Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: 0+5PDPmFVlh9AbVS/+IQpFO1MMuniBI3okRIRzbAzfg=
Subject key identifier: 98:E8:1E:F9:D7:C8:27:66:B7:E4:95:1A:6A:C0:E3:4D:F7:B8:7E:1D
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0196B145235E157FA5319A2C9610DC9D1208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0AF4
Signing time: Thu 08 May 2025 19:00:20 +0000
Manifest this update: Thu 08 May 2025 19:00:20 +0000
Manifest next update: Fri 09 May 2025 19:00:20 +0000
Files and hashes: 1: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: UX++0/TXkOg5w2/T5r/vT/oCUE2NZbx2uYrhIMhnRwM=)
3: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
4: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
5: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
6: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
7: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
8: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:23:5e:15:7f:a5:31:9a:2c:96:10:dc:9d:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: May 8 19:00:20 2025 GMT
Not After : May 9 19:00:20 2025 GMT
Subject: CN=98e81ef9d7c82766b7e4951a6ac0e34df7b87e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:93:c4:ce:92:e1:87:f6:1b:08:5e:cc:b1:22:
94:34:08:11:c3:ed:13:85:e3:ee:57:d2:7f:80:26:
40:da:48:6f:9c:2a:a4:67:2b:4d:0d:2a:4c:3d:2f:
f5:78:b7:94:e0:2d:74:dd:97:43:7f:7e:45:4f:63:
56:95:d4:b9:4e:d8:48:8f:29:fe:0e:aa:88:e8:7b:
27:20:27:29:cd:ec:e9:c3:29:d3:b3:0f:3e:0a:8c:
92:1f:c2:50:74:c9:e4:ec:20:d8:25:2e:1b:f6:ec:
a3:33:2f:1a:de:05:75:09:cb:db:57:15:59:db:7c:
be:43:bf:dc:a5:0a:46:2c:00:89:b9:d9:30:7e:94:
8c:90:cb:c9:02:40:eb:d1:4d:86:a7:ba:8f:10:8c:
cd:6e:4d:f8:8d:56:2b:94:27:9b:4f:bf:91:ea:77:
e2:ce:1e:75:ac:7f:9e:b3:57:d9:fa:e5:8b:85:7b:
db:d0:91:72:14:53:e9:35:17:4c:24:c8:14:85:47:
37:05:5f:1e:9b:32:73:bc:a8:c3:3c:ef:e6:7a:bc:
95:f4:d9:2f:f7:4c:57:e5:8e:f8:0c:be:0a:1e:19:
19:69:b1:85:ca:10:70:e9:d8:0a:5d:b6:ad:47:15:
a1:7c:9c:ae:e3:0d:1b:f7:13:1a:15:d6:01:00:85:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:1E:F9:D7:C8:27:66:B7:E4:95:1A:6A:C0:E3:4D:F7:B8:7E:1D
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:bb:da:47:a0:b4:40:5e:7d:ca:ab:2f:e5:c6:0a:e8:a7:
68:7d:d7:74:11:fa:1f:4d:3f:4e:61:6e:54:55:c8:ed:a5:51:
68:f2:8b:ab:63:2e:85:95:89:8e:fc:ab:21:f3:cf:45:62:da:
9d:82:85:23:d1:58:61:9f:ec:64:e0:9e:1f:89:cc:cf:62:85:
f7:19:99:fa:dd:67:d8:1f:a6:a4:43:f5:d7:2f:11:a9:73:01:
93:0d:24:48:2a:46:6b:df:2d:27:6d:ac:af:1b:b3:1e:91:23:
f8:07:2b:c5:20:1e:b4:a0:8d:8c:ed:ea:f4:4a:07:6d:80:b9:
a4:ea:6a:02:a5:b5:c3:56:82:65:41:50:52:90:a7:bf:53:60:
6a:e4:1e:57:38:96:b7:44:ef:b3:be:f7:4a:e5:50:e7:32:8c:
1c:3f:9f:8d:a8:58:dd:d9:34:02:0f:ce:80:8f:d2:b7:e8:11:
23:98:d3:e5:ed:6a:2b:38:ea:c3:60:5a:42:0b:e8:06:2d:81:
4e:e0:d4:28:0a:c9:89:b9:d4:24:6a:f0:8a:ae:70:1e:3a:c7:
6a:77:59:32:74:39:4b:f1:52:35:ae:de:2e:38:e5:a5:33:7b:
88:dc:79:30:f5:d8:55:f9:2c:4f:07:a2:95:86:81:b4:bf:fe:
b2:24:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:32:24 2025 by rpki-client