Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: 2f8nZhT6qYRfIj0RGNHp1s7nbsJBTfHXfP74VbV8bp8=
Subject key identifier: B7:5F:CF:E7:79:4B:21:CC:9E:E7:35:88:3A:68:14:D0:B2:C3:DD:B3
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 019648C58772AEFBDCC0E705A97928A8C97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 148C
Signing time: Fri 18 Apr 2025 12:00:26 +0000
Manifest this update: Fri 18 Apr 2025 12:00:26 +0000
Manifest next update: Sat 19 Apr 2025 12:00:26 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: tc7OecUr3Sukz0Im1vwlTNV3HDQ6QQCH6sJZCq/dMII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:87:72:ae:fb:dc:c0:e7:05:a9:79:28:a8:c9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Apr 18 12:00:26 2025 GMT
Not After : Apr 19 12:00:26 2025 GMT
Subject: CN=b75fcfe7794b21cc9ee735883a6814d0b2c3ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:f0:cb:f7:7b:a5:83:43:44:ed:3a:c6:be:
ff:59:63:3b:00:04:41:d5:40:15:1b:3a:9d:02:0e:
d6:00:4d:12:29:15:c0:15:f7:fd:22:ec:2f:5f:e7:
c8:46:e8:6a:79:ef:f9:22:e2:23:c0:05:62:5c:1a:
3c:11:92:e1:d1:0e:96:a0:65:b2:41:22:b5:80:53:
d5:4f:f6:e5:87:da:fb:a1:b0:9c:38:77:9e:a1:6c:
1d:0c:f5:c0:e7:3a:64:9b:cb:dc:a8:87:6c:50:1e:
c2:b4:9c:4d:f3:f7:63:bf:24:cd:a8:94:73:5d:e3:
69:86:89:eb:09:0f:96:1b:2c:bf:44:af:99:88:c3:
4c:48:ed:fb:ae:b4:ba:10:46:eb:6c:ce:5c:5f:52:
7b:7e:de:3b:55:84:d2:1a:00:e8:3a:3e:4c:29:97:
3c:92:09:90:07:13:0c:6c:c2:2e:af:c9:b9:8b:26:
e2:c5:bc:c3:ad:7c:b5:71:c9:5e:36:f8:6a:3e:d4:
4f:61:b9:0a:7d:c9:0d:25:71:66:ea:78:29:e2:d3:
af:44:2e:13:d2:01:0c:0c:85:9f:42:a2:af:10:d8:
67:cf:78:16:dc:3f:ac:79:96:1f:e9:90:a6:e9:a9:
ae:6b:70:8f:01:4b:f6:eb:ed:97:04:b2:0b:6a:d3:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:CF:E7:79:4B:21:CC:9E:E7:35:88:3A:68:14:D0:B2:C3:DD:B3
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:9c:cd:3b:2b:68:bc:35:c6:01:70:db:81:6d:a5:ec:27:
58:24:df:e9:87:16:d5:8e:fe:3d:14:1d:ab:50:b2:2b:01:2c:
a0:80:c8:93:8b:a7:83:08:da:ec:31:51:1b:90:d4:bc:e6:1f:
a8:0a:c3:64:4e:e4:e5:3b:6d:f5:7b:be:cc:45:ee:18:b4:3c:
3e:b7:3d:e7:5f:4e:7e:5f:80:0d:ee:8a:31:3a:83:65:b8:d6:
0a:c6:83:ba:ca:f4:3d:02:80:2c:c0:2c:a7:c4:a5:67:9c:e2:
51:ef:e5:a9:89:bd:2f:f2:ca:9e:08:47:96:7d:2b:78:0d:d1:
a7:71:99:a5:93:46:79:fd:92:f7:a1:58:3a:93:c1:d1:25:58:
a5:3b:eb:2d:f9:85:83:66:d6:2e:27:1c:7d:d6:8a:19:cd:3b:
49:3e:11:b9:d7:07:d5:e8:70:ae:84:33:ca:3b:84:e8:3a:c2:
3b:d6:c5:22:03:34:1a:8e:e8:a8:89:27:9d:12:a2:84:d9:72:
09:a8:e7:41:ea:68:81:17:ed:48:5d:b4:08:59:13:fc:3f:90:
6b:21:df:42:5f:95:00:d8:00:48:5e:16:aa:cb:6f:48:f6:34:
d9:7e:29:32:e1:6d:0b:2c:80:67:b3:54:18:02:56:22:f8:e8:
78:e4:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:26 2025 by rpki-client