Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: gqIRuGC92jqhGJ5SPoVC/jf+QZoi8b//gtuL/VUS6Qw=
Subject key identifier: EF:14:40:46:AB:53:A9:2D:E5:9B:FC:80:29:A0:61:04:3C:4D:AB:FD
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0196C2394376EDF1B25723EC0F0CC997A28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 02:00:54 +0000
Manifest this update: Mon 12 May 2025 02:00:54 +0000
Manifest next update: Tue 13 May 2025 02:00:54 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
3: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (hash: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: KDM4rXjbcsS1DLEhMM4kEgH58RE.roa (hash: nJE4dlKDHUmjXp0Xdi00ikIZCMR+yvC+rxJD7lUuOrk=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: MjoAbad+GUSLvD1D+1nZ4yhTbBmnyCbZDpISannbsxA=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:43:76:ed:f1:b2:57:23:ec:0f:0c:c9:97:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: May 12 02:00:54 2025 GMT
Not After : May 13 02:00:54 2025 GMT
Subject: CN=ef144046ab53a92de59bfc8029a061043c4dabfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:b1:7b:0d:3d:80:60:5d:81:87:0b:66:3c:
20:58:8f:c4:66:86:84:48:74:f2:98:a7:73:96:bb:
0f:b2:ab:12:d8:d8:a5:e7:15:ad:04:8e:80:19:78:
e4:51:ee:e6:e3:bd:8d:d1:9e:51:8d:0a:e1:04:37:
a1:2d:75:9e:c8:2b:c3:be:f3:74:8d:de:df:a1:5f:
29:46:ec:4a:67:eb:ca:ef:b4:21:19:a6:89:d5:d8:
8f:c3:f6:67:c1:89:a0:4f:37:1b:20:4b:9b:a5:ed:
83:1c:65:46:a0:59:37:d4:43:45:ca:91:cd:0d:b6:
15:05:df:37:75:cb:21:43:c1:a1:89:ad:bc:18:f4:
7e:27:3f:c4:8b:ee:3a:f9:35:d3:9f:12:be:51:e6:
59:64:3a:40:ee:ec:18:e2:fd:98:12:02:4c:58:97:
26:5a:b3:3e:b4:fb:01:f6:e4:39:8b:9d:00:93:3c:
26:f0:7a:bf:2b:24:0e:e9:fc:02:8f:48:75:dd:9d:
6e:34:85:80:37:54:7e:eb:90:71:10:84:41:98:19:
b5:ba:e0:2d:e1:a2:29:c2:27:60:3c:13:54:f2:3e:
95:d1:b4:10:7f:5d:6d:d6:85:73:2d:64:dd:a9:2b:
d7:ca:60:3e:e3:20:18:6a:4d:e2:7a:59:a1:39:bd:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:40:46:AB:53:A9:2D:E5:9B:FC:80:29:A0:61:04:3C:4D:AB:FD
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:ca:f1:bb:c1:6c:4b:30:44:07:81:03:d9:26:9b:f8:68:
ab:6b:84:fe:5b:37:fb:38:fe:8c:02:00:c9:97:84:ab:58:a8:
c1:68:6a:76:65:03:3f:f1:40:26:61:5e:66:61:2c:88:d3:cb:
9d:e1:17:12:05:97:9f:0d:9c:7e:3c:a4:10:4f:4e:c4:7b:2a:
80:19:f6:11:40:bc:2e:07:80:c1:6c:af:88:6c:ce:3b:d2:74:
5d:c9:07:1a:54:8d:74:41:9a:3e:cc:62:fe:99:b8:7b:fc:33:
9f:59:c6:d6:4f:53:ce:b3:55:45:8b:12:3e:e6:c3:69:43:2b:
fa:f8:f2:79:ae:d7:93:50:f3:37:45:37:20:88:4a:93:b4:31:
3e:96:ad:45:3b:34:82:b3:80:78:55:96:25:75:21:1b:c4:95:
5f:1d:c7:23:2b:c7:84:77:2a:2d:2d:79:e5:85:41:86:90:15:
5a:5f:53:c9:3a:f1:f7:0c:f2:87:da:59:c3:23:b9:cf:37:2e:
ac:95:c1:6b:0e:8a:df:95:8d:d5:b9:9e:54:68:ae:c6:05:06:
7b:fb:e9:58:1c:89:a5:40:bd:b0:a1:8e:60:4e:16:1a:fc:cf:
a9:c8:a1:94:90:ef:1a:6c:30:13:17:98:90:01:55:d0:e9:fc:
b9:38:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:17:27 2025 by rpki-client