Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: pHdVf6ag75NLSWadyVfXWxPv1ELBM/oct75EZd0FokI=
Subject key identifier: 17:2D:DE:E3:FF:D4:90:64:65:1E:37:09:A0:61:11:07:A7:C8:E6:C9
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 0196BB9223525C565583C75FBD01AFF64E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 19:00:38 +0000
Manifest this update: Sat 10 May 2025 19:00:38 +0000
Manifest next update: Sun 11 May 2025 19:00:38 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: NEiZxnBrZ62RSJlWXD88fFY7pGvgNADs2/qTJgajeKY=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:23:52:5c:56:55:83:c7:5f:bd:01:af:f6:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: May 10 19:00:38 2025 GMT
Not After : May 11 19:00:38 2025 GMT
Subject: CN=172ddee3ffd49064651e3709a0611107a7c8e6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:15:c1:f2:71:c3:2a:ee:08:9f:8c:be:ea:
38:4c:3b:f7:7b:71:25:8c:57:0b:c8:38:39:0b:e0:
b7:4e:80:49:52:6a:64:81:27:e8:39:b0:e2:4d:36:
f7:57:f3:6c:89:86:85:6e:bc:28:18:72:bf:65:18:
66:cc:a7:2d:ce:a5:21:d8:6c:1d:30:63:7f:2e:5e:
e8:83:40:50:13:e4:62:86:87:c5:f6:c0:68:33:36:
09:a1:d0:fa:ed:28:44:5d:b5:d8:53:02:4c:fa:a2:
e2:06:cf:37:81:32:6b:f7:62:b6:cc:37:d1:d3:4b:
11:61:57:bf:e9:e7:bf:7e:1f:79:0e:2e:ed:ed:3c:
d3:f6:50:6c:b1:25:9c:a5:0f:d3:79:bc:ad:cd:b1:
d5:1c:f9:86:3b:08:e3:21:a8:39:52:9e:91:37:97:
69:41:d2:2a:fa:87:f0:43:ee:3d:d1:7d:55:9d:ca:
a0:48:4c:35:95:9d:e0:5d:06:60:0f:c8:cb:88:92:
43:83:27:15:5e:bb:e2:ba:71:3e:b8:aa:57:57:58:
c8:dd:56:62:4f:73:f7:b9:04:42:da:85:3c:ba:31:
9b:fe:dc:8f:d1:d9:9e:35:51:1c:7c:2b:55:bd:59:
f3:a9:a1:1f:31:21:e2:dd:48:ed:f9:c3:38:ba:b5:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:DE:E3:FF:D4:90:64:65:1E:37:09:A0:61:11:07:A7:C8:E6:C9
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e2:1f:92:57:0f:a6:ff:22:88:69:7f:3c:5f:f2:1c:44:f1:
22:37:2b:29:16:4b:75:40:01:04:3d:2c:47:6c:98:49:c3:33:
f4:cc:64:31:66:8b:c0:30:97:a6:45:97:4d:eb:f1:ce:c3:0c:
92:f3:29:d5:0b:5c:f8:af:94:84:c1:94:ba:4b:33:bc:c4:5e:
f8:bc:5d:75:c5:e0:ab:fc:6e:c3:24:54:e9:69:44:a5:f2:70:
01:24:33:64:23:78:2a:9b:1c:f2:aa:ee:a5:d9:cc:0e:4f:8b:
5e:b2:4b:9a:35:2f:dd:9e:0b:a5:88:32:c7:1e:b9:21:55:e4:
fd:28:2c:e3:12:46:eb:3f:9b:e9:48:d2:e8:8a:18:10:9b:c8:
d9:94:c3:39:03:03:a1:db:05:62:1b:42:e2:a7:37:2a:a8:bf:
b9:b3:89:66:7f:fc:d5:c1:00:39:24:31:80:69:0a:36:cb:0e:
ba:69:83:32:a5:47:7f:f2:22:f6:db:98:3c:2f:a2:ae:cd:8f:
e9:c3:bd:cd:32:6b:45:11:7a:82:6a:0c:1b:d8:38:d1:4b:b8:
60:fe:88:ed:db:26:5f:35:1e:15:78:ea:b5:6e:92:5d:4e:12:
83:f6:6f:92:5f:af:fa:74:87:79:15:11:9f:46:5a:66:75:ee:
3d:7f:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:31:14 2025 by rpki-client