Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: Zn1v7ImW1l0o1QIPwHwRWmiJ9K336opYVX8VfniEtvY=
Subject key identifier: 16:4C:78:91:A3:6B:AC:FE:01:61:3F:08:80:C2:74:FD:94:66:CB:5C
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 0196722FFAB8B08A9A62E50FAB0908AABFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0548
Signing time: Sat 26 Apr 2025 13:01:09 +0000
Manifest this update: Sat 26 Apr 2025 13:01:09 +0000
Manifest next update: Sun 27 Apr 2025 13:01:09 +0000
Files and hashes: 1: 1CUYBHeno8DyBiBJk58s01Vn7kE.roa (hash: Ac/cK8Y5Q3k/sidFyKghklZaDLlcZdtQLnDhxt2bSNo=)
2: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 1do7ztgmkMI87HwJ4T1s5NnshzjoUzb+ji/emKl9lOw=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
5: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
6: b-qLuN7LcWCmXzuyYW3S2X2JsvQ.roa (hash: LFWSIiOVLb/1xuV5ZI3+NKtHy2uXnhNazP8T4sdyYgo=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:fa:b8:b0:8a:9a:62:e5:0f:ab:09:08:aa:bf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Apr 26 13:01:09 2025 GMT
Not After : Apr 27 13:01:09 2025 GMT
Subject: CN=164c7891a36bacfe01613f0880c274fd9466cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:20:ef:94:fa:ca:17:43:e0:0f:f5:4d:ee:
cf:62:3e:26:56:8a:90:41:6c:cd:38:85:48:5c:df:
4c:e5:1f:4b:9d:75:cd:d3:d9:9c:ef:f7:b5:d3:29:
0a:a2:a5:f0:fe:57:50:4f:5e:a5:75:78:47:86:e0:
bf:fa:50:2a:85:d9:7c:d2:d2:f8:76:88:9f:24:a2:
c3:12:88:2f:bc:42:83:37:fe:5d:89:7a:ae:ef:e0:
4f:cc:54:1e:b4:c8:75:9c:f4:0b:80:18:06:3c:cf:
c6:0f:79:6b:a6:b2:0f:73:66:9e:6b:c3:e2:ec:40:
b4:73:50:7f:55:82:53:34:b2:49:73:f6:26:91:97:
42:10:f9:b6:27:2b:10:c9:1b:0c:7d:eb:1e:f8:fd:
b6:87:36:c8:af:fd:1c:69:98:ea:ba:87:29:74:a2:
83:aa:42:69:2a:f1:e6:18:7b:ed:6b:be:fc:39:ff:
87:3e:43:cf:5c:f5:30:b0:65:e8:42:a1:40:a4:62:
d3:70:5c:6a:d2:60:15:cb:dd:16:18:e1:33:34:53:
c1:94:ab:e8:75:fa:e2:9f:90:7c:c6:f9:06:43:6d:
d5:49:c5:91:f7:0a:94:67:60:a2:11:85:df:22:4a:
e0:35:df:f2:98:e7:8b:0e:27:ce:44:ad:32:8c:2e:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:78:91:A3:6B:AC:FE:01:61:3F:08:80:C2:74:FD:94:66:CB:5C
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:32:13:dd:93:a2:a1:3f:60:ec:36:20:25:56:eb:26:3d:
43:c1:25:29:02:c7:70:4b:1f:24:10:99:7b:fe:8a:19:9c:f6:
fd:d4:47:9c:a4:82:28:c1:d8:da:ea:1c:5c:8b:5f:bf:c7:10:
36:dc:0a:f8:7a:de:46:95:05:92:43:2e:d9:10:a1:41:a1:8c:
1f:76:f1:83:b2:cc:2e:f7:50:07:10:96:3e:c0:ef:4c:c8:82:
96:e1:fd:94:67:2c:81:0d:51:d4:4a:3d:64:2a:86:e8:dc:bd:
db:35:4b:12:cd:b7:3a:71:5f:b7:ac:a0:b0:c1:ab:85:07:f7:
9b:0c:ac:4e:b6:af:63:48:88:4a:7a:4a:2f:1b:5a:5c:38:ee:
c0:7d:75:a8:79:82:50:c0:70:96:7d:4d:5f:0b:5e:87:b5:19:
e7:4a:04:98:82:d6:f4:53:1f:7b:5c:de:91:75:cd:e8:74:be:
06:77:ee:85:eb:29:cf:dd:5e:3e:f6:a4:c7:25:d2:43:c5:58:
8f:5c:71:6d:c9:b4:89:36:12:61:75:2f:d3:fd:84:f7:6b:99:
e6:47:78:7e:a8:d4:ab:16:c6:ad:a6:be:50:52:8f:dd:de:f5:
df:ef:e3:a2:04:8c:04:7b:01:dd:1f:7c:f0:23:94:e9:16:80:
db:33:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:54:23 2025 by rpki-client