Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: ZCBHceHTrk+MW33dW4+zxP5SAcLjwEWjDHmKFX2I/Bo=
Subject key identifier: 9A:51:17:3D:E1:E8:18:2A:03:13:FF:C8:1A:DC:8E:74:D8:FD:DB:C3
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019674C2E9319E7B22352BE1693BF9F8E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 1521
Signing time: Sun 27 Apr 2025 01:00:52 +0000
Manifest this update: Sun 27 Apr 2025 01:00:52 +0000
Manifest next update: Mon 28 Apr 2025 01:00:52 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: 0C6Vje45k9W4jQ1NOpf4liXFZ+W3mHhhZaGmXzTi88g=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:e9:31:9e:7b:22:35:2b:e1:69:3b:f9:f8:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Apr 27 01:00:52 2025 GMT
Not After : Apr 28 01:00:52 2025 GMT
Subject: CN=9a51173de1e8182a0313ffc81adc8e74d8fddbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:3b:48:fa:f9:63:77:93:3a:6f:f5:ff:f7:
d2:79:71:bf:d1:7c:1e:19:a9:35:7d:eb:44:b5:60:
c3:1e:a8:88:0b:37:07:ac:33:df:f7:22:f3:ad:ba:
aa:80:d7:dc:7c:b9:66:61:d6:55:3a:a2:13:15:e7:
3b:4c:48:c6:1d:6d:8b:ad:63:1f:39:bf:cf:18:af:
c2:8d:66:df:5d:e1:69:dd:84:b8:be:49:07:80:eb:
61:0e:97:c4:dc:08:40:17:dc:b7:10:31:60:f9:d9:
cb:a0:ce:74:cc:43:1c:2f:f6:15:a7:b7:32:6c:c7:
5d:33:e4:b3:cf:31:00:32:01:16:4a:6b:ac:51:0f:
06:48:c6:27:3b:84:9e:6a:44:9a:d8:8f:39:53:cc:
b2:81:84:75:63:61:07:e9:bc:14:1c:ce:ea:29:fe:
a9:ae:49:44:17:6b:00:c2:23:b7:af:1f:dd:64:c0:
9c:f8:cf:c4:91:fd:9f:22:1f:a9:5e:c6:92:8e:1b:
05:d7:ac:5d:b0:7e:05:e9:06:3a:a6:3e:db:66:4e:
e0:74:24:2b:ec:a9:46:22:ca:10:13:83:77:dc:8a:
a4:ff:d1:0b:d2:35:82:bc:fd:f6:8b:e9:e3:92:99:
66:34:eb:9f:30:bd:b6:10:00:4f:ba:d7:44:4c:0a:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:17:3D:E1:E8:18:2A:03:13:FF:C8:1A:DC:8E:74:D8:FD:DB:C3
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:3f:31:e4:5e:bb:70:f7:f8:94:01:27:63:6d:a1:b5:95:
a5:19:89:5b:70:9b:8b:89:bd:ea:85:49:2f:86:21:4d:37:19:
88:13:6f:32:ef:79:05:a1:e6:85:19:de:04:2d:8f:77:c3:06:
b2:29:24:d5:04:6a:ef:88:a2:37:bc:d0:88:ca:bd:25:46:4f:
4d:67:28:5d:db:53:7e:88:1e:9d:0b:c2:12:9b:ee:56:1b:0f:
70:02:0c:b1:57:8e:50:92:25:f7:20:47:42:a3:14:ea:17:e5:
d1:cd:77:a5:27:d8:41:7b:f9:bd:59:42:9c:cd:9d:06:13:90:
c3:05:2a:57:16:dd:8a:6f:dd:ba:1d:e0:25:1e:28:ec:25:a3:
9f:a6:23:b5:95:58:5c:24:f3:3c:6e:db:19:f6:85:98:c6:e5:
6d:ea:85:4e:1e:9e:94:8f:05:cb:14:75:56:1a:fd:75:dd:84:
1c:3c:e4:b7:77:0a:5b:c7:63:bb:c1:ba:a3:a8:e2:ce:bd:18:
22:52:4b:2a:8f:ec:04:b3:70:a5:91:ea:6b:13:ba:03:d4:6d:
ff:72:bb:6f:1d:e9:b5:9f:77:f0:2e:78:a7:f1:19:bd:86:1b:
ce:4e:61:b8:d7:a2:d2:69:42:b0:69:8b:aa:34:fb:91:5c:63:
e9:91:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:11 2025 by rpki-client