Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File: p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier: BB33xsrQqIcorYAifas7e665Cnc6kcNplnk0Z8Z0kWI=
Subject key identifier: 1E:09:A6:5F:DB:6C:AD:38:44:A9:40:70:F6:4E:0F:83:40:16:85:99
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 0196914C6D2DF098CE043D24722FD233D05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 14:00:27 +0000
Manifest this update: Fri 02 May 2025 14:00:27 +0000
Manifest next update: Sat 03 May 2025 14:00:27 +0000
Files and hashes: 1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: CLKeKxkel3avW6W7ogoFZEgcbW4x1kSNvLdyMKkQj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:6d:2d:f0:98:ce:04:3d:24:72:2f:d2:33:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: May 2 14:00:27 2025 GMT
Not After : May 3 14:00:27 2025 GMT
Subject: CN=1e09a65fdb6cad3844a94070f64e0f8340168599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:ea:86:91:70:bd:5c:13:f6:05:b4:28:eb:
e9:93:0b:29:81:fc:68:bb:dc:e2:57:cb:fb:ae:6c:
5d:06:81:d1:5f:8e:df:a4:a6:34:5d:50:6b:04:d2:
04:1b:50:2b:96:e5:4a:03:4f:a5:56:c8:52:3e:6a:
7e:91:9e:2b:b7:6b:52:b7:6e:8b:d0:18:35:a7:3c:
3a:72:20:2c:89:4c:2d:f9:fd:43:d8:f0:fd:7f:f8:
af:90:36:1b:95:08:5e:9e:58:cd:94:b1:89:71:15:
51:10:6e:66:3b:2c:a5:e5:e1:05:25:53:b5:fd:4c:
1d:d1:e7:fb:b9:17:d9:1f:9b:ca:fd:39:8f:02:b3:
66:9d:38:14:16:66:ed:60:f6:9b:a5:ba:b1:08:e4:
04:fa:10:34:0f:5c:eb:e4:59:e2:62:96:6f:40:d8:
f3:e5:00:af:b1:d5:d1:8d:ae:9b:23:2d:bc:25:5d:
20:29:fa:39:be:73:17:ab:db:33:1c:54:a4:94:2f:
8c:6e:26:8f:2d:da:c8:f8:56:fb:0b:64:e4:50:ca:
d6:3e:29:b8:55:82:4c:d4:5f:a2:03:2c:95:78:15:
f5:b7:66:14:2a:4b:69:8d:65:f6:89:16:c2:d4:ef:
fa:29:6f:40:f7:d3:5a:95:5a:81:02:6c:9d:46:ca:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:A6:5F:DB:6C:AD:38:44:A9:40:70:F6:4E:0F:83:40:16:85:99
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:c6:0c:f4:4d:91:21:b3:45:84:4b:92:b7:43:5f:b8:fd:
83:a4:c2:de:39:19:92:a0:33:80:f1:8d:ed:bb:1a:f3:b2:5a:
98:26:0c:c1:b8:9d:bb:28:b6:5e:05:c9:ac:a9:56:ce:6d:0e:
98:4d:78:52:b7:fa:a0:c9:fa:9b:65:bf:ba:1e:ee:0a:59:c0:
8f:47:0a:77:00:04:47:bc:49:96:36:4d:67:28:79:5e:b3:39:
98:75:c5:ac:77:68:24:66:f8:16:9e:03:01:ff:98:9b:06:70:
64:56:d4:69:51:b9:fd:82:a4:92:fb:0c:81:26:00:a6:f7:d1:
a6:02:a5:43:c8:0e:ff:30:c6:8d:8b:52:34:b1:f0:f2:ba:23:
f2:6d:13:aa:bd:ee:e5:86:b1:9a:55:7a:1c:28:43:c0:dc:9d:
c9:28:41:24:9d:b2:c3:ab:22:69:7a:51:45:60:7b:d3:3e:55:
da:42:de:a6:1e:7c:ba:b6:4b:8f:fc:01:89:4c:1a:e3:9b:db:
b5:27:67:f8:2a:65:ce:68:78:ee:bb:1c:47:35:64:d1:aa:76:
5c:79:0b:1b:47:c9:37:9f:f1:9a:e1:99:ea:27:3c:e0:e4:0c:
15:c5:ef:d0:ef:7c:65:77:c9:ae:a5:ff:81:61:81:01:16:f5:
99:3a:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:19:23 2025 by rpki-client