Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: cqsx0Hh63HL4S8+pNmIJB7dM14Aw28p4im5GitYdUI4=
Subject key identifier: 25:80:4B:69:25:D1:25:74:51:C7:D9:A8:CC:41:22:55:2C:CF:AB:E0
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019648FCF8FFF11A0695074468BE7C669217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 14FD
Signing time: Fri 18 Apr 2025 13:01:00 +0000
Manifest this update: Fri 18 Apr 2025 13:01:00 +0000
Manifest next update: Sat 19 Apr 2025 13:01:00 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: r6ysaDihJZ+PzCF/sr3QYL/no/RsitnUHgN9Xpjf3pk=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:f8:ff:f1:1a:06:95:07:44:68:be:7c:66:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Apr 18 13:01:00 2025 GMT
Not After : Apr 19 13:01:00 2025 GMT
Subject: CN=25804b6925d1257451c7d9a8cc4122552ccfabe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:96:a8:11:da:97:52:57:2b:68:00:fa:c9:
8f:69:f4:5a:df:79:b8:e2:6d:24:3e:fe:2a:e3:93:
37:f5:db:4c:84:6c:73:28:4c:be:ce:4e:43:d6:17:
8b:6c:a4:6e:97:70:6d:a3:ec:87:37:56:6d:1d:e5:
4d:b0:5d:ce:b0:48:4e:f0:5c:fa:e0:ac:c2:e5:90:
f8:5a:a6:df:e3:eb:f5:03:da:97:8b:7c:7f:a9:5c:
4b:26:7a:7b:92:d4:63:ab:da:04:fa:6d:c5:ef:db:
9b:74:ff:4f:d4:cf:12:e3:60:85:cd:ad:c4:c5:6e:
4e:5a:6a:fd:f0:2f:75:2b:fe:a5:e8:0c:35:57:34:
27:b1:ff:62:67:eb:d9:5c:67:be:57:61:51:7b:8f:
b8:e3:b5:1a:44:0a:ff:21:44:0d:b0:19:51:26:f9:
f2:d5:6d:c4:a8:2e:72:da:4d:67:32:a5:59:ca:dd:
c2:1c:1c:9b:a4:8a:88:0d:c4:75:da:7a:12:8e:34:
ed:7f:c5:9c:c3:0b:7c:b3:97:23:7a:39:6b:9f:5b:
70:9f:f3:5c:45:ae:4b:60:5e:71:cf:8f:d1:b0:f5:
17:0a:e1:11:d2:bd:f9:c7:66:b9:9b:46:0e:7d:40:
12:27:f4:09:ee:ac:fa:b7:a9:8a:39:5a:20:b3:1f:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:80:4B:69:25:D1:25:74:51:C7:D9:A8:CC:41:22:55:2C:CF:AB:E0
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:19:b5:3e:dd:36:2f:b3:01:05:42:9f:91:05:13:bb:50:
bf:70:97:3c:7b:40:40:45:4d:c4:8f:3f:05:b8:74:13:73:9a:
b0:ef:b6:c9:88:b7:8f:07:04:8e:5b:06:19:51:8c:58:43:34:
c9:54:af:b1:51:d5:37:50:32:66:cb:2c:d4:5a:c8:fb:27:28:
bd:1c:2d:cc:14:86:e2:4a:53:77:4d:4c:b6:1c:7a:88:72:0b:
1f:2f:ba:fa:0f:e9:b5:06:dd:ca:aa:36:49:3b:e3:e1:71:27:
c7:25:5e:85:8b:77:1c:09:b0:b8:a5:5f:68:0f:5f:4d:00:d0:
b8:3e:ae:9f:f7:77:fb:36:53:37:5c:93:64:c6:5c:a5:a1:80:
96:5c:af:a4:00:d7:f4:d1:21:ed:ae:9e:cb:93:8f:fb:66:42:
39:32:26:6c:ce:da:97:e8:e9:f5:53:86:41:ba:cf:d4:80:2e:
05:f1:58:9c:e5:19:b1:38:a3:1b:75:32:93:04:69:eb:90:04:
6c:b1:8b:cc:98:5b:32:7a:9a:25:d2:61:18:1a:0f:94:7f:d8:
a1:a2:6c:a3:7b:1b:14:d1:ec:d7:bb:83:15:89:37:e5:13:98:
bb:c2:fd:3b:20:71:62:05:99:0c:d0:bf:9e:33:e2:b2:fc:b7:
18:82:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:04:35 2025 by rpki-client