Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: UwlXNFQGxBdrXcJgYRJzZSyYs4OYcOCceccTIahWzKs=
Subject key identifier: 7B:E2:E4:92:F0:7A:F3:43:84:1F:67:54:46:1A:55:B0:FE:04:03:21
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0196759E708B31A6000E542F7FD2BD4E5C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 151F
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 6Xw3obWz0QVJXtutnu1vVpx6l7ojvoEpJm4UJ/jzdAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:70:8b:31:a6:00:0e:54:2f:7f:d2:bd:4e:5c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=7be2e492f07af343841f6754461a55b0fe040321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:9e:3e:9a:bf:8d:84:e4:42:69:03:7e:66:
b0:ed:f1:fc:32:71:a4:c3:75:ef:62:6a:49:22:0c:
d0:5f:de:50:6c:50:36:c2:ac:6f:92:de:f8:fd:16:
76:d6:25:9d:ff:78:2c:32:ec:6f:cc:5f:88:25:96:
64:25:10:ef:6a:8d:82:cb:10:4b:86:2a:4f:c8:6e:
26:aa:1e:50:52:fd:6a:05:7f:1d:9e:21:fe:b6:fb:
3b:46:dd:cb:2f:bb:ec:47:98:3f:aa:c9:ad:f8:4e:
6e:83:2c:95:1e:15:14:e1:44:fd:69:d9:56:3f:bd:
26:d7:cf:08:72:4b:95:06:bc:70:e1:69:18:ac:b9:
de:c5:70:e6:1c:ba:cc:f1:88:ee:0e:77:7e:74:91:
77:75:e8:b9:58:d0:3b:f3:3d:52:14:07:db:14:33:
98:48:5a:f4:56:d6:98:c6:bf:74:c5:11:a2:aa:3d:
72:ff:9d:50:16:04:e8:72:16:10:9a:2a:3a:06:dc:
20:43:d3:55:e4:0f:bf:c1:52:9f:d1:77:0e:b9:59:
81:0b:a4:f9:6d:c5:6c:35:b8:76:a3:16:c6:c3:74:
95:dc:65:eb:d5:4c:ed:ce:48:23:d6:c5:b4:c4:4b:
2b:bf:e0:06:ff:d9:86:cd:b7:8d:c9:1a:ce:e0:75:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:E4:92:F0:7A:F3:43:84:1F:67:54:46:1A:55:B0:FE:04:03:21
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:3b:e6:42:a8:cf:dd:88:20:69:b7:71:d9:46:71:77:47:
e0:3e:23:91:c8:08:9d:20:db:9c:13:37:3e:e1:5b:a7:8f:97:
5d:af:fe:d5:e8:13:7c:5b:ca:6c:e8:46:9b:f6:14:3c:de:7b:
4b:e3:1f:f3:3d:3c:76:05:c8:43:13:e2:94:fe:71:9c:b3:53:
85:5a:7f:e1:7c:cd:58:b2:6a:9c:31:c3:4c:89:9f:07:4d:6f:
9f:3d:1b:ae:ec:b8:94:53:df:4d:dd:9f:c3:a2:2d:44:ff:bd:
f0:0c:bf:6a:ad:08:dc:4b:9f:bf:0b:84:1e:a4:4a:87:4e:64:
51:92:06:ab:05:8c:5d:01:1b:17:ed:52:6f:b9:7e:60:cf:cb:
40:63:07:96:d8:68:a4:e1:fc:c6:84:45:85:ae:4e:c4:08:83:
e1:01:75:5b:68:9e:36:3f:f5:b8:2e:2b:37:f0:71:98:cc:8c:
39:c8:9f:3c:00:e2:57:ed:9f:9a:7c:cc:18:17:59:dd:34:67:
1e:0a:90:18:c0:01:14:51:67:d3:4f:9d:c0:95:79:83:6d:ec:
d1:a2:ba:6e:9a:99:21:51:be:b1:2c:4e:cd:cf:89:48:11:68:
31:d0:3f:c0:33:60:2b:51:39:b5:2b:cd:15:07:c4:db:4e:4d:
dd:77:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:42 2025 by rpki-client