Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: y7pXp45wU3NylVvV1XuVNnG/ahIRj34vTJd6GASoQtU=
Subject key identifier: 2A:0F:6D:86:E7:D0:1A:2D:C3:4E:20:71:80:E9:B3:A6:B9:86:1D:49
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 0196CBA9E5F20F9852FE5BA760909A9D20D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1599
Signing time: Tue 13 May 2025 22:00:31 +0000
Manifest this update: Tue 13 May 2025 22:00:31 +0000
Manifest next update: Wed 14 May 2025 22:00:31 +0000
Files and hashes: 1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: XNtxP8/l4fRKyOLnaaCFsMHssaqaBjD5tdlkndRqp5s=)
4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
6: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
7: uOMM6E0bjpo9Z4Gp-nfqUv0VaVQ.roa (hash: B3I+niBmd/S5k5XR2KwNvCK0s1V+GTyHX32C34m4UZc=)
8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:e5:f2:0f:98:52:fe:5b:a7:60:90:9a:9d:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: May 13 22:00:31 2025 GMT
Not After : May 14 22:00:31 2025 GMT
Subject: CN=2a0f6d86e7d01a2dc34e207180e9b3a6b9861d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:3f:b3:72:85:b9:90:2e:3e:03:c4:63:e5:
88:10:c5:16:30:a4:93:59:d9:98:0e:18:81:6f:81:
ee:38:d6:ef:13:d6:21:fa:7d:5a:d6:a0:b0:4a:aa:
97:af:15:d8:59:75:d1:12:de:c0:87:ea:48:40:fa:
be:0f:c8:9c:b5:8f:4a:c0:83:66:79:74:b5:81:a6:
0e:09:74:cd:7f:67:ad:c8:2e:ac:11:cf:4a:b8:19:
f8:30:99:62:9a:e2:32:69:06:eb:21:e2:1a:6c:da:
eb:77:a2:d7:a4:64:af:8c:d1:25:b2:a7:bd:6c:25:
8f:ed:17:3a:ab:67:30:db:df:2f:36:15:08:aa:63:
42:e5:54:13:d6:a1:d1:9b:a5:2d:9b:5b:ce:f5:51:
54:a7:ab:c2:b2:52:a8:5e:68:d9:37:84:34:bf:8e:
bf:83:94:a4:c8:3d:df:64:31:10:2a:12:c3:84:e7:
ca:f0:43:ba:06:b7:f9:de:6f:39:31:f2:14:a3:b5:
ab:c8:1a:17:94:fc:2e:2f:e5:30:fc:2a:71:a1:24:
0b:e5:32:99:ad:d8:7c:68:45:0c:c0:bb:8f:63:05:
ad:ee:ce:6d:a3:42:ad:1d:87:2f:04:8e:26:87:66:
9a:92:db:88:a6:3e:e8:9b:0d:25:d1:5a:ee:bf:8b:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:6D:86:E7:D0:1A:2D:C3:4E:20:71:80:E9:B3:A6:B9:86:1D:49
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:61:0e:ef:91:de:32:4e:a1:7f:c7:84:cf:2b:2f:de:5e:bb:
fb:82:cf:d7:dc:f2:ef:d2:b0:b7:b3:4a:a6:e9:5e:58:9e:5d:
ee:41:1b:4a:ac:29:ef:b1:fb:f6:db:e9:12:a2:8b:15:79:c1:
1e:8d:39:16:c4:04:a8:9e:68:88:ab:ce:2d:5a:5b:65:ca:3f:
ed:fc:1b:dc:aa:73:88:9f:e2:b3:47:a7:2d:da:12:e0:90:de:
ff:a1:25:5a:91:36:31:1b:da:81:9e:39:9f:70:43:b7:e5:c4:
db:e5:b1:89:4c:0b:c9:3f:e1:88:28:71:09:df:c3:bf:93:37:
94:87:98:ba:0c:95:dc:25:42:c8:23:04:08:0a:11:ee:69:8f:
53:f5:c0:e9:05:59:ba:d2:ba:69:ae:56:77:a4:df:b9:3f:1e:
16:f0:62:f1:9f:7c:e4:18:43:59:f6:10:8b:0e:10:51:d0:55:
fd:da:fb:46:71:7c:b4:bd:b1:86:cd:01:b8:77:1b:8d:34:f5:
d3:ad:a3:b5:dd:56:e3:b3:65:5a:9b:29:af:96:4e:f2:a5:f9:
1a:5f:36:76:75:7b:14:23:11:0e:a0:38:df:59:e4:9f:08:37:
4c:80:15:40:6c:12:09:1f:cd:bc:53:44:67:28:cd:e7:7d:c6:
09:f9:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:52:12 2025 by rpki-client