Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: nHQVDRNNI7zYWkkUmeoFyKQO+OWfCfBTqYTUSjCfZ2M=
Subject key identifier: 4A:9E:07:F0:B9:96:77:32:81:D1:61:05:D3:E6:22:69:BA:5A:F7:0D
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0196A1641F91FDE57C7E3FBA0138A38A1F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 1217
Signing time: Mon 05 May 2025 17:00:15 +0000
Manifest this update: Mon 05 May 2025 17:00:15 +0000
Manifest next update: Tue 06 May 2025 17:00:15 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 6C2BEepiCaQMVtCkyhz30xXe8YE.roa (hash: LcW+0th7kvny6qypqSlzBgTR2tOOaIncb1qlmtnhBg4=)
3: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
4: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
5: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: PBf+/j3XhousOSkWmTSlqKwAK/5s0QuSUGGdmaQiDb0=)
9: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:1f:91:fd:e5:7c:7e:3f:ba:01:38:a3:8a:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: May 5 17:00:15 2025 GMT
Not After : May 6 17:00:15 2025 GMT
Subject: CN=4a9e07f0b996773281d16105d3e62269ba5af70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:cf:53:c0:47:5b:75:7f:44:60:d9:d6:e3:
d6:a9:11:71:8b:5b:10:0e:93:8e:05:d1:2a:fc:01:
a3:e1:b0:06:6b:55:63:eb:9c:e8:fc:ad:b8:ec:db:
f7:47:e2:ae:77:17:13:69:20:12:ae:d7:64:89:88:
96:f1:a4:38:5e:22:8c:ff:71:d2:05:f3:e3:23:46:
a9:05:5e:10:4b:18:44:55:99:e0:fe:07:01:d5:7e:
fb:a1:da:0c:61:53:86:01:85:04:0c:da:8b:90:bc:
d0:9b:c9:4f:98:99:d9:f5:3f:46:16:2e:ec:b3:e1:
d8:67:0d:21:e3:80:94:c8:b6:53:f6:0a:83:1d:2c:
de:1e:84:18:57:4a:14:95:39:ae:fb:cb:e6:3c:78:
df:75:dc:7d:dc:63:aa:39:31:29:b7:9e:84:9e:55:
fe:93:72:ae:43:88:9b:98:c4:1e:6e:0b:a0:12:86:
16:0f:9f:4d:7f:26:30:41:96:ab:ea:08:35:0a:88:
ee:21:4c:94:b2:0e:43:18:2d:63:b3:5b:ce:2f:0d:
13:03:f2:35:f2:2e:08:a0:bb:48:a3:49:eb:05:dd:
24:3b:fa:0d:1c:92:35:2b:c6:c9:43:29:21:f2:79:
8b:d6:2c:f7:68:ad:9b:09:4b:94:4e:ec:ae:f5:58:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:07:F0:B9:96:77:32:81:D1:61:05:D3:E6:22:69:BA:5A:F7:0D
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:c2:12:0f:c2:80:e1:fe:41:e8:23:8a:20:b3:9a:ce:bf:
f4:65:9d:c7:48:0d:8f:b8:87:7d:3f:c7:ad:81:f7:23:d1:57:
f1:20:44:4b:c8:9f:e6:e6:0b:6b:fa:77:84:7b:fd:40:81:65:
b6:5d:55:05:cc:32:7c:92:94:23:bb:ad:eb:0d:05:01:00:d9:
59:a2:33:3e:5c:ca:d6:f9:56:a7:20:4d:e6:2b:47:4c:b3:04:
8e:64:ac:8d:14:3e:32:e2:07:74:37:b1:b3:cd:fe:38:6d:7b:
07:c0:ae:1d:b1:64:48:6b:4c:d7:ec:69:9c:2c:90:3c:0c:95:
b0:68:0e:ee:4b:18:31:75:5a:7e:fe:7c:47:8c:56:ee:bb:47:
69:1c:1f:6e:b5:4b:84:86:ff:15:fb:68:a7:57:68:83:af:5d:
eb:2f:af:35:63:07:06:1f:fd:ac:c1:6d:9b:fc:95:cb:53:28:
4d:ec:f7:81:44:26:fe:49:bf:2b:15:27:5c:4c:86:ed:30:8c:
1e:e2:5f:9e:cc:b1:1e:b5:ff:3c:47:37:f2:3a:70:43:1f:78:
01:5f:e2:b4:43:02:1d:2a:c8:4a:d9:73:89:9b:67:61:01:41:
93:6a:9c:09:27:87:7d:32:88:61:a4:99:40:2e:f0:40:08:53:
06:f2:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:50:42 2025 by rpki-client