Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: aF02UI63EW8tO6WAgg6v3r86jBOijdJ/vimut6T0J+Q=
Subject key identifier: DC:85:4E:9E:C2:BB:67:E2:15:1C:B8:D1:46:1E:9C:28:4C:1F:37:E5
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0196BA486E5B8E15295D6558573AF97C570F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 1547
Signing time: Sat 10 May 2025 13:00:31 +0000
Manifest this update: Sat 10 May 2025 13:00:31 +0000
Manifest next update: Sun 11 May 2025 13:00:31 +0000
Files and hashes: 1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: LqEqOXqrmFl8i992+jh6+r2lRIFz75gLWuNBh8dXjqo=)
4: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
5: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
6: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=)
7: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
8: jXfsq-_2CipGq0wifdzOP5Bu42E.roa (hash: B+Vl6cetYE9FE60cfwuEU2uuw7BLT4iX6yuDh5BtpGk=)
9: yMoGVUgWkLcjGd-eCHwp0f7sYEw.roa (hash: zWDi7LVWgZCgN22tu3iijDKXUYSQ4BnSDtV5uO573e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:6e:5b:8e:15:29:5d:65:58:57:3a:f9:7c:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: May 10 13:00:31 2025 GMT
Not After : May 11 13:00:31 2025 GMT
Subject: CN=dc854e9ec2bb67e2151cb8d1461e9c284c1f37e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:12:b6:e6:d8:0c:7d:8e:20:e0:e9:b7:71:
46:0c:ab:22:09:11:a5:4a:82:45:15:27:f3:b0:0c:
6a:d3:c6:98:d0:46:32:e3:ce:32:41:1e:ed:95:5e:
2f:66:ef:26:32:f8:5f:ae:17:05:10:07:70:59:e1:
cf:75:95:40:83:7b:95:b4:14:f8:68:4c:36:a1:ff:
a5:a6:f8:13:f7:aa:b4:d2:a1:2e:4c:ea:1a:a2:62:
55:37:99:54:08:a3:dd:4c:90:45:c0:a6:f5:e4:ad:
4b:87:e6:6d:0e:8e:42:1e:83:50:cc:d3:97:87:d3:
9f:28:98:3e:39:86:38:a2:c4:46:ca:9c:48:2c:09:
f8:32:1e:32:6d:06:e3:fb:68:ae:18:06:35:00:4a:
0a:12:bd:7d:42:30:aa:9e:94:a9:26:b4:0f:38:7a:
0c:bf:62:b4:19:e3:a9:46:8b:94:c8:9f:60:88:07:
a4:20:a9:91:45:b6:a2:a2:75:59:40:19:a6:17:48:
86:9e:32:bf:19:56:99:3d:c7:6c:f6:6a:69:c1:89:
17:f0:26:fe:5f:8b:66:a7:72:be:4d:ce:e6:27:9f:
22:cf:de:09:ab:6a:8f:1d:89:6c:02:64:d1:99:05:
95:1f:4a:c2:02:ad:b5:17:78:28:31:0c:57:31:66:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:4E:9E:C2:BB:67:E2:15:1C:B8:D1:46:1E:9C:28:4C:1F:37:E5
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:9a:97:5b:40:0e:3a:0a:5d:c6:22:15:d1:b8:f8:06:24:
67:2f:e7:45:68:8a:05:7d:c4:86:31:12:34:10:39:08:b6:1e:
b7:85:59:32:64:91:d5:3a:d8:1c:4f:29:c1:92:25:88:13:e7:
09:83:0f:a8:b6:0d:94:77:68:81:63:a4:ec:2b:40:97:e1:2d:
56:36:fc:d3:7a:9b:a7:98:c5:01:3f:6a:a7:ed:5a:39:0e:fe:
78:12:e8:d7:4c:dc:16:a1:82:43:14:ec:f6:f6:64:48:33:1d:
04:bf:7b:2d:0d:c3:cc:1d:a5:5c:70:ce:d3:ab:30:b9:a1:d7:
6f:e9:f4:dc:80:24:23:58:f6:53:2d:cd:72:9d:dc:5a:7d:fd:
c8:9f:72:42:9f:bd:a9:1e:54:b0:f1:95:d7:51:1f:01:a4:07:
8e:f9:02:47:f7:dd:8a:04:d3:2d:56:b8:7d:a1:8a:33:c1:2c:
a8:c3:11:0b:d1:e5:c3:5c:ed:17:95:ec:a4:3f:3b:5c:ba:33:
e5:ec:41:08:0c:88:ed:56:02:af:66:02:d2:f2:5b:06:f5:68:
ca:d3:ff:23:0f:bd:09:00:5a:2c:97:e7:a7:48:65:88:5b:a8:
65:ed:ca:1f:19:01:45:80:b4:60:7b:d4:0e:be:63:51:ec:b3:
09:f0:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:57:52 2025 by rpki-client