Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: rC8ll6MTb7HfIs18xYN9lTekeMYOFNg7heqMMoxhwlE=
Subject key identifier: FF:65:01:D4:0C:01:92:E3:F9:8A:51:13:D1:5A:F6:3D:8D:3C:A5:4F
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019684A3A1788062635E26D5BE75333817C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 03:00:38 +0000
Manifest this update: Wed 30 Apr 2025 03:00:38 +0000
Manifest next update: Thu 01 May 2025 03:00:38 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
3: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: WpLIbN14HwGizWQbgB6GjcxMc1RM5itxkgbu6sqKkJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:a1:78:80:62:63:5e:26:d5:be:75:33:38:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Apr 30 03:00:38 2025 GMT
Not After : May 1 03:00:38 2025 GMT
Subject: CN=ff6501d40c0192e3f98a5113d15af63d8d3ca54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:2d:fd:4d:18:da:48:5f:5a:2a:46:44:70:
4f:78:ac:01:18:67:d9:c1:c1:42:c6:c3:a8:a3:17:
12:16:91:b0:40:50:a2:e3:26:ae:17:83:83:3f:a1:
99:33:3a:4d:49:d6:80:fc:01:9c:fc:e9:20:2b:e5:
42:73:35:9a:66:f6:1e:6a:55:26:54:c6:b9:b4:5e:
02:86:3b:f6:f5:da:30:97:f4:59:b9:dd:97:eb:90:
cc:40:19:ba:f2:93:94:b6:f5:63:81:cf:cd:82:f7:
ec:82:e6:8c:55:3e:bd:d7:23:8a:73:e7:0f:dd:49:
41:52:65:43:a7:93:4d:5f:44:7b:8d:b6:3c:bf:d8:
df:e1:08:e2:2f:2e:44:1b:6a:59:58:cd:a7:17:9d:
c2:39:5b:aa:f5:0c:9e:5c:25:43:92:2a:b4:0c:99:
69:f2:ab:fe:a6:02:45:70:f2:01:03:7c:cf:b6:c1:
a1:95:35:16:00:6f:07:5f:10:f8:4d:e3:a6:b6:8f:
53:c7:ea:2f:eb:d2:39:ed:f9:fa:35:49:10:0f:22:
9a:f2:b2:6f:d7:f7:22:75:17:5f:cb:8c:40:f3:c2:
d8:df:9e:83:5f:d0:26:80:e0:ec:61:62:6b:0a:19:
11:2a:9b:0f:c6:80:cd:21:6d:0a:87:88:6a:10:02:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:65:01:D4:0C:01:92:E3:F9:8A:51:13:D1:5A:F6:3D:8D:3C:A5:4F
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:f2:2f:b8:d4:bf:42:9f:a4:2e:10:a8:8d:ea:cc:3c:18:
91:d4:16:da:dc:54:0b:1e:9f:97:0f:49:5f:8c:15:3d:84:60:
95:84:9b:78:45:57:02:28:47:ec:00:09:e6:29:76:cf:71:8d:
e2:cb:48:55:f0:2d:86:f2:ae:4c:e3:23:10:58:7a:04:c2:94:
69:08:d5:1a:b3:92:18:45:72:95:22:85:e4:d2:d1:22:40:b2:
a4:35:02:ce:0c:40:34:93:34:6a:8e:ee:75:e1:df:cf:40:5a:
e9:0e:07:d8:1e:50:a8:64:c9:66:9a:0d:02:af:f4:d2:97:03:
27:22:35:45:73:ef:8e:0a:4d:71:87:76:05:8f:29:eb:b1:19:
1d:d2:8b:1b:aa:1e:85:9c:3d:fb:57:ce:ec:09:c0:68:65:7b:
5e:e5:ca:7f:98:ab:de:f2:fc:67:b6:96:e0:66:8a:04:99:92:
42:92:f3:67:ee:b1:d5:79:5e:68:55:2a:a6:24:94:74:5b:7f:
06:ba:1d:83:b0:73:d6:ae:1c:ae:74:b9:09:7c:3e:29:c3:94:
f0:b7:2d:4a:c3:2d:91:ce:74:d1:25:a0:f4:b7:fc:d5:62:ae:
13:18:d6:99:1d:ad:8c:e0:57:8d:de:6d:43:8e:4e:23:6e:12:
6b:66:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:02 2025 by rpki-client