Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: r9g8tz9081q4W6qGf5I+pjEwnl61SmlNxFdwpk4yLOk=
Subject key identifier: C6:1D:DD:0C:5A:CC:E9:2E:58:65:EE:18:29:34:12:6A:13:F1:D5:94
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019677C3BC4FF0323E0F7DB4E0CF46B283EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 1521
Signing time: Sun 27 Apr 2025 15:00:38 +0000
Manifest this update: Sun 27 Apr 2025 15:00:38 +0000
Manifest next update: Mon 28 Apr 2025 15:00:38 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: UeGQUVMX43/+0+O9sFF0jOvGjewxk9Lv5Y66kd41K+g=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:bc:4f:f0:32:3e:0f:7d:b4:e0:cf:46:b2:83:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Apr 27 15:00:38 2025 GMT
Not After : Apr 28 15:00:38 2025 GMT
Subject: CN=c61ddd0c5acce92e5865ee182934126a13f1d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:0d:c2:9a:07:9c:23:2a:12:3d:7c:cc:1c:
e2:f6:05:d9:37:b2:9a:b3:ce:8a:ff:cf:08:5e:e0:
92:89:c7:2c:d3:54:19:39:46:2a:cc:9e:ca:40:e2:
fd:2f:1a:79:f8:c9:fc:07:d2:fa:ee:be:70:25:96:
01:bd:37:fb:cf:a9:e1:68:37:c3:ca:99:f3:49:81:
fb:cb:72:39:c9:09:b6:0d:f5:24:68:80:4b:aa:fc:
12:c6:0c:76:e0:1c:5d:94:69:39:ff:7b:4f:98:89:
ad:02:e1:b3:c1:56:88:71:1e:c1:a7:e1:1e:c9:24:
4b:6a:ea:96:54:90:cb:32:ae:81:48:7c:8a:22:95:
ab:86:74:fd:78:9a:a6:cd:40:04:27:9f:48:f7:6c:
2a:10:1b:1d:80:5e:70:a0:46:b3:4c:a4:9b:d4:57:
c6:49:fe:82:bc:9b:38:8a:21:1d:12:cd:da:9a:41:
92:66:17:e0:e2:03:0d:cd:f5:9b:ec:e8:45:09:49:
b0:61:6e:58:8f:2d:bd:76:18:96:bb:c5:05:3c:b0:
0f:6d:77:10:a3:f2:19:35:2c:ad:88:61:85:de:3f:
ba:a8:68:7c:8d:51:67:26:b4:47:01:95:18:0b:03:
d0:9f:a8:17:2b:0e:b5:ae:84:e9:52:82:4b:83:58:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:DD:0C:5A:CC:E9:2E:58:65:EE:18:29:34:12:6A:13:F1:D5:94
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:09:53:ee:c4:65:e6:58:3a:7e:18:b9:8f:8a:93:1e:0d:
cb:3d:23:2f:e6:74:c8:fa:96:c5:33:cd:12:20:ed:0f:e2:78:
71:3f:1e:b7:a5:e4:ae:2a:ab:e7:3a:25:98:e9:38:34:4a:3f:
99:2e:44:46:12:c5:ef:5f:92:d0:ad:09:f6:fc:ec:d3:6d:0e:
27:e4:b7:ee:1e:5a:e6:a3:a4:26:9d:a6:ac:bc:7e:7c:0a:eb:
1c:7f:f2:38:d0:c8:c1:71:38:d8:d4:5e:4d:21:93:36:eb:d7:
f5:c9:8d:37:5c:89:89:91:6a:5f:69:4c:16:18:47:d9:77:72:
af:a0:33:68:d6:e3:0a:7d:ec:34:6b:7b:5d:a8:25:7c:b5:eb:
a1:7a:76:41:df:2f:a5:da:31:7a:ff:a5:c1:6d:2c:5f:d1:57:
1d:db:d0:91:1d:67:b0:65:43:9f:6a:3e:6f:b8:44:ac:36:d9:
9a:79:6d:0a:b5:3a:e7:d7:57:39:f8:d6:f3:0e:8d:cd:c5:6c:
75:f8:3e:60:87:3e:c4:b4:a3:0d:d0:31:fb:cc:bb:5e:a9:e8:
f1:15:8f:c3:49:ab:47:9c:10:67:9a:1c:08:19:83:fe:28:93:
c0:81:d9:9c:45:f9:bb:c2:b3:50:56:8c:93:78:d5:58:2d:f9:
c2:7b:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:08:00 2025 by rpki-client