Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: mz5ObBqabEIfxqkDvAWq4g+vAE2FM8WbAqGkDvgQDBw=
Subject key identifier: 1E:D8:67:61:6D:31:2C:52:7B:E7:1B:60:67:57:F9:88:4C:23:4F:73
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019679B1D5FF9B68B1B04ED2E4B9A7DFEFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0A47
Signing time: Mon 28 Apr 2025 00:00:19 +0000
Manifest this update: Mon 28 Apr 2025 00:00:19 +0000
Manifest next update: Tue 29 Apr 2025 00:00:19 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: sAb0ho3aT/slIS/geS39nEVOS8dI7gPu5QhlGYu4JV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:d5:ff:9b:68:b1:b0:4e:d2:e4:b9:a7:df:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Apr 28 00:00:19 2025 GMT
Not After : Apr 29 00:00:19 2025 GMT
Subject: CN=1ed867616d312c527be71b606757f9884c234f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:f6:75:16:de:9a:e4:2b:53:37:ad:dc:ea:
3e:a1:fe:b6:02:f5:32:86:4e:4d:95:50:ec:40:f1:
9d:2c:6a:ab:5f:87:8a:40:26:4a:53:a2:bc:d4:8b:
6b:a3:c4:d5:b4:95:21:cd:fe:33:52:46:ef:7f:52:
fa:8b:78:3e:17:7d:08:54:b5:04:3e:1a:00:e3:59:
c4:0c:4d:5d:80:96:be:d7:60:47:a1:32:d0:a9:f2:
17:23:67:fc:dd:72:4f:e6:c1:fd:cb:78:d1:11:24:
fe:61:49:97:33:22:3f:83:24:f4:e2:6b:8c:74:c1:
15:ac:26:c1:ba:c7:23:d9:4d:fb:70:e8:2d:1c:8a:
9d:46:a2:c4:c6:e7:72:60:a4:1b:d3:ce:08:f7:3b:
80:36:fe:e4:26:3e:3d:0b:8d:77:cc:2c:8c:94:e6:
c4:14:3f:a7:6f:40:3d:dc:0e:69:8b:2f:25:91:3a:
df:b1:d1:13:bd:e7:1b:a9:d9:38:da:fb:7d:0e:5d:
f0:5d:1b:12:33:be:6a:2f:f5:ef:23:f4:df:26:95:
5a:1b:98:dc:b1:3e:87:44:88:69:91:da:19:43:f3:
2e:ed:39:66:b9:07:a1:e3:1b:3e:fd:c6:5e:3c:46:
61:54:58:e5:96:12:d5:d7:8c:a9:d8:12:10:84:d9:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:67:61:6D:31:2C:52:7B:E7:1B:60:67:57:F9:88:4C:23:4F:73
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:74:a1:10:a4:06:07:0a:48:ec:51:db:99:bc:fe:fd:09:
ee:7f:ff:04:2f:74:9d:68:62:6a:e4:83:d8:18:8c:67:e5:84:
9a:3b:b0:fc:94:17:43:b9:8c:51:f7:76:3a:ea:f7:92:4a:a3:
30:e0:67:42:fa:27:7e:51:35:7b:2e:e4:39:15:b7:8a:fe:c2:
3b:68:77:85:96:4d:b4:4f:f9:df:ce:66:2a:9f:e3:15:92:28:
a8:7f:d6:f7:d2:a0:2b:8c:a6:71:a0:d2:9e:74:a8:34:03:c6:
00:07:a7:65:fe:3c:11:35:68:a4:25:cd:a0:df:90:12:c6:95:
7c:20:36:9b:43:0e:7c:c8:f4:a8:3a:b5:74:fc:0e:40:46:55:
a3:1d:d8:58:e4:3b:03:8d:df:ac:88:2f:9c:ce:9e:2c:d0:58:
6a:6f:b5:4c:e9:dd:3e:50:77:de:02:f1:a8:c4:8f:91:0c:41:
0a:78:ba:49:7e:37:cf:f0:5b:cb:42:6e:e9:6b:12:75:0d:16:
26:f1:d5:cb:a6:c0:93:f0:80:3c:2c:a2:d2:88:e0:3b:33:81:
a2:61:0a:68:d0:a4:e4:d4:c1:40:89:4d:8a:0f:52:da:85:45:
96:bf:16:36:af:e0:27:fd:08:12:61:e6:89:46:a8:dd:3e:ec:
64:8b:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:03 2025 by rpki-client