Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: 4uCqun/q6Mls1MkYz0vLUMDMGr7Q/dtBhGNFguJI1J0=
Subject key identifier: 46:95:30:AB:9F:50:46:A3:8B:61:60:C3:87:5F:30:F8:08:B9:32:F3
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0196CCF35DF2EB4F051A84026C4D979F05E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 04:00:23 +0000
Manifest this update: Wed 14 May 2025 04:00:23 +0000
Manifest next update: Thu 15 May 2025 04:00:23 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: JYnfAJSeSUjiXDShXyy/FuRh2fQQx55oBsL1p0ZyGHo=)
5: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
6: n6tTr6zCJWcy243UaHGcvc68Cuo.roa (hash: 0ym6kX5GeiUQfUcNj5Jvc+XuXgOTW8J6SoBaRmr08MM=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:5d:f2:eb:4f:05:1a:84:02:6c:4d:97:9f:05:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: May 14 04:00:23 2025 GMT
Not After : May 15 04:00:23 2025 GMT
Subject: CN=469530ab9f5046a38b6160c3875f30f808b932f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:c9:8e:39:ec:af:16:28:ac:00:51:cc:f5:
18:25:27:79:c3:8d:27:57:8a:a1:63:d1:3c:e5:da:
8f:84:02:04:b2:9b:1e:33:1e:47:8e:ec:70:9a:8b:
47:72:74:d2:6b:cc:bc:94:d8:12:dc:53:83:30:0a:
38:91:00:fe:3f:59:04:40:92:af:eb:17:89:c5:09:
e7:4e:e3:e2:ce:48:93:e6:f8:75:9a:27:59:64:db:
6e:1e:5b:32:b2:ed:f8:4c:10:50:43:c3:18:46:73:
a1:d7:01:38:2a:02:13:83:a6:31:f9:10:68:6f:a6:
7d:88:91:19:a3:59:80:ae:bf:cd:73:89:eb:ca:1e:
0e:4a:1b:6d:c9:92:8c:c5:a2:cd:04:e6:ae:78:85:
2a:eb:81:9e:78:5c:a8:df:5c:1f:f1:2e:27:68:bb:
09:30:7a:23:09:31:94:64:d3:29:96:4e:a3:61:f4:
9a:db:6d:60:61:e0:04:cb:5c:39:94:7d:c0:99:e2:
f8:6c:b1:9c:aa:68:ea:47:8d:9d:25:20:ea:52:c1:
14:fa:a7:00:2c:fa:4c:2c:f3:8d:ca:67:8c:12:4e:
4c:28:fe:99:7a:26:e5:c9:76:d1:8f:3a:38:f0:e8:
92:e9:25:32:61:74:ef:a8:2d:5b:28:61:3e:ed:c6:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:30:AB:9F:50:46:A3:8B:61:60:C3:87:5F:30:F8:08:B9:32:F3
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:60:52:22:42:3a:49:30:16:b5:35:42:6e:91:4b:5a:3e:
3c:a8:b8:d7:7f:1c:9e:98:ab:04:41:f7:b2:56:36:79:29:a7:
12:52:55:4e:b0:a3:04:a4:36:44:4a:d8:c3:b2:d0:7d:10:1f:
96:62:bb:df:ff:b5:79:cc:2e:13:06:25:f3:e4:17:cf:72:13:
f3:7f:1f:c0:0f:95:48:11:6c:c7:12:bf:1d:e2:37:7b:6a:34:
76:45:3b:d6:6a:c4:eb:f5:0e:3d:21:2b:1a:34:0b:f5:e5:97:
d5:90:50:94:41:d5:52:ec:58:ab:f5:12:b7:5e:7a:26:2b:12:
57:c8:01:5e:47:7a:2b:b0:83:03:d1:df:6e:3b:b2:37:0b:89:
96:12:f6:ee:c3:a2:f3:d9:37:45:c9:f9:31:d8:4d:1f:66:29:
fc:71:e3:ae:1d:11:20:31:30:fb:91:58:0b:1c:d6:25:6c:22:
06:f8:fb:4c:4c:fb:03:1c:b3:b8:1d:73:d5:4a:4e:82:86:dd:
7c:ed:09:9c:6e:53:fd:4a:72:b7:e6:79:9d:27:6f:7b:97:1d:
81:b9:ca:ba:9f:f5:0e:98:21:62:f9:83:87:5d:3d:03:56:1f:
f6:e3:68:97:9b:f9:0a:30:65:2b:53:a5:be:dc:9c:30:e3:b5:
e9:3f:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:28 2025 by rpki-client