Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: aQVGmwYjOqK1hOXZduzpAP85WMHVe1X1yEmiPWRT1vY=
Subject key identifier: 98:64:79:ED:D7:F6:06:ED:80:EC:CF:10:52:20:2B:65:2A:FF:3F:FA
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01967153D4464FCC2D413A36A12D086F2F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1520
Signing time: Sat 26 Apr 2025 09:00:41 +0000
Manifest this update: Sat 26 Apr 2025 09:00:41 +0000
Manifest next update: Sun 27 Apr 2025 09:00:41 +0000
Files and hashes: 1: 6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa (hash: SVipuhy3Ehx0A2p8/qYN8eYS0y6FZ2XI+LhGjs2fICo=)
2: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: 2q+P1Ak/iMZP1VJKqPM+Pf3aucbeQHuanMzIOvBQZF0=)
3: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
4: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
5: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:d4:46:4f:cc:2d:41:3a:36:a1:2d:08:6f:2f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Apr 26 09:00:41 2025 GMT
Not After : Apr 27 09:00:41 2025 GMT
Subject: CN=986479edd7f606ed80eccf1052202b652aff3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:d7:f4:80:25:4f:14:a3:ec:51:be:ef:5d:
da:b9:22:2d:0a:4d:9f:36:93:f4:77:ab:cd:ae:64:
d0:ec:34:14:cc:ea:c8:08:7a:84:f5:a4:f4:b5:e7:
9e:ee:9d:3a:68:41:d9:db:dc:0d:ed:0a:a3:22:36:
d1:6e:a0:ad:85:80:ff:0c:9b:9b:0e:f7:91:a6:42:
f1:77:ed:a2:84:6d:34:c0:61:08:3b:47:3e:7a:6e:
1c:82:e9:f0:76:f9:86:ab:b4:27:7b:fd:91:7a:d3:
4c:8f:2f:7a:f3:17:3a:e9:00:27:0f:cc:09:48:80:
9e:e9:95:ce:71:cd:bd:18:61:f4:5b:2e:4c:90:1e:
f9:ce:89:46:17:95:b1:0e:3e:7e:db:77:c9:51:89:
0b:8e:65:09:00:e3:78:31:c8:ef:c9:ae:7d:18:fe:
9a:4c:12:f8:f4:20:e7:f4:37:0f:17:36:fb:36:d4:
0b:dd:33:04:41:eb:ba:cd:be:6b:21:60:9a:d9:44:
37:60:b1:b3:35:04:1f:14:c1:8e:c5:5f:64:93:d0:
91:b6:0b:c9:8b:93:bd:2d:6b:b8:af:1a:3f:ca:6c:
5a:17:eb:e5:69:60:2d:bd:a1:03:6d:5d:1a:64:aa:
35:f6:8b:37:46:53:b6:13:25:b8:f6:67:d3:fb:b3:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:79:ED:D7:F6:06:ED:80:EC:CF:10:52:20:2B:65:2A:FF:3F:FA
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1d:36:5d:8b:e4:d1:77:4b:84:53:69:8d:cb:f6:35:e7:cb:
97:74:e3:aa:01:8b:7b:d4:7b:cf:3f:5e:75:1b:5c:f1:c9:e9:
56:1a:97:4d:e9:cc:57:00:37:a4:57:bc:6c:fd:f4:70:fa:77:
75:e9:79:ba:5b:fc:8f:47:4d:0d:ae:ef:d6:5d:70:de:73:4a:
8f:90:fa:ae:19:26:cf:42:65:69:db:ba:e4:6c:c9:ce:6b:74:
26:3c:44:7e:6d:ba:e6:ff:7e:45:23:bc:73:4a:22:44:21:59:
79:5d:2a:18:00:43:68:7e:7a:52:33:02:71:65:eb:fc:ea:08:
b9:ac:c7:82:15:8f:02:17:38:5b:c4:a3:ee:6d:5d:f2:fd:4a:
c4:07:b1:3d:ae:db:6d:02:e4:4b:34:97:c0:91:f9:7e:1f:37:
28:da:c5:80:7b:67:95:52:18:f2:e3:e7:99:dc:8c:6e:fb:ae:
35:3a:49:0b:a1:1a:0d:f3:f7:7b:d2:57:ac:32:06:98:de:4c:
d2:9a:9a:fc:98:41:80:78:20:66:7d:d3:40:e1:3b:27:e2:02:
4d:f8:6e:40:90:d6:47:00:ee:37:99:1c:20:2b:80:3c:65:3e:
98:db:6c:1f:a1:39:de:ee:aa:f5:82:89:d5:ec:b7:08:74:9e:
cd:65:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:32:47 2025 by rpki-client