Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: 2v4cQSt002NOBq+H4bYwSFF4lcHf3r66pVifZZV37pw=
Subject key identifier: 92:91:64:09:4D:B2:6B:9B:68:F9:3C:92:E4:22:E2:26:EF:2B:B6:0C
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0196B1B3293700AC78811D08B383E9B7EC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 153F
Signing time: Thu 08 May 2025 21:00:30 +0000
Manifest this update: Thu 08 May 2025 21:00:30 +0000
Manifest next update: Fri 09 May 2025 21:00:30 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: CAHWyBqHrd5P4fqHTGlb5o6YrZgjQwBYMXIn3wRncIg=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:29:37:00:ac:78:81:1d:08:b3:83:e9:b7:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: May 8 21:00:30 2025 GMT
Not After : May 9 21:00:30 2025 GMT
Subject: CN=929164094db26b9b68f93c92e422e226ef2bb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f0:23:6f:14:14:01:c8:d2:c9:b8:82:9c:aa:
df:3a:ea:e2:a1:9b:19:58:f4:2e:9b:32:f2:30:81:
65:f3:de:fe:95:c9:84:f5:6f:69:66:b7:02:f2:45:
28:2b:db:57:05:00:aa:49:bb:97:ce:47:9e:c9:1e:
c3:e4:d4:e5:bc:c9:14:aa:b3:a0:37:c8:07:38:9d:
7e:be:3f:d5:b1:c9:d5:83:1f:df:34:18:30:4c:0c:
1f:c9:56:0a:41:97:5f:20:bb:ef:ce:f7:b1:de:07:
e3:ae:12:02:83:7f:06:f7:bb:d8:38:04:8b:20:31:
d8:54:d9:c6:9c:4f:17:78:6b:34:75:92:eb:43:c0:
83:23:17:39:82:86:c3:3f:dd:4b:f2:e4:ed:e6:f4:
07:2d:f3:89:f1:f3:f5:bc:14:51:aa:a3:40:b0:9c:
22:d8:2e:8d:94:e9:a4:14:fc:7d:43:e4:a4:a3:f5:
f8:78:61:81:48:dd:2e:73:b6:4f:0f:5a:64:4e:3b:
b6:b3:c3:64:6d:ae:94:0e:96:01:54:58:99:fd:8b:
63:a2:10:0a:04:3a:06:d9:9d:04:f6:22:10:2f:02:
ad:d2:9e:69:39:e9:72:de:30:7a:80:93:5d:f6:45:
ef:ac:31:fe:f0:d3:e1:aa:84:c8:cb:0c:ff:e2:06:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:64:09:4D:B2:6B:9B:68:F9:3C:92:E4:22:E2:26:EF:2B:B6:0C
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:ce:e8:b7:68:5e:ce:91:cf:74:d1:e3:09:a5:05:ed:a1:
21:d2:2c:6a:eb:03:3c:39:0a:89:a2:b6:9d:08:a5:e4:19:a4:
92:b3:8c:9e:c1:67:2b:45:df:a1:fc:a1:cf:a8:67:5a:ec:4e:
e4:e2:70:c7:dc:63:73:91:34:3e:b3:1b:c0:cc:5b:35:a0:e0:
1f:06:1f:00:bd:81:1d:a4:a7:96:91:7c:ba:04:ca:ae:c6:d7:
02:c5:41:0f:c1:86:c6:94:7e:df:8d:87:f5:7d:37:98:96:1a:
8b:b6:5b:08:84:6d:c4:08:3a:5f:39:ff:56:c0:6f:03:99:8b:
41:1e:3d:d3:05:83:e1:75:24:35:9e:d5:ea:19:9e:af:32:b8:
51:e1:90:e8:b4:ed:38:0b:f2:0c:44:af:8a:c0:ed:6f:a5:1d:
6b:a5:87:1f:d9:52:a8:4a:9f:96:c1:b9:b0:7c:0b:84:bb:c3:
01:5f:57:5d:27:9c:86:a8:30:12:07:e5:63:95:8d:cd:88:b4:
99:26:98:b7:eb:5f:22:c4:b0:1c:73:68:85:30:3d:41:ae:50:
b5:cc:b6:90:52:2f:16:b1:7b:68:64:fb:d1:7f:a7:1f:d5:29:
1d:b3:25:06:09:72:c5:3e:33:ae:23:ce:e9:ca:c4:ab:fb:be:
d4:5d:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:17 2025 by rpki-client