Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier: cwe2QZF23n9c50MkENjkDo+dpfSd/Ak+qIoaZ9qLGkw=
Subject key identifier: 7F:6E:5F:D5:90:C4:31:3A:0F:CD:90:1A:27:59:ED:F3:85:45:82:FC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019675D5556B34C187144FADEA1FEC7CFFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number: 152C
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: 1-bDKpqd9IKO5rqqIeQW8oQ51t34.roa (hash: 9sRAYb2cLVUUELUPyHX1OFnXLEKmKwd0nv4wx8tY0+U=)
2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: Kn1CFM6xhPU0fhFT3EeX9+hg8hyfLv4qRofJANtZWgg=)
3: BqT_zHeeWQLEscmXDYSo2bW_5hY.roa (hash: DjY7R/bkgsCT9jACm60nVer0BD9WjC1RQXTotru/rr8=)
4: Dsz5uvaCfsaiJBGzDzecMewv-Ug.roa (hash: MeEoWIXoG3LOHfXQOIQXyy5qgG/yZoQCFPvU7WaAQZk=)
5: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
6: IZHMmqPmt3UlljgeogJmO322ssc.roa (hash: PycVs9gX0pMXEW+1UcglBSJJRtamvhRH7S93lKKOQPE=)
7: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
8: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:55:6b:34:c1:87:14:4f:ad:ea:1f:ec:7c:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=7f6e5fd590c4313a0fcd901a2759edf3854582fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:01:34:47:89:15:3a:60:37:b3:3c:69:2e:
46:07:6b:a8:e6:e7:48:63:54:8b:02:c2:1d:10:e7:
6b:30:1f:d3:1d:b2:b9:a8:c1:00:8b:6f:3d:2a:ca:
9c:38:e9:0b:e8:4b:34:e4:a8:4e:9a:73:d3:57:a5:
d8:1e:bd:14:58:aa:ef:f3:f8:43:27:bf:38:a5:95:
2c:cc:e1:97:04:8c:52:38:4b:9e:98:32:06:8a:d7:
6d:26:4a:c4:c5:5b:4f:e6:4f:18:3e:0c:98:04:3b:
30:59:0e:b7:a3:2d:21:3a:f1:75:aa:ba:a0:d7:00:
40:3a:b1:25:47:8d:71:42:57:91:a2:d4:9a:38:d1:
db:5e:bd:c3:ea:c1:0e:62:cf:69:5a:90:e9:aa:93:
3e:b4:7e:af:17:ec:e7:59:8f:dd:7d:01:36:c2:9d:
f0:dc:06:23:c5:f2:20:ed:19:dd:8d:bc:9f:7d:1e:
d3:94:ba:4f:75:45:e0:14:41:2e:26:d8:38:3e:8d:
a8:f2:df:39:c4:82:93:65:51:85:1a:76:87:eb:77:
74:8d:ac:80:d0:db:ef:c5:c3:56:26:25:0a:7f:20:
13:7b:f9:bf:f0:9c:79:d1:ff:8b:4b:21:b4:69:70:
7b:ad:26:a8:22:3f:d4:b9:ae:09:16:12:9b:c3:bd:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:5F:D5:90:C4:31:3A:0F:CD:90:1A:27:59:ED:F3:85:45:82:FC
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:ed:18:0e:b3:74:e7:c5:61:1f:9b:93:ad:a4:d6:dd:26:
5a:76:db:73:12:c2:bf:96:27:fd:78:64:d8:8d:c1:3d:ba:91:
76:da:2d:ae:12:5c:4c:49:fe:78:1a:00:fc:6b:af:89:b4:6c:
87:4c:81:0e:ee:64:98:03:e3:6a:d1:6f:12:7a:d8:9a:1a:0f:
c6:04:95:a5:54:72:eb:62:01:80:53:5c:8f:f3:90:45:f5:3f:
b3:29:fd:a7:49:77:73:54:ee:d5:96:ee:d0:b3:58:8b:92:e4:
d4:3d:4b:00:42:6a:ca:cf:43:fd:75:0a:b3:32:12:ca:fe:b4:
18:bf:d9:02:08:ea:89:a1:7e:65:6b:48:72:00:e9:82:25:c6:
47:df:02:1a:75:67:96:68:b8:0b:89:e3:20:d9:c2:5e:63:d5:
23:86:b3:01:59:c8:9b:90:f1:ce:17:9e:50:ed:21:4f:94:33:
4e:96:42:6e:08:45:d4:c6:01:62:28:b1:24:1b:96:27:64:98:
ee:98:61:3d:6e:1b:c0:63:8a:4a:5c:6a:c6:8f:79:4f:e1:f0:
1a:0b:9e:76:69:0b:2e:5b:02:22:ef:30:3d:78:78:2d:c0:37:
e5:8c:14:16:ba:6f:c5:f1:de:7e:43:81:52:8e:bb:89:40:76:
3e:f4:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:42 2025 by rpki-client