Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: pY6D4eZeYw3eo+6kNn82clFTSBiq89huT8IIxr55O90=
Subject key identifier: F9:DD:23:6E:35:D7:F0:D7:61:4E:DD:FE:B0:CA:A1:F4:0F:77:7B:99
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 0196BE25854212B9C24BD32C87C0303B401C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 1547
Signing time: Sun 11 May 2025 07:00:52 +0000
Manifest this update: Sun 11 May 2025 07:00:52 +0000
Manifest next update: Mon 12 May 2025 07:00:52 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: MasGOxd/gWutsvioPgYCukQodS+3J8bqMzMwVrYCeq8=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:85:42:12:b9:c2:4b:d3:2c:87:c0:30:3b:40:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: May 11 07:00:52 2025 GMT
Not After : May 12 07:00:52 2025 GMT
Subject: CN=f9dd236e35d7f0d7614eddfeb0caa1f40f777b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:44:b3:4e:74:c5:ac:17:76:e6:82:c6:e8:
fe:73:f9:33:89:c8:66:a8:8a:73:70:9e:2a:15:2f:
f4:a2:43:65:82:ba:c7:58:e5:11:91:15:c0:31:4f:
08:1e:dd:76:77:49:d5:a6:28:b6:43:37:7f:17:d8:
58:ea:a7:a2:5e:7c:92:19:02:66:53:e9:d7:fd:d1:
ab:3d:80:13:1f:25:f4:b7:62:0b:ee:b7:67:c2:d3:
f9:5f:f6:14:0c:6e:57:3e:bc:b4:d2:59:c4:68:db:
71:b5:f5:93:94:f5:a2:04:ef:8a:2b:43:0e:9b:6f:
8f:55:27:23:43:c3:77:d2:54:d3:d4:27:3f:56:ff:
9b:4e:34:68:65:0a:27:98:07:b1:c4:c3:42:65:aa:
0d:da:d6:af:2d:68:fb:f1:d8:f9:c2:15:77:38:cd:
c7:1b:84:50:1d:96:08:b0:08:7f:59:ae:b5:2c:9c:
08:40:ab:3d:f8:72:68:20:51:e0:71:fb:83:85:6b:
58:dc:c8:9d:a9:74:2b:4e:b3:8c:3b:33:4f:1a:62:
e1:61:66:51:cd:9b:b7:c7:0f:f8:50:b1:f3:0d:11:
f6:0b:77:21:05:37:2d:ff:78:46:c0:02:ef:3c:ec:
14:37:5b:ed:48:63:25:9e:c6:0f:d7:d7:96:c6:b8:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:23:6E:35:D7:F0:D7:61:4E:DD:FE:B0:CA:A1:F4:0F:77:7B:99
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:cc:ea:c3:77:43:ba:b2:76:e1:f5:ae:29:6c:99:11:dd:
ab:a9:36:da:8d:f3:1f:b0:c0:2f:53:84:6e:0f:b3:4b:df:09:
d9:4d:1b:fa:1b:df:86:16:3a:f9:e5:1a:5b:a0:1b:13:e3:d3:
8f:16:96:64:d2:ea:da:df:06:ae:25:4d:c4:c3:b4:df:2e:97:
f3:50:c3:ae:ff:37:1a:e9:55:1f:62:a7:ee:4e:5e:aa:f0:d3:
d1:6f:e4:37:f1:61:5d:e5:75:e3:08:ae:a1:79:c0:21:e0:62:
1a:fb:4c:5a:f6:a2:f2:c3:1f:f7:d8:d9:d6:a4:65:96:71:40:
d0:cd:72:81:82:21:80:f4:58:12:1b:f6:de:5b:e5:a4:24:80:
e6:f2:c5:55:02:36:b4:67:3a:00:2a:3e:81:81:b3:c6:f2:33:
00:a4:3f:d2:47:c9:28:7a:9d:f5:9b:b5:cf:9e:26:f6:29:cc:
28:4f:b0:6d:cc:b7:83:1a:91:0a:55:eb:8e:cd:5a:22:7a:3c:
14:ba:1f:1c:83:18:fe:f8:bc:4c:ea:b2:fd:f2:33:1c:ac:1b:
b5:98:61:53:61:78:57:53:f5:86:5e:6f:ed:0b:d2:55:93:dd:
ac:83:4e:81:4d:1b:96:52:c5:97:9a:aa:cc:92:81:56:a9:48:
d7:53:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:52 2025 by rpki-client