Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: CCEKVIwg130c73LCWpz0CDRJN/e+x53XLTWmAZ/ef2g=
Subject key identifier: 54:53:0B:09:33:F8:8C:85:25:85:94:B5:8E:C0:81:0A:BD:5B:C9:7F
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 01967454A53D5EDC28A83A7814DCB0179DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 23:00:26 +0000
Manifest this update: Sat 26 Apr 2025 23:00:26 +0000
Manifest next update: Sun 27 Apr 2025 23:00:26 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: oNL9+PvFLzpnjjL3uX7HzaW3/8m95gRtY/kZZm77NnM=)
2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:a5:3d:5e:dc:28:a8:3a:78:14:dc:b0:17:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Apr 26 23:00:26 2025 GMT
Not After : Apr 27 23:00:26 2025 GMT
Subject: CN=54530b0933f88c85258594b58ec0810abd5bc97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:6c:70:fd:fc:00:78:1f:a5:29:2c:2d:20:
a1:3b:12:42:d9:c4:10:4c:51:65:25:c1:10:2d:4c:
25:4a:4e:72:61:e3:cf:eb:62:17:4f:ae:98:86:ba:
1a:b3:67:2c:4b:66:a9:19:1d:14:a6:ea:4d:7e:8d:
8c:14:e3:1e:08:e2:a8:ca:05:6e:20:27:bd:0c:b8:
ea:c1:80:87:ae:a1:f8:41:3a:cf:e1:32:7c:10:44:
3e:8a:88:74:50:04:48:13:f4:9f:72:a1:f8:ee:a4:
24:7b:d8:65:a6:2c:1b:4d:1e:74:64:7f:10:6f:6c:
a8:08:6c:8f:0b:cb:70:e9:8a:23:ff:14:eb:a3:e0:
0b:ca:6e:84:c2:3e:e8:31:15:58:52:c9:21:a9:a0:
aa:62:ec:41:3e:9c:94:f2:80:6d:fc:25:8e:d2:06:
6c:50:89:a7:13:0f:8c:aa:c3:31:ec:bc:b7:3e:82:
e7:ee:6a:18:6f:47:49:06:90:a5:0a:88:23:64:1b:
d9:fa:b2:bb:86:b5:c8:5b:9a:fe:43:5f:9d:2f:f3:
2d:8b:ab:d8:f3:a7:55:35:5e:96:9e:77:1a:4c:6e:
eb:ad:64:f6:6f:99:15:39:74:43:4d:67:ab:ef:73:
33:f9:aa:a8:2c:d2:f4:f1:d9:13:0f:cb:4c:c1:f3:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:0B:09:33:F8:8C:85:25:85:94:B5:8E:C0:81:0A:BD:5B:C9:7F
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:65:d0:24:e3:4e:25:ba:4e:cc:fd:64:dc:bf:3b:3a:32:42:
87:be:6e:48:1d:06:13:79:15:47:8a:1a:9a:95:a1:48:e4:d5:
ef:c2:e7:93:d6:58:0e:9c:f0:25:83:60:41:b0:b7:58:72:5c:
18:78:3c:14:f1:d8:4b:b8:5d:dc:a0:2a:5e:af:cb:d1:57:db:
e7:01:22:8e:88:e3:71:ad:f5:43:f1:c0:be:77:af:99:88:bc:
eb:7b:e1:27:09:be:50:29:31:c8:ac:06:de:4f:e4:76:83:73:
e0:eb:79:fe:89:1a:64:74:ad:be:df:39:b8:fa:a4:a9:f5:a8:
4b:e8:65:d3:13:2a:b3:4c:a8:27:88:3f:e8:3f:fe:0b:b4:d0:
79:77:89:9b:40:f3:70:c0:0e:52:70:0b:be:7c:fc:6b:4f:96:
16:23:d1:2d:48:40:18:f3:03:d5:01:70:f6:40:50:e9:40:f2:
ba:f4:7d:cf:5a:2e:b1:c2:b4:78:47:94:92:9b:90:0f:a5:e3:
dd:55:70:f0:32:23:3f:0c:2a:6b:ba:a7:97:fe:24:b3:17:bb:
32:ea:4e:4d:dd:6c:05:4a:bf:f7:4e:c7:d8:e0:17:f3:6f:80:
d8:a4:9e:93:75:f6:37:d2:44:e6:c4:86:25:a8:da:dd:34:e8:
79:0a:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:54:40 2025 by rpki-client