Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: qroL+ZZJjSINNhsyNJa8gzR2/DqfC9rfCTgTqRFW9CI=
Subject key identifier: F9:32:B2:18:33:62:69:F4:99:41:CA:11:67:A8:9F:A2:6C:45:D0:9E
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 0196BB23DA42333D85B73B378CC440618E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 153C
Signing time: Sat 10 May 2025 17:00:11 +0000
Manifest this update: Sat 10 May 2025 17:00:11 +0000
Manifest next update: Sun 11 May 2025 17:00:11 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 1w5CX0MDmHvLaGof7I+DEtbMQeUV5CK43Jv56i7nJl0=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:da:42:33:3d:85:b7:3b:37:8c:c4:40:61:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: May 10 17:00:11 2025 GMT
Not After : May 11 17:00:11 2025 GMT
Subject: CN=f932b218336269f49941ca1167a89fa26c45d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:47:85:f6:76:71:55:c1:7e:c3:33:7e:3b:
cb:9b:13:f2:30:12:be:75:27:a5:d3:5a:b2:98:98:
37:e7:dd:45:1a:66:cb:5b:e8:e3:43:ab:df:2f:b2:
36:45:bb:ee:a9:82:5f:6d:3e:d9:a4:91:4e:77:18:
f7:0c:87:a6:e8:ba:75:97:93:cb:21:7e:41:b8:f5:
ea:5b:b6:9f:5e:f6:06:79:21:bb:75:9a:05:ab:dd:
42:8d:3e:74:8c:25:20:f1:31:2e:9c:fb:db:2c:a5:
32:35:c9:fb:b7:cb:e6:95:e5:8a:f4:ad:f8:ee:39:
46:01:9e:43:af:20:4d:e2:e4:5e:9d:2e:15:ba:07:
03:a2:0c:c3:66:d6:d2:3e:30:51:89:5d:f3:4e:5b:
eb:6e:c0:77:c0:da:24:55:03:f4:0e:2c:4b:7e:43:
72:74:3c:2e:7a:b1:8c:ce:a5:2e:5b:0e:22:d1:a3:
2a:ef:e2:f6:fb:b3:ee:c9:a9:56:d2:ed:9b:d4:ec:
3e:12:82:68:53:db:45:54:af:f7:c4:1c:ca:6d:3a:
03:fe:14:e7:9c:01:77:cc:a2:37:63:e6:cc:9a:0d:
27:a5:18:97:42:cb:8a:af:0f:8a:d1:b7:44:d8:d5:
30:0e:dc:12:c4:26:7e:d3:f0:05:a0:0f:fe:bd:ba:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:B2:18:33:62:69:F4:99:41:CA:11:67:A8:9F:A2:6C:45:D0:9E
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:f0:3f:e1:7b:0f:03:91:20:1f:ed:c7:22:51:7b:91:e2:
87:6b:2f:98:09:1e:08:ba:7f:2d:f3:98:31:0a:e0:fa:ef:5a:
9d:bf:94:61:8f:d9:f8:ef:04:38:5a:b8:fe:fd:76:1e:f4:a6:
3c:3c:f7:38:b9:25:81:25:47:96:84:1b:dd:ba:b3:f7:67:5e:
43:e7:4a:fb:4f:23:81:4c:0c:2c:03:4e:b7:0e:d0:f5:b4:f9:
9e:be:67:c9:bc:ff:a6:c0:8c:f2:60:80:c7:39:82:28:8a:26:
a8:90:7c:3c:c9:dc:de:fa:58:50:dd:72:be:f9:f9:d9:1c:8a:
92:fa:84:9d:28:e9:36:cd:56:ac:f1:83:d6:51:51:54:1b:76:
7b:f7:34:03:ed:f4:bc:5e:56:4b:dc:f7:a5:e3:a7:cc:1c:ff:
be:1e:56:5a:0b:2b:95:65:0c:14:4c:36:27:d0:12:77:65:02:
a7:96:3d:6c:59:92:6e:18:01:48:20:04:aa:87:6a:8c:27:67:
2e:68:c4:61:60:c8:56:88:ed:f8:9d:ff:c6:db:d9:a3:b3:be:
2a:76:c1:c6:3a:01:bb:2e:fb:ae:70:ab:d7:04:e9:39:0c:0d:
ad:64:ce:d1:8c:5a:50:76:d3:1b:07:aa:77:2c:b6:1a:3d:8f:
91:69:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:52:53 2025 by rpki-client