Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: TJOYTC6PJKmPFWbgJyZasNKCNkujZ2ZlVnn5dqRHD1M=
Subject key identifier: 97:D4:B6:73:F6:0D:7D:C1:1D:99:0D:46:24:2F:62:1B:70:B3:04:B2
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019671C1EFDF6F3DEF3A6A3CB051B7904FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0EF8
Signing time: Sat 26 Apr 2025 11:00:57 +0000
Manifest this update: Sat 26 Apr 2025 11:00:57 +0000
Manifest next update: Sun 27 Apr 2025 11:00:57 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 46x08eMpN/9i//Grw4iaQPHhFIW0yHaR3LiXY30eyl4=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:ef:df:6f:3d:ef:3a:6a:3c:b0:51:b7:90:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Apr 26 11:00:57 2025 GMT
Not After : Apr 27 11:00:57 2025 GMT
Subject: CN=97d4b673f60d7dc11d990d46242f621b70b304b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:4f:92:5f:bb:21:98:90:ca:41:8c:a9:84:
af:2a:47:76:43:4b:6a:1d:78:2d:b7:c1:8f:e0:2e:
69:49:06:21:72:f7:41:24:da:0f:2c:32:d7:a5:13:
a0:89:f9:9d:85:36:c5:6c:24:c8:ec:d7:36:a7:37:
d0:8d:98:84:95:f2:a0:1e:4e:75:3c:72:74:b1:7a:
c2:46:e2:d7:66:0a:be:e9:4d:e3:b5:7c:8a:d8:70:
08:5d:69:be:6a:15:0e:c0:de:61:67:9b:9f:da:55:
ad:07:88:03:17:e9:ad:c8:2c:5c:a7:51:68:a5:85:
cd:29:a3:60:ef:ff:a1:98:4d:7b:b1:0f:92:59:74:
79:95:ab:93:e0:20:9b:aa:53:ad:32:88:f1:fd:10:
df:c0:ba:d3:45:a5:7e:60:e1:ba:c0:b6:5b:02:e5:
84:57:f8:22:38:de:db:26:71:56:5f:77:fd:4d:48:
e2:77:24:3b:f9:ef:a5:db:2a:1f:e7:e9:1d:31:ab:
2a:af:1b:ef:51:4a:e1:5b:f9:f3:a3:cd:bc:bd:bd:
3d:17:ef:22:20:97:db:df:72:b3:dc:2a:29:70:f5:
8a:2a:f7:a8:3d:14:bb:6e:b4:29:e5:92:24:d4:b8:
04:76:2b:15:2f:db:11:12:dc:33:08:a9:a2:05:ab:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:B6:73:F6:0D:7D:C1:1D:99:0D:46:24:2F:62:1B:70:B3:04:B2
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7d:e9:5e:03:d3:52:48:f8:2a:39:7a:bd:22:0c:39:58:03:
ce:50:09:74:6a:27:d6:99:0c:37:35:25:92:80:bf:7e:ad:71:
e4:68:b2:57:11:4e:32:73:f7:8b:88:f9:9a:f1:e9:3b:5e:cd:
35:57:79:e3:1c:9e:87:cd:df:bd:94:09:45:bf:52:94:a0:70:
8b:f5:0e:28:b4:b6:0c:e7:54:8d:c5:49:ac:2c:fd:ea:55:13:
54:8c:20:c5:9e:18:41:23:ad:f3:62:0a:b0:21:0d:1f:03:06:
a2:71:da:74:00:87:c1:1c:0d:e2:8a:f5:e7:a8:32:74:09:b0:
e1:c4:72:dc:54:c2:31:80:ba:2a:85:f0:38:9d:8d:42:a9:23:
bf:94:f6:d6:c3:f1:ad:96:e1:90:c9:59:ef:e4:e6:24:fb:70:
f5:b6:51:33:4c:2a:b7:b8:cc:a1:d5:dd:8d:a9:db:06:e2:d6:
1c:c6:77:c8:d8:37:40:96:82:93:1f:c2:19:d8:f8:ce:e0:00:
01:1a:87:4f:2f:87:c3:fe:fe:84:7e:e9:3e:34:64:ae:84:74:
9b:77:9b:93:a8:5e:1b:43:04:7f:2c:ac:c5:4e:4d:2a:90:00:
5a:05:d8:0f:aa:7e:1a:6d:fd:72:ad:fb:33:6b:3f:dc:3f:c0:
51:57:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:45 2025 by rpki-client