Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: rVoe6t8FabVtOcyV1Qkd+gHTBPzmgUNSLMycWoUb36c=
Subject key identifier: A5:A3:07:6F:A7:9D:1C:D9:23:17:5E:31:49:75:18:DF:25:1F:9B:79
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0196A49C1CD91B741E4936B06DBCC466DBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 0D38
Signing time: Tue 06 May 2025 08:00:16 +0000
Manifest this update: Tue 06 May 2025 08:00:16 +0000
Manifest next update: Wed 07 May 2025 08:00:16 +0000
Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=)
2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=)
3: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=)
4: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: MPxgtYkin6kFFeeJDJ/oESrq9vQi+0Ho4LWjKpiDvb8=)
5: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=)
6: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=)
7: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=)
8: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=)
9: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:1c:d9:1b:74:1e:49:36:b0:6d:bc:c4:66:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: May 6 08:00:16 2025 GMT
Not After : May 7 08:00:16 2025 GMT
Subject: CN=a5a3076fa79d1cd923175e31497518df251f9b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:99:dd:c7:df:c0:a7:8f:0d:19:5e:c7:4a:
60:f7:78:03:f2:4d:c4:4b:65:2d:5e:ed:c4:7a:55:
6d:6e:07:d2:52:14:54:87:9d:67:af:b9:4b:18:23:
60:af:c6:5d:a8:4a:5d:95:5f:22:04:59:67:c4:0c:
d9:b6:89:61:b7:9a:b8:d5:4d:3d:3c:97:dd:a6:81:
29:ff:8e:d3:18:4a:e8:af:ef:45:b3:40:72:76:ff:
b0:51:42:4a:c5:60:5d:0b:e2:be:b8:3a:c4:ff:1a:
f0:59:53:0f:ad:3c:91:5c:1c:fe:cc:8b:c5:10:3c:
98:8a:7a:b2:24:3d:16:f8:44:8c:7b:64:fb:a6:a9:
46:d1:44:35:60:e2:97:a0:e5:9f:c2:35:95:42:e9:
04:b1:86:ba:3b:99:a5:dc:2c:f0:1d:27:2c:a8:e4:
5e:2d:76:b1:f2:6e:67:ea:c4:75:01:dd:c8:ae:a4:
e7:62:a3:45:83:a6:1d:6a:d0:10:21:f0:4b:13:d6:
b7:94:d0:8c:66:da:50:e7:c4:d4:66:77:21:81:48:
48:61:96:bd:33:e1:b4:ef:30:a1:02:37:83:b8:54:
90:a7:d9:81:0a:65:c6:1b:9f:ae:d1:80:bc:26:85:
64:65:ca:5b:78:b5:16:3e:34:a7:99:b8:bb:2a:cc:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:07:6F:A7:9D:1C:D9:23:17:5E:31:49:75:18:DF:25:1F:9B:79
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:b4:c4:d8:b5:5f:80:20:f1:2d:91:62:16:e6:5b:78:14:
56:51:12:36:d9:77:18:73:6a:51:0f:73:7f:ed:63:76:0a:5f:
c2:57:c3:8a:ca:4d:e4:28:f9:f1:ac:c2:57:8c:fb:30:30:7f:
17:66:94:5b:d4:28:60:3f:16:c4:d8:e5:92:f9:bf:a8:00:76:
09:08:e4:58:97:07:de:c5:d3:de:93:85:a8:57:ec:cd:0f:25:
36:70:98:d1:0f:b3:e7:19:c6:81:7b:66:21:58:a1:36:9c:0c:
50:df:5b:dc:45:56:cd:32:9e:81:d0:62:9e:e6:4c:d8:ad:93:
25:d1:c0:37:f9:a0:31:70:46:28:28:45:a4:c4:4a:b2:a0:53:
4c:af:09:f1:ff:87:5f:ae:11:4f:7d:63:97:8c:a9:c7:53:d4:
7e:0e:b4:8c:a3:17:61:b3:da:ec:42:3d:ac:8d:44:f0:69:d4:
bd:2f:12:bc:47:00:5a:ab:c9:46:64:73:01:ef:45:c8:f4:69:
98:be:d9:7a:14:bf:d8:e5:c8:02:49:82:2c:48:2a:c3:3e:c8:
29:55:a0:72:ef:65:d0:24:b8:0a:a0:03:99:07:e1:23:49:90:
0c:e4:33:10:ee:cc:25:04:ef:bf:04:22:a6:05:3f:67:d9:50:
62:09:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:23:25 2025 by rpki-client