Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: R9Fit7mO344oSg0ZO2hcWKdA5RJyNTs/GEKjp5fxM9E=
Subject key identifier: 90:7D:EC:31:E0:E5:31:AB:7F:4A:EA:1B:6C:57:CF:6E:90:64:FB:15
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 0196760BF1A0053CB59EE9ECEED46FD58BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:00:16 +0000
Manifest this update: Sun 27 Apr 2025 07:00:16 +0000
Manifest next update: Mon 28 Apr 2025 07:00:16 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: lHyiSc5Z/gzBuOlaIu/cXSusbZb7cpgMgVt+otGDYFA=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f1:a0:05:3c:b5:9e:e9:ec:ee:d4:6f:d5:8b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Apr 27 07:00:16 2025 GMT
Not After : Apr 28 07:00:16 2025 GMT
Subject: CN=907dec31e0e531ab7f4aea1b6c57cf6e9064fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:44:59:e1:ae:bc:17:30:a5:c3:e1:b4:53:
fb:c5:35:7b:ec:a9:49:4e:69:a7:5e:de:df:a1:3a:
42:2b:d6:d6:cc:a1:a4:e3:46:e9:04:dc:04:3c:93:
8d:26:f1:d7:99:85:8d:4a:d3:e7:10:bd:c6:e3:bc:
ab:7d:1a:95:8c:01:bd:b5:86:13:09:2e:c3:ac:75:
9e:3f:53:5e:88:44:2f:d0:f8:da:8c:21:d3:0b:36:
c2:b2:96:fa:c7:f8:96:dc:cc:79:83:26:9c:7c:77:
50:cd:60:0a:4c:4f:c1:c4:0e:07:8a:1b:2a:be:bf:
7f:4d:9a:2a:90:2d:ee:4f:b4:a6:73:36:bf:74:f7:
16:63:03:d9:8d:89:21:ea:fd:c7:06:12:00:00:e0:
95:ce:e4:42:da:c2:41:d5:96:61:f1:2c:4b:89:8b:
e2:0f:68:6c:3e:05:1f:ff:6d:f9:bf:41:2f:0c:6b:
f3:66:6f:a5:e1:c4:99:47:f5:2f:43:44:ab:b2:94:
18:fc:99:0c:e0:84:60:08:9e:4c:1d:e3:12:25:fb:
ed:cb:32:77:04:65:0e:0f:5a:1d:02:0e:e2:01:e5:
54:a4:72:6c:ec:f8:2b:c6:26:a2:f5:2c:07:f4:77:
ed:69:93:22:22:a5:a0:2f:23:d0:4d:35:ca:d1:9c:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:EC:31:E0:E5:31:AB:7F:4A:EA:1B:6C:57:CF:6E:90:64:FB:15
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:9a:f1:8e:1d:29:4b:70:8d:b4:c0:08:8b:b8:c4:df:18:
66:26:c6:b1:04:c8:19:81:e2:b6:83:f9:0e:ae:07:3e:ff:15:
c3:cd:16:27:fa:67:3d:56:38:a4:28:89:7d:02:24:9d:69:ff:
3c:ee:dd:8e:a5:90:99:52:fb:c0:1c:9b:da:55:44:a7:14:9c:
1d:77:0f:55:15:36:3d:dc:01:c7:15:78:c6:d4:c4:16:52:4a:
18:24:53:f6:a2:ba:6f:6f:db:e9:b8:01:74:92:0e:e4:b6:94:
81:15:ba:81:89:23:8f:04:f9:1a:40:cd:9c:f4:68:9e:27:5b:
f9:8c:bc:cb:c8:04:90:5f:6d:3a:0f:8d:b6:32:3b:f4:e1:dc:
b4:28:27:ad:c1:a1:05:0f:47:9c:6f:0d:f3:d8:80:56:b3:cc:
f6:db:0c:e9:bb:1c:9d:a8:4c:6f:68:21:9d:bc:6b:57:28:8b:
9c:61:f0:36:17:55:fd:cd:d4:3e:02:d2:22:9e:63:8e:01:f2:
82:07:8d:c4:20:20:e2:17:b4:96:b5:26:42:aa:d1:f0:11:35:
2c:06:12:d1:7e:4d:73:a6:94:e3:8e:ed:02:68:06:5c:d2:d9:
b2:b6:93:bc:e7:1d:1c:71:8b:9a:79:8b:a9:10:fc:47:b9:a4:
3f:30:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:00 2025 by rpki-client