Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: PElIV8bIARGGYJCILbOQc8A+l856ckb8SGMX0+SshPc=
Subject key identifier: C0:F5:B2:E2:AB:AE:12:5E:56:A9:C8:06:9E:46:18:AD:C3:84:F0:0E
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 01967454CCE8264D1619A0177EB234209AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 23:00:36 +0000
Manifest this update: Sat 26 Apr 2025 23:00:36 +0000
Manifest next update: Sun 27 Apr 2025 23:00:36 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: ywrloVAGZVQtDDJYLahYGElR/8MWuHFE8angNu50aes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:cc:e8:26:4d:16:19:a0:17:7e:b2:34:20:9a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Apr 26 23:00:36 2025 GMT
Not After : Apr 27 23:00:36 2025 GMT
Subject: CN=c0f5b2e2abae125e56a9c8069e4618adc384f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:54:41:42:df:38:24:44:c5:3c:9f:09:07:
55:c9:51:ea:fa:cd:9c:7c:27:ce:fc:3d:dc:1f:f8:
62:55:a5:8a:3c:6c:6a:94:75:c0:98:dd:4c:9f:54:
94:f3:ee:db:4b:d1:34:54:82:19:1c:a3:2f:1b:27:
81:2c:33:a6:ee:db:1d:a3:e8:7a:8d:6f:76:ba:c8:
5d:3b:f0:ed:f9:62:b6:2f:76:b4:e7:cf:72:de:12:
5f:65:6e:69:87:62:b3:e7:c8:2c:99:c9:f2:99:50:
9d:a3:44:c5:45:fb:ae:e4:32:a3:8a:a8:d6:11:e0:
4e:14:ba:72:f8:41:f6:55:10:3a:48:cf:1a:41:e0:
eb:66:a2:41:df:33:27:30:69:ab:d3:7a:24:21:0e:
c1:ad:9c:87:cf:57:b8:04:28:39:c5:02:ab:e4:88:
04:a2:ae:bb:d6:91:4d:83:1a:b3:15:32:bb:82:81:
b8:8b:57:73:ee:32:f9:c0:9c:4d:3a:f2:3c:cb:63:
74:a5:76:65:35:52:b4:60:28:18:39:b1:e3:ff:22:
de:32:57:82:5e:44:7a:e7:de:8c:13:26:b4:90:3c:
70:46:80:37:f7:b4:ca:13:d5:e1:66:67:b0:e8:60:
15:14:c8:79:ba:3a:4c:57:54:2d:d8:21:59:ff:ab:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:B2:E2:AB:AE:12:5E:56:A9:C8:06:9E:46:18:AD:C3:84:F0:0E
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:4c:3d:01:48:7b:2d:c3:e0:8a:3c:c9:79:2b:06:7b:ca:
4f:9e:b3:db:c7:03:e6:20:98:5c:84:2a:a8:d6:f2:11:a5:66:
61:4a:59:90:75:06:11:55:6a:90:82:b7:e7:08:fc:d5:68:fc:
66:7d:94:ee:dd:2a:89:c7:bf:c9:41:f0:fb:08:b5:d0:e2:e8:
22:0e:0c:17:03:72:f0:93:d7:01:e8:3b:15:0f:10:e4:fe:50:
3f:06:89:54:19:46:a1:ed:e6:b9:37:33:b1:b8:8e:31:3d:67:
f6:b5:db:2f:51:0b:34:95:73:2e:99:93:d0:3f:39:bb:a3:4e:
a9:75:dd:b8:80:37:27:77:e3:0b:7d:dd:65:a9:1b:3e:df:2e:
9d:7c:a7:ad:f3:81:89:9c:0b:7e:c6:8c:a0:4b:dc:a9:7e:0e:
29:48:e1:5f:01:96:41:b9:ed:d1:f7:a0:cd:51:5e:cd:4f:30:
2f:c0:8b:df:ae:4a:ee:fa:46:9c:7b:5a:39:9d:00:16:34:c9:
1c:ed:ae:de:1a:3d:ec:c8:19:79:c3:18:7b:66:93:ac:65:db:
25:71:c4:31:3b:c8:d4:f7:b6:94:67:c1:58:2e:af:7b:e6:47:
39:d2:16:50:3f:ee:d9:9a:3a:9e:50:71:ca:b4:11:9d:25:aa:
18:c5:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:45:06 2025 by rpki-client