Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: SOBxb6cb+rCK7lGUNRzKdpheUIRulO/ijcuCTrJaSyE=
Subject key identifier: 88:AF:A8:AB:46:69:DB:42:9D:6E:D7:39:36:27:9B:24:8A:BE:F8:FB
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 0196A051BA34E36AF3ED6F939EA7D6755547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1545
Signing time: Mon 05 May 2025 12:00:32 +0000
Manifest this update: Mon 05 May 2025 12:00:32 +0000
Manifest next update: Tue 06 May 2025 12:00:32 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: WUNB4yK6541i0h0Kdplql763nWxlIEK4gyp5mI0zK6Y=)
4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
7: VMoqlOK-MJqp996eyPBNUMTrX6A.roa (hash: 8RHtQIgLQ/EvEXhkyLFjYmtdChDMLdlv9Mb6lWVfKUw=)
8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:ba:34:e3:6a:f3:ed:6f:93:9e:a7:d6:75:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: May 5 12:00:32 2025 GMT
Not After : May 6 12:00:32 2025 GMT
Subject: CN=88afa8ab4669db429d6ed73936279b248abef8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:48:a4:18:93:cc:08:53:a3:67:65:c4:f2:
cc:fd:81:95:fb:ba:cf:18:4b:ad:56:50:65:4c:74:
a1:01:96:ae:5b:c5:47:c9:2a:6c:2f:75:02:1b:5e:
ef:50:81:da:3c:16:4c:a6:d4:12:a6:ca:15:35:f8:
77:ea:90:3e:66:b0:6d:27:8b:06:f7:d0:0b:1a:9a:
d3:ad:c9:ed:03:65:6f:d5:05:58:9e:2e:04:6a:76:
68:93:fd:78:bc:57:ab:4a:1b:84:7e:6b:1d:d1:bf:
22:67:54:5a:e8:c7:4a:61:0b:00:44:9d:c4:3c:31:
0b:3b:7c:8b:6f:c8:91:e2:f6:b8:6e:5f:41:87:7f:
96:66:65:e5:ff:26:5b:62:cd:8e:3a:ff:a0:dd:87:
8e:27:97:44:1a:f0:6a:a4:04:12:f7:b5:c8:70:b5:
de:76:cb:1c:2a:d9:ad:06:d2:86:a4:f9:25:db:de:
6e:5c:50:a7:26:0d:5e:e0:31:8d:b1:5a:0f:96:3b:
60:a9:98:a5:c7:77:c4:5d:4c:65:5d:63:12:62:9e:
0e:53:39:6b:07:33:82:de:28:84:40:af:6e:f6:9d:
d5:24:8a:e1:b2:53:2a:e7:4d:8c:79:67:7d:1a:4d:
45:fd:cd:85:ba:b8:db:ea:00:68:e7:82:85:07:38:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:A8:AB:46:69:DB:42:9D:6E:D7:39:36:27:9B:24:8A:BE:F8:FB
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:78:ec:ee:6d:24:3d:9f:6d:5b:47:16:88:39:98:6e:07:
1c:b5:03:f1:8d:5c:f3:a7:b8:7e:53:36:98:2b:0d:53:6a:1c:
5a:55:73:5a:1e:09:13:30:b8:73:69:2c:5c:86:78:d8:84:3c:
46:ea:0e:39:e2:f1:69:cb:4c:26:2c:d8:c7:fd:41:69:46:4b:
67:6d:40:ec:e8:d8:73:18:47:cd:29:0c:7a:89:09:fd:02:e1:
80:42:60:55:07:e2:01:1c:78:5b:9c:8c:9b:69:35:12:50:78:
48:b8:ef:48:b0:2d:fa:ef:58:52:40:04:c6:21:ff:8a:58:6c:
dc:bb:98:0b:43:90:a9:49:ec:af:dd:62:3f:95:c9:8f:9b:01:
71:52:c0:22:6a:11:da:81:5f:32:3a:a8:85:36:ab:64:ab:0a:
c5:1d:61:16:0b:67:9d:be:54:98:47:31:57:7d:7c:63:1f:cf:
9f:a0:87:86:77:f3:44:6a:26:fc:e1:ac:f1:dd:78:74:c0:72:
b9:37:67:a3:03:49:58:49:54:bb:eb:72:b8:9d:91:b9:dc:b0:
57:6f:ad:a9:78:a5:6c:df:a4:93:24:93:56:85:29:23:ee:db:
03:83:92:e7:f8:3d:de:f1:2c:86:36:97:f2:0b:45:dc:2e:31:
8a:a5:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:21:17 2025 by rpki-client