Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: 9+8jxAYJEGkNCAL/ZP0F6KiL6RqE5rOZPmyKaq+S45A=
Subject key identifier: 2F:B3:D4:83:CD:88:60:29:AB:61:D9:4F:E1:30:E8:F6:47:34:25:22
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 0196BAED97F1740D46E00F2870BAD970802D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1538
Signing time: Sat 10 May 2025 16:00:55 +0000
Manifest this update: Sat 10 May 2025 16:00:55 +0000
Manifest next update: Sun 11 May 2025 16:00:55 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
5: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
6: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
7: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: qvcuS4TTQykz7TXQrCst1bJdCqorr6e3Q9VmpuTku1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:97:f1:74:0d:46:e0:0f:28:70:ba:d9:70:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: May 10 16:00:55 2025 GMT
Not After : May 11 16:00:55 2025 GMT
Subject: CN=2fb3d483cd886029ab61d94fe130e8f647342522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:21:fb:1a:b6:16:e8:87:18:a4:04:b8:a9:
43:93:8f:2e:a6:f2:40:21:2a:eb:c8:1a:6d:5a:55:
a5:f7:f7:02:8e:6e:cd:c0:b2:6a:72:d7:7c:50:c7:
b0:1b:e4:5d:eb:ee:ac:64:87:ef:02:05:0c:fb:f7:
c2:2a:f5:4f:49:bc:d0:85:8f:59:0b:f8:7e:23:7a:
e2:f5:c1:23:fa:8a:95:06:73:ea:af:bf:23:a1:b4:
92:2d:34:a6:6d:5d:bd:01:96:49:19:fa:3e:66:ca:
b0:57:c3:84:c7:01:1d:9a:c5:60:72:9a:da:71:a2:
0c:af:43:89:ea:7b:65:bf:9f:a6:bd:c8:09:b6:2d:
7a:aa:54:a8:42:02:a0:ff:2c:a2:0e:bb:33:f8:bf:
a1:70:40:85:a4:81:92:24:44:b5:2c:5e:7d:a2:61:
08:dd:5b:6a:75:40:75:10:53:73:ef:17:78:b7:33:
6b:fd:60:9c:fc:11:d8:27:b7:4b:73:d0:91:10:74:
9a:0f:db:f0:7e:7c:48:dc:a0:72:b7:fc:5e:f8:5a:
9a:a8:62:bd:91:97:a9:c8:8b:3f:27:07:e0:78:9e:
ef:c7:70:48:ac:08:08:24:e8:12:85:12:07:5c:a4:
4f:3e:00:0c:34:d6:e1:17:6b:e5:f2:a5:69:42:a1:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:D4:83:CD:88:60:29:AB:61:D9:4F:E1:30:E8:F6:47:34:25:22
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:5e:d0:00:33:22:94:7e:ed:9c:fc:c4:17:d7:27:2d:db:
48:55:8a:50:c2:85:86:35:f3:8d:6d:d7:b0:95:eb:29:28:11:
76:62:8f:98:88:41:b0:d4:55:20:04:24:ce:78:2f:bf:4f:46:
02:4d:84:fd:aa:a9:6e:4c:ef:5a:e8:09:bf:11:82:4e:54:ad:
4c:4d:c9:bd:59:3f:3f:64:69:17:93:84:be:4c:12:ab:50:7d:
0c:65:b2:22:90:ee:4f:cd:c9:59:6e:78:50:98:12:f4:d7:a5:
fc:81:32:ff:81:f0:0e:fe:77:54:2d:92:e9:b4:35:c1:4d:46:
b5:20:df:f2:bc:75:12:03:8a:3b:c3:f7:ff:83:9a:ed:52:d0:
6a:7d:72:c0:c4:6f:52:7d:3b:f5:78:9e:3e:ee:7f:df:b3:58:
d7:78:5e:dd:86:8d:2d:10:f5:7c:37:20:7b:57:8e:a2:77:ef:
fd:da:50:71:07:95:a1:5f:48:50:b8:79:9e:91:63:03:6d:60:
21:70:04:c2:b6:1b:6d:bb:54:c4:ac:e2:3d:8c:ca:4c:ab:b0:
ff:ef:71:4a:bd:be:78:76:a3:ab:c1:f5:23:5c:39:fd:d5:af:
99:1c:43:b4:e2:35:80:53:75:02:f6:c1:da:ca:52:cd:45:05:
ca:fa:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:05:24 2025 by rpki-client