Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: jBShnNxC4jtE3SPQlqS9P3SSdXGbJhxF+NFjk4VWQ20=
Subject key identifier: A5:D3:B4:91:48:15:87:FA:A8:A7:96:F8:93:4E:E8:8D:30:12:A6:46
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 0196B2C6585D3C2BF4F7F5B56F7AC595D653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1537
Signing time: Fri 09 May 2025 02:01:05 +0000
Manifest this update: Fri 09 May 2025 02:01:05 +0000
Manifest next update: Sat 10 May 2025 02:01:05 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: ji3Pz6QNjs1ZN7EmnUrQ/lZ43TITCbvyIIWkgvUN2rI=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:58:5d:3c:2b:f4:f7:f5:b5:6f:7a:c5:95:d6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: May 9 02:01:05 2025 GMT
Not After : May 10 02:01:05 2025 GMT
Subject: CN=a5d3b491481587faa8a796f8934ee88d3012a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:70:92:b2:73:58:18:33:ef:68:7d:61:18:
93:24:f6:83:72:09:cb:fa:32:cb:0e:41:ce:1b:dc:
c4:17:13:f2:42:0c:70:af:6b:5a:80:17:67:8d:8d:
a2:08:3d:12:98:44:92:a8:4b:2a:02:78:34:0b:28:
97:b9:fd:6f:2c:1f:f7:e7:33:88:e6:db:91:93:d3:
3f:13:f6:c7:95:d3:e8:d9:03:f5:ee:63:a6:16:d1:
18:26:8f:ac:43:5e:0c:8e:e7:ac:cd:d5:21:a5:76:
37:ee:0b:c6:24:24:b9:58:3f:b5:36:10:f0:6e:e1:
0c:cb:84:ae:ee:de:23:8d:dd:80:06:80:8f:93:12:
ab:4e:10:43:9a:69:bd:70:c6:83:05:41:48:ef:71:
77:97:af:72:bf:12:1c:1a:a0:e5:57:94:e1:24:7c:
e3:70:35:44:21:58:36:ad:67:08:ae:43:2c:87:a3:
b6:f2:ff:ff:2f:2f:c7:ae:5b:23:39:11:70:f2:a7:
0d:fc:c2:eb:8f:f4:b1:0b:8d:66:a7:f4:75:70:74:
2d:4f:8f:e1:c8:e9:70:3d:7d:82:d5:38:04:84:7a:
13:51:04:d5:a0:1f:17:2a:89:12:61:fa:b9:c6:7c:
ea:9d:46:f5:92:e3:3d:35:c8:e9:fe:49:23:cc:01:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:B4:91:48:15:87:FA:A8:A7:96:F8:93:4E:E8:8D:30:12:A6:46
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f1:83:e5:14:b7:f3:e2:cb:b4:41:46:4c:8f:cc:3f:06:7a:
0f:98:82:5b:b2:ad:d5:68:c6:64:2b:98:32:7f:ce:89:a8:12:
3e:16:eb:fc:4e:17:5b:b5:2f:78:f3:b7:90:8b:af:4b:d4:bb:
fc:87:84:79:42:f2:f4:13:ee:24:20:cd:03:cd:ee:36:46:94:
12:a4:44:ae:b1:44:45:fd:ab:80:ab:b8:3b:95:67:67:34:c9:
99:a2:47:ec:43:a3:63:37:5c:c6:3f:fc:95:ba:e4:b1:86:49:
26:55:4c:da:e8:fb:be:d4:f0:0b:81:f1:0e:bd:8c:6a:c3:ea:
3e:c2:f0:c8:0a:90:c5:12:45:e8:f8:41:1e:72:63:d8:e8:2d:
99:39:0d:5f:8f:1f:4f:fd:90:dc:82:1c:07:2f:6b:d5:e2:8b:
cb:fd:f2:b9:27:7b:e9:1b:02:bc:80:f0:09:20:ff:56:69:f2:
82:ad:ae:07:68:18:c1:1f:9a:75:04:84:b2:bc:83:e3:20:16:
74:1b:8a:75:05:c1:96:88:1a:0c:5d:29:42:6c:86:28:1c:48:
d6:b5:b2:d7:8b:c0:a3:0f:68:e4:a5:17:b1:b6:71:f0:69:b0:
21:4d:ca:de:c5:55:9c:ce:65:30:73:12:65:dc:31:1a:dd:fa:
77:e3:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:29:52 2025 by rpki-client