Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: EdCff8DpIIL2IVzNovJRUVni7JNW3Jqms/8BFiuRWIg=
Subject key identifier: 9C:91:17:EB:83:50:6B:08:0A:7D:16:02:58:87:04:58:02:FE:E3:83
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0196729D029E99113FD88838E6105E34DDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 0F07
Signing time: Sat 26 Apr 2025 15:00:14 +0000
Manifest this update: Sat 26 Apr 2025 15:00:14 +0000
Manifest next update: Sun 27 Apr 2025 15:00:14 +0000
Files and hashes: 1: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
2: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=)
3: Nb7Hg7akRGgFLg0o7rP2XiE5XvU.roa (hash: EbHLf1CAMq8uu0t9HdCeXITVauMDBAY269oNlJVY/XU=)
4: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: CIXBoaHlt5S7CArJe2vZAqZwrP33KelR2ijMv5fYqco=)
5: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
6: mTvSgsKtYgRt8pu16sczwcA1b5Q.roa (hash: HA7KgQxth/bMhlTtQkd1v9hx7TIOnotP3RRusUYr7/4=)
7: oxFojUhDbgbvQWJLE662AtGMYd8.roa (hash: D4p1qN18Lpr9kDtEzYCALPnApaaR+jAbpSvJT1J28Nk=)
8: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:02:9e:99:11:3f:d8:88:38:e6:10:5e:34:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 26 15:00:14 2025 GMT
Not After : Apr 27 15:00:14 2025 GMT
Subject: CN=9c9117eb83506b080a7d16025887045802fee383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:4a:ab:30:1a:f7:c6:26:5c:c3:47:91:97:
04:74:18:90:83:c9:ca:a4:6f:85:d9:5c:ff:3a:00:
9f:2b:65:21:c8:f3:13:70:d0:db:07:c4:e6:2e:a7:
e0:5a:d1:8e:96:9e:86:ff:4f:56:1a:95:5e:f9:a2:
2e:b2:37:3c:ed:65:d0:e0:d0:44:f9:34:02:8f:38:
51:52:83:cd:cd:f6:c8:1c:d8:0d:61:de:c2:11:75:
ba:a4:7c:ca:a5:b8:e2:88:2a:b9:13:68:bc:9d:84:
15:3c:9a:ed:99:93:f9:4f:e5:98:1c:d0:2a:f8:dc:
c6:c7:b7:c8:71:01:14:ed:ff:74:cc:b5:5c:7e:bd:
eb:1b:14:9d:7c:d6:3a:44:8b:ac:5a:1e:b4:30:cd:
d8:5f:5b:29:c5:1d:41:ac:5b:cc:46:0a:75:c6:99:
28:0d:f2:62:74:6b:9f:e3:35:28:81:03:f6:ae:d2:
9f:ac:d4:70:a4:d8:24:b5:3b:f7:8f:2b:de:7e:65:
53:16:20:43:d4:a8:4c:5f:c2:7c:8b:52:e9:12:b0:
4b:f2:16:ef:5c:34:01:a1:72:30:79:35:22:f3:32:
5b:b2:1d:f8:d7:bc:64:34:27:21:a9:cc:8c:f1:00:
9f:1d:14:93:ee:ac:ae:ec:dc:f5:55:a4:f4:d2:ba:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:17:EB:83:50:6B:08:0A:7D:16:02:58:87:04:58:02:FE:E3:83
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:ef:a1:cf:e7:4a:ca:6c:07:a8:dd:49:57:df:e9:5a:82:
77:54:fe:6f:ce:12:a2:6b:76:2e:2e:d2:41:61:24:fb:5c:65:
87:25:5b:af:7f:7c:a1:4d:e7:89:21:07:91:39:eb:20:eb:4b:
e0:db:57:66:7a:dc:d1:3b:fe:02:01:34:78:cd:38:01:6e:4c:
e8:93:8c:c2:d5:fe:0f:70:5f:d9:2f:28:df:b0:0b:b9:03:5d:
32:c0:ad:86:88:3d:a9:d1:50:3a:b8:c0:e4:c8:31:12:f4:75:
34:39:8c:c0:ea:91:82:73:21:23:79:f2:75:c8:29:01:30:92:
4a:e7:98:bf:31:01:b8:2e:b1:d2:80:32:2f:7c:61:6b:59:02:
b1:71:0e:d1:db:8c:0c:c9:21:f7:31:6b:0b:c9:fb:d2:23:eb:
f7:2d:e5:df:cf:98:f3:ec:f2:69:49:08:54:9e:52:22:b3:f4:
cf:c4:d8:d3:35:27:50:b1:b5:95:8d:72:ee:65:70:4a:e5:5c:
38:55:1a:bd:2e:44:5a:27:93:61:e4:5b:7d:c9:32:b5:b3:a1:
0f:7d:51:a6:e6:49:99:6c:84:22:ed:1c:70:37:a1:35:8d:97:
f6:36:7e:2f:53:d3:d6:5f:31:4b:32:4d:59:1f:02:6c:44:24:
d7:ea:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:38 2025 by rpki-client