Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: i+laBkTT7Eh3rKRqfErwYvqDFLnlCjO81lBebl7FuP4=
Subject key identifier: A2:75:E2:A6:2A:B8:FD:39:9B:DF:76:04:D3:7C:24:3C:9B:B8:8A:F6
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 0196BBFF91174944BFF00082E428C665254E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1402
Signing time: Sat 10 May 2025 21:00:10 +0000
Manifest this update: Sat 10 May 2025 21:00:10 +0000
Manifest next update: Sun 11 May 2025 21:00:10 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: fem6qs2CDv5gJAyXE+3vna7j+QM4ubvhcuCNOd7YUO0=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:91:17:49:44:bf:f0:00:82:e4:28:c6:65:25:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: May 10 21:00:10 2025 GMT
Not After : May 11 21:00:10 2025 GMT
Subject: CN=a275e2a62ab8fd399bdf7604d37c243c9bb88af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:f7:84:cd:ee:2f:5f:fb:14:54:9e:c5:f9:
b4:8f:34:27:b1:6b:2b:fc:f7:14:61:59:4c:3d:ab:
8d:af:83:8a:f5:9f:0c:3e:a4:6f:ba:82:4a:34:98:
13:bd:a2:1a:5c:ec:e9:29:33:49:b8:14:66:e9:5c:
f7:0b:e2:c1:d1:a8:c0:24:53:39:69:37:b5:be:ee:
2b:ce:a2:04:e8:3f:e2:cc:bc:fa:6f:c3:a1:dd:a6:
a7:0e:76:2f:e2:41:91:9c:26:e4:87:d6:56:ff:6f:
e7:ae:21:0b:8f:96:b5:dd:71:c9:bb:ee:9a:7e:20:
63:f9:85:0d:2b:f5:1a:e5:fe:45:57:37:b0:91:1c:
e4:d6:e8:7a:e5:42:45:29:3f:cd:21:79:28:ae:69:
83:9c:9c:93:99:f5:77:fe:de:68:19:0b:bd:ca:41:
c7:55:68:fe:15:de:e6:cc:12:4e:05:9c:b3:c0:6d:
48:28:74:af:50:04:23:c8:d4:1a:fa:29:2c:43:99:
ec:9e:0f:e9:1a:55:40:ac:d3:4d:8f:00:3f:85:d0:
07:d8:9f:96:0d:75:42:5c:fc:2a:5d:fe:0e:10:0f:
a4:33:71:5c:4c:94:f0:1a:a0:c8:13:34:ce:7d:a7:
7f:c6:fd:31:cc:13:45:dd:23:da:e1:cb:d1:0a:7c:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:E2:A6:2A:B8:FD:39:9B:DF:76:04:D3:7C:24:3C:9B:B8:8A:F6
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:d0:ce:d1:e2:b6:a6:ee:e2:4d:d6:df:b1:c5:51:a8:90:
42:dc:0c:ba:ed:d0:b6:bc:6f:3f:44:60:d2:91:bf:e6:be:f4:
42:e1:44:1c:a9:b0:18:51:30:5a:bc:61:07:b1:c8:78:05:98:
c8:5d:65:66:3a:5d:b0:14:ac:52:2d:33:e1:c3:96:82:c7:12:
bd:0d:2d:6e:cb:b5:0e:a2:a7:29:13:dc:db:9e:82:40:10:4a:
6d:8e:c9:36:9e:25:f7:9c:ee:4f:c3:9b:ca:60:cc:08:09:6e:
58:a7:54:03:38:37:b2:f8:18:d8:7b:c5:21:fe:d1:db:06:f3:
24:0e:7d:23:ee:ff:39:55:c7:bf:ff:0a:55:e6:12:5e:8d:68:
eb:bc:56:4d:86:63:80:2a:7c:5c:11:aa:af:e6:65:ad:f2:e5:
32:0b:53:2d:59:40:ee:6d:54:36:ef:72:93:9d:9d:a9:c1:f0:
55:f1:ec:99:e7:e5:50:66:68:45:d3:b2:36:1a:31:72:a2:1f:
61:88:4a:92:82:15:9c:2d:0e:ab:d8:7f:42:10:63:25:65:5d:
b8:00:b6:15:73:d9:7d:ba:eb:41:c0:d4:63:56:86:b0:f4:3c:
97:b0:f1:22:a5:24:e9:a2:77:6c:78:74:d6:ed:80:ff:de:ce:
c5:5d:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:35:24 2025 by rpki-client