
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: WaTNbKlys0V7RNLOSnlfhi8jMrTy0bC6gMfANzrUdFw=
Subject key identifier: A4:98:5C:4F:F1:98:50:B9:FC:75:DA:CE:C9:14:1A:06:40:3D:2F:13
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 01969ED10834F336DB49B215BA7A32A8CB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 05:00:21 +0000
Manifest this update: Mon 05 May 2025 05:00:21 +0000
Manifest next update: Tue 06 May 2025 05:00:21 +0000
Files and hashes: 1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: PLUi4+gMT2tpfcy82H7+pB/izQxmM3cLlYizDrLZljQ=)
3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:08:34:f3:36:db:49:b2:15:ba:7a:32:a8:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: May 5 05:00:21 2025 GMT
Not After : May 6 05:00:21 2025 GMT
Subject: CN=a4985c4ff19850b9fc75dacec9141a06403d2f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:5f:21:27:b1:22:8d:0f:8f:31:cb:5d:04:
c2:64:a4:f1:64:10:65:bf:0b:9f:f5:2d:6b:30:e0:
f3:87:08:70:51:46:52:49:d8:57:a1:42:28:f2:33:
bc:4d:b4:f1:69:ab:b2:67:a5:e5:bd:9b:17:2a:43:
49:0c:95:73:f5:fd:f7:83:22:1d:7a:ea:58:ed:19:
24:5f:56:9d:da:26:0d:15:2b:3a:c1:5a:86:df:e0:
96:86:65:60:a5:8b:5e:db:36:88:50:dd:20:61:f9:
74:92:d0:bd:6b:b9:4d:a5:14:e5:83:b7:09:2d:ea:
3b:4e:dc:56:63:6b:1d:55:da:e0:95:96:94:ce:00:
49:01:e4:b4:f6:28:0f:42:77:e1:79:11:8c:43:70:
bd:14:08:d4:97:84:39:6b:24:2d:a8:f2:25:04:a0:
35:90:4f:ff:69:9c:66:43:64:cd:75:26:bf:64:4c:
8a:05:b1:91:d2:cf:34:e9:a0:21:f4:9f:d7:21:95:
06:4c:d4:02:62:b3:e6:83:66:b0:25:76:8e:70:fd:
f0:c0:15:af:57:d5:26:8d:46:56:5b:2d:4c:d7:11:
f8:ec:5b:31:bd:e5:fe:b3:75:20:ba:70:bb:41:87:
b9:14:64:28:83:52:06:60:05:f4:04:0b:f3:b4:06:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:5C:4F:F1:98:50:B9:FC:75:DA:CE:C9:14:1A:06:40:3D:2F:13
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:fa:e7:c2:33:a0:15:1e:80:3b:ef:9d:8d:85:71:1e:88:
ca:b5:bc:30:b0:cc:ed:df:42:8d:5a:22:d6:26:a4:4d:75:f6:
eb:1a:ce:53:98:90:b0:f3:79:0a:75:6f:78:92:34:02:e5:a7:
9e:1b:20:20:74:2e:54:4d:08:b9:ec:7c:08:27:8d:68:66:1c:
8a:8e:94:09:5a:39:74:2b:48:54:58:9c:06:7d:d9:7c:87:75:
81:08:9d:d7:b7:3b:03:25:1b:4f:44:ca:3e:1a:62:80:5f:14:
ef:16:c3:25:3c:9a:0e:31:e8:2f:f9:86:b3:2e:69:22:96:a6:
27:7b:c1:24:a5:c5:bd:5d:c7:1c:e9:25:cf:de:3a:7e:b9:03:
95:9b:be:6e:0e:3e:a2:b2:bc:8b:bc:b4:53:a3:69:80:a2:f3:
e6:16:3f:7f:07:91:ab:19:da:bd:a5:bd:c9:28:02:aa:8b:1d:
25:de:52:e9:da:31:d3:63:6b:50:cf:42:74:7c:3e:95:4f:29:
8b:0d:0b:d1:84:b9:75:b5:75:f8:ac:99:b2:2e:fc:b0:3b:45:
c0:1c:9d:75:da:8f:42:11:5e:db:00:f5:1f:cf:44:13:cd:f1:
e9:b8:5d:ae:e5:3f:cc:0d:37:0c:b8:e8:00:e1:07:a2:14:f0:
54:e0:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:00:13 2025 by rpki-client