Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: RJL0aKtsiRR4+i9jFs+LSaGkTKiOU7iV2OrLjsnxiMs=
Subject key identifier: B0:E9:FD:99:A8:0A:A0:AB:1D:4A:C4:9C:31:6A:F4:83:22:67:9B:54
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0196C6F12E878B8CE5C0631FC6ADE69B5CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0A6F
Signing time: Tue 13 May 2025 00:00:16 +0000
Manifest this update: Tue 13 May 2025 00:00:16 +0000
Manifest next update: Wed 14 May 2025 00:00:16 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: wnCvLybiLtM6bIAB/NLx1V8/WZyFVkj36O4GL9HwSOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:2e:87:8b:8c:e5:c0:63:1f:c6:ad:e6:9b:5c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 13 00:00:16 2025 GMT
Not After : May 14 00:00:16 2025 GMT
Subject: CN=b0e9fd99a80aa0ab1d4ac49c316af48322679b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:37:09:e3:10:bd:3d:59:05:c7:55:d4:3d:
0f:94:bf:7e:4a:1e:a3:2d:b2:a1:61:81:df:44:d1:
cb:c2:db:93:9a:2c:7e:a9:8a:ad:96:14:fa:71:d4:
35:c4:51:21:e8:03:66:1b:48:d4:1e:02:a8:30:87:
e5:be:89:9d:e9:3f:89:04:bd:81:71:77:b3:ea:46:
8d:87:2e:a8:72:e4:a2:90:31:f1:5d:a7:e7:09:88:
66:fd:f7:bd:34:0a:92:c4:11:87:2a:be:8e:9b:7f:
f4:72:52:3f:9b:84:1d:63:6d:bb:f8:86:50:6b:1a:
59:45:14:2b:32:8a:7c:53:51:44:c3:8f:41:32:8c:
a0:42:cb:85:b2:ac:9b:50:53:ac:4b:63:93:f2:87:
11:14:5f:86:ca:fd:bd:16:6d:95:9c:3d:67:ec:c7:
2c:15:d2:27:c4:91:ae:07:69:61:7c:3c:38:7f:ef:
ba:a8:dd:c5:d7:77:04:a9:a1:cd:36:ab:17:a5:91:
3d:d6:c9:fb:31:7d:be:ec:ff:85:1d:29:8f:2b:c3:
fd:ad:2b:96:4a:64:ca:2f:a0:94:56:64:d3:65:f7:
6d:19:1e:92:b8:55:c2:c8:e7:cf:02:cc:dd:b3:7b:
3d:6e:b9:43:e0:5b:97:6c:29:bf:b5:77:78:4b:05:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:FD:99:A8:0A:A0:AB:1D:4A:C4:9C:31:6A:F4:83:22:67:9B:54
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:23:ce:09:b7:e8:fa:4e:59:e1:a5:0f:e8:7e:aa:15:a7:
aa:37:e9:ce:e2:49:4f:6d:e2:f4:ff:0d:d0:8c:52:0d:c3:e5:
f8:ab:9f:6a:96:1e:08:e0:26:9b:2e:31:81:ae:da:fe:cf:a4:
32:1c:ab:c3:f2:56:d3:db:45:10:a8:26:9b:19:5b:98:9f:f4:
a3:4d:8c:da:2b:73:36:27:fe:25:1b:e5:1c:0d:d7:3f:ad:63:
9a:67:c2:3e:70:71:b5:b6:a3:56:d0:b5:a1:bc:33:ff:6c:12:
aa:63:9e:fa:4f:7e:e1:68:21:ff:af:a6:17:45:93:44:b5:59:
cf:ba:71:a4:22:8e:9b:ab:0a:3a:60:21:f6:b3:62:89:4d:16:
e2:01:f9:65:c4:87:a3:6e:11:b7:9c:c5:1a:50:c1:4b:55:d3:
74:4a:3c:ea:bb:32:5c:f5:7b:dd:54:70:a0:20:09:e3:a0:f4:
57:df:55:f3:0b:f9:77:36:b1:63:5b:48:af:b8:1d:3d:1b:30:
f8:db:67:e8:71:50:88:29:98:a0:b4:8a:6c:3f:c6:0e:5e:4e:
49:cb:f2:92:50:fe:41:01:72:74:18:e6:78:65:44:95:6c:83:
f8:ac:42:f7:10:29:56:c6:74:f7:23:1a:72:99:71:85:83:32:
48:e1:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:24 2025 by rpki-client