Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: nAMi5wLJKaOUwkjeKX6VBzuS9b3ojZM5Wo7N3lUgQC8=
Subject key identifier: 13:63:2F:E2:98:99:54:8F:AD:F1:4C:6E:A6:67:89:92:D3:ED:AA:96
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0196CD986FC87ED25DC8B8ACB371E90B7175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1542
Signing time: Wed 14 May 2025 07:00:41 +0000
Manifest this update: Wed 14 May 2025 07:00:41 +0000
Manifest next update: Thu 15 May 2025 07:00:41 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: /3vkmtefOOzwh4FipBs28DhjofINLBxaN4gw6fdSeLs=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:6f:c8:7e:d2:5d:c8:b8:ac:b3:71:e9:0b:71:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: May 14 07:00:41 2025 GMT
Not After : May 15 07:00:41 2025 GMT
Subject: CN=13632fe29899548fadf14c6ea6678992d3edaa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:32:22:f0:0a:0b:d7:0e:c4:ba:9c:ba:ec:
9d:e5:00:2d:a0:fc:74:92:aa:75:b8:d7:f1:0b:2f:
e9:92:c9:10:58:7b:41:58:eb:f3:c3:17:f9:c7:8b:
03:3d:e1:95:ff:18:bc:c4:9d:15:55:77:b7:bd:cf:
d4:14:2d:3e:48:87:17:94:d7:5a:1c:48:c2:f2:97:
84:33:3c:e8:c3:1a:a8:a9:3a:c8:18:06:81:1a:c6:
12:ad:5c:9b:47:e4:16:4f:63:aa:ce:47:2a:de:d1:
88:7c:42:7e:f3:e0:1c:ae:dd:94:6e:e1:c9:f6:e8:
b3:6e:93:71:8c:72:4f:8b:aa:45:d9:15:51:c2:9e:
8c:55:3c:03:8b:9b:9a:b9:22:e2:46:29:07:92:97:
93:69:54:83:d0:e6:5c:f1:1e:da:9b:b6:ac:3b:b2:
6c:ed:6a:e8:57:33:49:f5:4d:b0:dc:a6:57:67:e8:
cb:de:2f:0a:09:55:f0:7d:8b:d8:3c:06:d5:5e:0a:
5c:e2:83:b8:69:6d:22:f0:ff:07:1a:23:07:81:f1:
0f:37:48:0a:a6:39:14:ee:a6:8c:5c:e1:d1:be:d8:
0d:09:12:02:37:7f:4d:44:c1:01:6a:4a:9b:b3:a6:
01:4b:85:88:9b:f4:c6:35:3c:50:8e:c7:47:c8:fc:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:2F:E2:98:99:54:8F:AD:F1:4C:6E:A6:67:89:92:D3:ED:AA:96
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:36:63:22:46:65:c2:62:dd:1a:ad:a0:cc:d3:99:ac:fe:84:
22:88:84:44:5b:6a:7e:7b:95:1d:00:f3:92:cb:43:9e:be:76:
3c:cd:22:31:53:c6:ef:18:12:11:08:44:07:64:88:05:78:f5:
ed:10:5b:eb:dd:e1:a7:3b:e7:2e:fc:37:b4:7b:2f:e9:82:fd:
af:86:4b:e6:46:68:1f:7e:09:4f:63:cb:14:a0:67:68:8d:2a:
57:8a:6a:3c:ca:5d:f3:1e:2c:26:6e:f4:8a:f0:ca:54:b7:09:
28:84:d6:e4:f0:67:b1:3c:a4:13:9d:86:8d:21:d2:0c:7f:56:
1f:9b:d9:68:8c:1d:8e:ff:70:5f:df:6e:ac:ba:c0:c6:fa:0d:
72:1f:9c:4c:85:5d:ed:75:f8:a5:b4:8e:a6:d9:d8:f8:d9:57:
a0:2a:bd:8e:e7:f8:e8:2e:d2:cc:bd:17:41:e0:30:f4:98:a2:
b9:b7:e4:6a:b8:78:84:6a:d6:a9:f7:5d:af:41:9b:65:90:76:
f3:1e:11:a1:ce:09:50:5a:de:8a:98:71:99:88:58:66:83:5b:
6e:5c:bd:25:f0:b6:09:50:67:4a:61:13:12:97:13:b6:84:d3:
1c:a8:70:0c:4e:73:ae:86:71:11:92:38:f8:cd:18:e0:d1:3c:
bd:f5:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:51:59 2025 by rpki-client