Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: ztOZmbLl+f8NDOEpukp5YEXMVvpJ1f/SVPJ8sbKCYfM=
Subject key identifier: CA:DB:6B:C2:35:7A:DF:BA:4E:C0:E4:AB:6D:AE:96:0C:E4:94:BF:AA
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 019696E0C484F23763D1DBBF56DAAF03059E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 1153
Signing time: Sat 03 May 2025 16:00:34 +0000
Manifest this update: Sat 03 May 2025 16:00:34 +0000
Manifest next update: Sun 04 May 2025 16:00:34 +0000
Files and hashes: 1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: S5/55DLdZDj0yLYft6lvcw5t/tXfB8HPdFrdC7DM7QA=)
3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e0:c4:84:f2:37:63:d1:db:bf:56:da:af:03:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: May 3 16:00:34 2025 GMT
Not After : May 4 16:00:34 2025 GMT
Subject: CN=cadb6bc2357adfba4ec0e4ab6dae960ce494bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:d8:03:0b:16:94:0b:93:ef:cd:ac:7a:36:
18:99:e6:ff:f8:b1:b8:75:9a:fe:3e:da:97:a3:e1:
d7:f9:1f:26:82:94:ce:a3:51:99:22:19:f3:8e:c4:
43:71:20:67:f7:a8:04:41:6b:39:d5:e8:72:a6:a4:
a1:74:74:01:ba:b7:fe:3d:ce:3a:86:cf:f5:a0:9e:
51:5c:9e:24:dc:22:5b:f6:be:a7:ee:eb:7d:f5:e1:
ff:11:0b:f0:c7:b2:32:33:e1:2d:89:8a:ac:5c:0b:
10:75:7d:a1:ff:ba:ce:6b:e5:5a:41:25:4b:01:34:
7a:06:23:b2:af:bd:50:2d:63:ce:e4:2b:b3:6a:56:
18:5c:bf:53:f1:25:01:ba:71:d1:5a:fc:fb:08:9e:
8e:b8:1b:c5:41:0b:e9:28:14:33:b2:fa:b9:6c:86:
d9:f7:ab:9e:32:43:48:84:50:1b:c2:d0:a5:f4:ac:
fa:03:98:21:d0:e4:17:06:a8:42:9f:17:5a:e5:c0:
ef:5f:c3:ee:ab:65:98:8f:12:0b:42:50:9e:04:5e:
ce:ac:d0:03:f4:0a:a8:76:e6:4a:ae:f6:9a:2d:f5:
50:c5:f9:ef:5c:7f:e7:0a:2b:c8:a0:6c:6c:8e:ff:
7e:3f:fd:e8:6c:26:8a:8d:50:7c:76:f3:f1:63:73:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DB:6B:C2:35:7A:DF:BA:4E:C0:E4:AB:6D:AE:96:0C:E4:94:BF:AA
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8b:43:a8:d6:3f:f3:1f:f2:ec:b8:7b:93:96:45:04:57:a4:
3f:07:32:01:8d:cb:e3:aa:95:5e:42:91:4c:ac:0b:0f:e1:f4:
f9:04:4b:3b:aa:14:ea:b8:24:e6:4c:30:0f:8b:67:60:8b:d8:
b4:4b:f0:36:cb:fd:0a:b9:94:79:7e:94:fd:2c:d0:b0:af:7a:
6e:90:71:c5:bb:5d:ed:e4:b1:17:f0:08:c3:d9:1b:c8:b9:4e:
0b:5c:c5:75:e6:c7:09:c9:00:b5:72:7c:55:1b:24:30:a1:29:
05:d5:02:c7:0e:e1:48:e5:cc:23:13:d9:7f:c7:3b:4a:8e:56:
97:18:71:a4:68:02:5f:d5:42:f4:16:39:96:1d:a1:21:47:74:
92:79:10:9e:af:52:58:43:03:97:6a:db:0e:c7:d3:f5:15:90:
88:65:a0:a2:00:10:88:22:25:91:3f:3e:c7:1e:2f:2d:a5:56:
4f:ca:ea:e3:a0:ea:64:54:58:c6:45:0c:5f:15:95:80:2c:3a:
3d:c1:dd:4e:5d:70:93:54:91:25:8d:20:07:fd:d5:98:6c:21:
8a:eb:8f:12:50:16:95:fe:dd:9f:21:1d:f4:9d:94:63:a0:89:
4b:6a:45:b2:2c:fa:56:9e:9e:ae:63:93:3d:43:9b:1f:1a:15:
7d:1a:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:33:47 2025 by rpki-client