Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: YZN99d/NfhIndVTklpXBtAkP+LiFxMxpq3XRrLf+OFs=
Subject key identifier: 06:E4:83:D1:03:95:C3:D9:B7:0C:DB:F8:4C:ED:5B:E7:B7:7D:08:FE
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0196B6D943B33EFE70336A09BB9C2DBAD40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 106F
Signing time: Fri 09 May 2025 21:00:14 +0000
Manifest this update: Fri 09 May 2025 21:00:14 +0000
Manifest next update: Sat 10 May 2025 21:00:14 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: /10ZJjmctHtbxuX9d+wdRyS68CzYL2K9Mvbf/1YNxXs=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:43:b3:3e:fe:70:33:6a:09:bb:9c:2d:ba:d4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: May 9 21:00:14 2025 GMT
Not After : May 10 21:00:14 2025 GMT
Subject: CN=06e483d10395c3d9b70cdbf84ced5be7b77d08fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:58:e1:41:59:e2:db:88:db:d5:0d:a1:1f:
8b:29:40:9b:4b:1f:89:c7:8d:8a:9c:b0:f7:a1:31:
ff:f9:bb:19:3c:ce:ce:69:6a:f6:48:92:a8:1d:20:
4f:7e:eb:be:9c:00:49:df:45:1e:40:5f:29:6c:c9:
f2:19:25:3c:c3:ea:37:88:c6:ba:10:47:f0:a1:0b:
b4:f6:71:6f:d3:b0:50:a1:01:e7:fc:45:13:d8:b4:
85:f9:2e:90:13:a1:35:76:e3:12:be:c3:71:f0:5c:
9e:d2:09:1d:9c:2a:b7:8b:fe:63:7f:59:d6:4a:da:
ae:89:51:14:8e:1b:72:87:bd:fa:6c:e2:af:64:4a:
07:d8:a9:60:71:2e:98:6b:bf:05:9a:f8:98:c8:a5:
7d:73:a6:bf:11:67:94:c4:66:87:14:06:f5:2d:75:
42:50:d4:21:58:a9:71:10:23:ce:30:75:5a:26:28:
5d:fa:56:f3:b3:55:ed:94:91:b1:b6:2b:12:26:ad:
61:11:75:ff:c2:1a:f4:97:0e:3a:3c:77:02:e8:09:
d9:65:e8:1d:33:c0:11:89:41:fb:a9:df:7b:70:0d:
37:04:f6:4b:95:f4:b4:45:78:dc:fe:24:bb:46:d8:
ff:21:41:21:3f:ad:f6:ed:b2:49:99:49:af:6c:33:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:83:D1:03:95:C3:D9:B7:0C:DB:F8:4C:ED:5B:E7:B7:7D:08:FE
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cf:a8:a0:ae:ac:94:2d:fa:02:64:f4:35:d8:c0:9e:d4:cd:
6a:c6:2f:ec:28:a4:9b:58:ed:62:60:ef:f0:0b:ce:3a:d0:d1:
20:37:ee:70:46:dd:17:27:16:67:29:0c:ed:38:55:50:74:5f:
b4:28:c6:39:6f:b3:26:7a:a2:5c:4c:44:ca:aa:25:e2:b5:74:
05:e6:a1:a3:55:36:13:9c:54:b4:c1:19:6d:d7:8d:b0:7c:83:
c3:d3:61:eb:db:31:25:03:66:b8:d3:8b:7a:0d:bb:15:1a:83:
1c:de:97:11:15:a1:c1:3d:08:da:74:05:60:ce:2a:02:0c:59:
5b:bd:66:67:79:dc:dd:45:5e:fb:15:d5:f7:7a:6f:82:66:d9:
69:95:09:d2:72:e2:8f:46:1b:2e:6b:e4:b9:37:f6:8f:43:3c:
64:3c:84:b1:34:cb:d1:54:8a:58:96:96:9b:2d:f7:39:97:f8:
1d:51:31:1e:37:19:9f:18:b7:30:af:6a:72:89:a9:7a:f7:54:
1d:b4:78:92:d7:45:1c:1e:af:c0:15:06:b8:0c:bb:22:e5:39:
d6:c1:b1:5d:b6:15:aa:48:ca:67:a5:aa:b4:c6:eb:2a:57:b1:
75:78:3f:7a:f4:8c:39:f2:54:25:a4:f8:e2:2a:1d:ef:d0:d7:
63:b2:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:42:38 2025 by rpki-client