Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: W8Unn3/3gXY0pJg/lsPpz1xd2qm9Sqa3eF7Z67cqckg=
Subject key identifier: 72:38:81:63:E1:1F:1D:7B:88:DD:6B:7A:48:90:C7:58:7C:A4:91:97
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019678690AFA8A97E2CCC69EBC0A22B7196E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 151B
Signing time: Sun 27 Apr 2025 18:01:12 +0000
Manifest this update: Sun 27 Apr 2025 18:01:12 +0000
Manifest next update: Mon 28 Apr 2025 18:01:12 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: I3pY/7XRLNM+N/+NAbfwJflwtiUaOfe+WrI5TatYtk8=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:0a:fa:8a:97:e2:cc:c6:9e:bc:0a:22:b7:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Apr 27 18:01:12 2025 GMT
Not After : Apr 28 18:01:12 2025 GMT
Subject: CN=72388163e11f1d7b88dd6b7a4890c7587ca49197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:98:97:e0:95:e0:3c:8b:fa:0e:69:fe:5d:
41:d2:02:a4:51:42:b4:2e:c8:d2:ac:12:cd:f9:c3:
b3:58:6b:20:4a:b1:96:cc:5d:a3:38:b6:b5:a9:13:
f5:5f:6e:d5:b3:3d:3e:62:1c:63:a3:ff:3d:58:7a:
37:97:5c:77:9c:3c:50:94:5a:0a:e6:b8:e4:5e:13:
db:8e:fd:b6:4e:d3:2c:91:63:63:ca:05:6a:c7:d7:
c6:e4:cc:53:1a:07:71:9a:13:48:c8:bb:25:e7:b0:
6f:a6:f9:8d:cc:ec:f8:76:e1:5f:f4:3e:56:fa:71:
e1:c7:9b:ef:29:df:94:f6:96:05:94:f3:ac:2a:00:
86:51:e3:31:82:23:a7:57:73:bd:d8:a4:c1:41:74:
ff:bf:a1:97:73:27:d8:dd:e6:45:b3:bd:32:d1:5d:
29:b9:b3:dd:95:a1:59:5a:c5:2c:3c:89:5c:f2:28:
4d:1b:70:5e:7d:75:33:26:9c:0e:cd:cd:bd:c8:9d:
6f:33:e6:3e:ac:44:38:ae:e5:c5:95:84:e9:08:df:
16:cb:76:50:37:3a:6b:76:fb:10:d1:85:fb:68:86:
92:97:2c:13:b4:e8:bc:97:95:41:a9:c3:d4:a9:19:
fa:a8:15:96:25:f3:c3:2a:50:7e:17:61:96:b6:36:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:81:63:E1:1F:1D:7B:88:DD:6B:7A:48:90:C7:58:7C:A4:91:97
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:96:bd:58:ff:d1:32:42:13:d6:28:b3:4e:af:64:e0:da:20:
96:5c:5c:a6:81:ad:46:d7:d2:ac:01:1a:d5:c1:e6:d7:51:ea:
98:a1:c4:7c:dc:01:fb:f4:28:a9:fc:98:15:bd:f0:06:a7:f4:
7b:a0:92:8f:b2:2a:04:91:e4:6f:48:07:cc:ed:d0:5e:1a:66:
21:ef:53:74:86:aa:c2:db:e9:63:5b:ba:86:90:83:fc:d7:c5:
ee:7c:28:23:c1:f7:38:26:e9:ea:26:e6:a7:28:46:0c:20:13:
21:52:ac:2e:25:f3:0b:36:07:d9:f1:b5:96:b6:1e:e8:52:f4:
da:bd:d3:65:97:f7:02:f3:0b:e2:8e:27:27:50:b7:22:3d:88:
ba:8c:a4:e9:ee:b9:f5:fb:fa:19:6b:2c:d5:f5:26:e2:af:02:
b5:3b:67:25:c4:96:22:54:7b:84:1d:0e:f2:d7:4d:25:d5:0a:
17:58:4b:d2:28:e7:34:9f:20:f6:00:b5:d2:57:98:7c:e7:15:
0d:c5:00:98:d3:7c:b3:6e:91:21:45:65:e2:c7:64:22:20:a0:
92:81:1b:e1:3a:80:32:64:4d:ef:bd:8b:08:13:69:61:2a:e2:
05:98:26:5f:b8:8a:dd:4f:36:bb:e3:e1:73:26:4b:94:15:bf:
f9:74:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:05:03 2025 by rpki-client