Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier: HV/9h4Ma25KGSpLsB/NurgBEn6ChJm2mjfnSUYoXYno=
Subject key identifier: 35:1E:52:29:C7:4A:1A:CC:6B:0E:73:B6:BC:3A:1E:63:79:DA:57:B0
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial: 01968F27371839274541EC9D4CAFBED7F20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number: 0152
Signing time: Fri 02 May 2025 04:00:33 +0000
Manifest this update: Fri 02 May 2025 04:00:33 +0000
Manifest next update: Sat 03 May 2025 04:00:33 +0000
Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: oOYojPUXMsNGjTz7DLYkXk3lDP1NhaeJS8jUkfm+Kq0=)
2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:37:18:39:27:45:41:ec:9d:4c:af:be:d7:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Validity
Not Before: May 2 04:00:33 2025 GMT
Not After : May 3 04:00:33 2025 GMT
Subject: CN=351e5229c74a1acc6b0e73b6bc3a1e6379da57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:73:4f:4e:a3:0d:26:0f:7a:e3:ea:5b:4c:
41:ad:51:07:0e:5c:42:08:76:14:45:a7:0d:5a:eb:
7d:80:c3:26:1c:cf:cb:29:e1:7d:7c:4f:8d:03:30:
7d:77:73:90:74:4a:93:55:a7:ad:b9:d4:2b:98:d0:
a4:d5:63:66:4a:63:27:9a:cf:ff:94:ad:a2:e1:83:
2e:75:e2:3a:5d:a0:46:67:c4:b4:00:a1:54:3f:84:
8a:f3:5f:59:40:cb:2b:fa:a8:57:c2:08:34:6e:87:
b7:a5:9f:d1:b4:c0:e2:9d:23:af:61:e2:42:60:17:
7e:30:d5:34:03:03:06:20:dc:8d:73:88:4d:09:68:
59:23:20:f3:3f:8e:94:75:af:e7:78:f5:af:c3:10:
99:44:6e:59:ce:22:69:ad:96:81:df:4f:18:76:1a:
d4:d6:ab:5e:9c:1e:db:12:41:8a:93:71:a8:f4:08:
ce:34:be:10:df:2d:1d:d3:2e:1e:8f:b1:3b:c2:55:
37:85:86:37:f0:b8:7d:13:04:88:5e:d2:4e:c1:5f:
ec:cb:13:2f:e4:58:02:a1:85:23:8f:02:fc:44:ae:
e7:41:3f:17:40:3c:57:e7:c6:20:3b:39:b7:2d:cf:
9a:f3:0d:02:3d:8d:4e:95:3d:ba:28:e0:cc:30:99:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1E:52:29:C7:4A:1A:CC:6B:0E:73:B6:BC:3A:1E:63:79:DA:57:B0
X509v3 Authority Key Identifier:
keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:a7:ab:2c:31:8c:34:d4:b7:5d:3a:d0:df:dc:56:3c:cc:
f0:d0:02:89:7e:e0:f5:b6:d2:1d:7e:82:59:35:fb:4b:43:7d:
9d:42:9f:c2:04:6c:d1:6e:28:fd:d0:03:78:cb:42:29:a6:e0:
79:77:98:00:73:50:e4:50:32:fe:81:df:54:57:2c:a3:a0:77:
c8:f6:42:86:24:da:be:2c:e3:8b:1e:41:1e:66:88:35:1e:e3:
18:2b:34:e0:a9:06:df:bd:be:dd:a9:2a:d6:74:a6:ed:a5:63:
f9:59:22:dc:ea:d0:52:37:6a:6a:62:f9:da:5b:59:50:09:80:
bb:17:2c:53:7a:5e:c3:de:0c:1c:38:d9:ae:5b:78:7d:16:a7:
af:06:13:5f:00:27:ce:50:48:1e:98:16:c4:34:d1:8f:14:77:
1f:09:34:1f:37:a2:d9:4d:5d:89:59:a2:f5:71:12:6b:c0:27:
82:11:a7:21:6c:8c:8c:1e:d6:95:d6:4e:56:5b:94:7b:43:35:
80:92:02:32:0b:81:7f:bf:05:d8:6b:03:49:fc:f8:03:a2:0f:
3c:1f:83:f0:a7:3b:57:de:c1:08:41:9d:1d:06:ae:50:e2:f6:
7d:e1:d6:0e:f1:d6:5b:c0:3e:35:7f:e4:fd:4d:b7:c3:30:e7:
91:3c:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:29:13 2025 by rpki-client