Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: saVNEr5rUhDHzifozOqbsTiUgcHLo0fAZh9DI5qqoX4=
Subject key identifier: 86:BA:51:5F:9A:3C:AF:5F:B0:9E:84:7D:09:41:EF:50:9D:13:D7:2D
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019673793A380BDC244EC077FB0DF73C923A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1513
Signing time: Sat 26 Apr 2025 19:00:46 +0000
Manifest this update: Sat 26 Apr 2025 19:00:46 +0000
Manifest next update: Sun 27 Apr 2025 19:00:46 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: Tbxdj2+dfbF5gogOEan89y/b3VY6taACaRiBx0q4Z34=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:3a:38:0b:dc:24:4e:c0:77:fb:0d:f7:3c:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Apr 26 19:00:46 2025 GMT
Not After : Apr 27 19:00:46 2025 GMT
Subject: CN=86ba515f9a3caf5fb09e847d0941ef509d13d72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:da:68:11:ab:31:20:5d:ba:5a:10:9f:54:
ef:05:5a:70:46:d3:cd:ff:25:51:54:24:18:5d:94:
82:77:b7:bb:fe:89:19:08:c6:9b:be:c5:11:ba:c0:
ab:7a:33:26:8e:cd:7f:10:e6:79:69:a0:8d:0a:b5:
d3:50:12:ea:07:8d:b1:c8:41:8c:2c:39:78:1f:2e:
d7:29:bf:3f:9c:ca:bb:47:d7:f6:0d:e8:1d:18:20:
66:f9:e0:dc:6a:62:aa:21:1d:82:df:33:d1:42:d3:
93:2d:6a:2d:47:cf:4e:7a:26:bb:56:4c:7d:85:68:
5e:66:9c:fb:32:08:f4:29:d9:a9:56:db:e3:2a:16:
9c:06:fd:72:28:24:18:3e:3f:d0:47:d0:76:de:87:
f9:6f:9e:c6:8c:5a:48:c9:b7:4a:4e:11:33:d9:d7:
9d:cf:b7:87:76:07:3b:4a:71:03:ca:a6:36:c3:02:
18:3d:ad:12:a9:e1:c0:38:d0:4f:23:d9:35:1a:18:
5a:f5:0b:9b:20:c6:79:f5:16:42:32:57:ba:e2:07:
c2:8a:b9:05:92:1a:02:3c:92:d9:1e:87:49:f1:ac:
00:58:e3:6d:c9:50:bc:ff:f0:e0:12:4a:71:08:36:
60:5b:9e:db:0e:1e:b9:d0:42:72:14:79:4f:c6:08:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:51:5F:9A:3C:AF:5F:B0:9E:84:7D:09:41:EF:50:9D:13:D7:2D
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:69:40:04:0a:05:73:86:d3:28:c6:c8:89:3c:e4:1c:cd:
e6:3e:c2:57:5f:c1:08:48:5c:6a:8a:4b:de:cd:14:a4:47:58:
fd:55:1f:a8:28:96:e4:11:e2:af:94:14:e0:2d:d9:0f:c2:77:
32:67:46:ad:19:c5:db:72:a8:2d:86:8b:fc:ec:fb:e2:d5:84:
9f:10:a2:6e:4a:76:a7:4c:07:22:34:9b:20:c7:14:fd:de:34:
2e:87:2d:9d:4b:c2:72:71:0b:99:11:43:68:d9:12:d7:59:72:
94:5b:f0:8c:df:2d:22:0d:09:93:ce:64:8c:9f:b6:ef:ed:58:
3e:9a:08:8d:f2:01:f0:33:bf:30:ca:32:e5:df:1f:e5:06:fb:
5a:f4:b9:2f:5a:97:5e:03:df:86:46:bb:e2:14:50:e8:6b:07:
dc:0b:6b:02:a1:82:88:d9:e9:9e:d2:cf:40:59:2a:00:54:d0:
19:3e:7b:64:9b:ed:f8:f0:41:81:d5:db:73:a3:2a:cc:c6:ae:
25:bf:2c:51:71:a5:5e:13:11:cc:25:9b:e4:23:17:9f:1f:48:
00:11:a1:d9:ce:ba:51:1b:b0:78:f4:d0:14:05:bd:65:73:cd:
36:27:34:ed:2a:bc:6e:fa:89:87:21:00:15:84:0a:cf:4f:98:
47:d9:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:25:15 2025 by rpki-client