Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: zYRHj9o8h89OCLC37Q3QZWLBpnSn6ewJiLWqzkh92IE=
Subject key identifier: E8:77:08:7F:45:63:DC:96:DB:44:9C:84:E5:C5:8C:D0:46:C4:5C:F0
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 01967FB4C80C985BBD0CF02143BAE6B00441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 152D
Signing time: Tue 29 Apr 2025 04:01:16 +0000
Manifest this update: Tue 29 Apr 2025 04:01:16 +0000
Manifest next update: Wed 30 Apr 2025 04:01:16 +0000
Files and hashes: 1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: m6/ZY4Z3xTxvCD5fp4AxFtS6iqagGEJcpNUXMxW+Z44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:c8:0c:98:5b:bd:0c:f0:21:43:ba:e6:b0:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Apr 29 04:01:16 2025 GMT
Not After : Apr 30 04:01:16 2025 GMT
Subject: CN=e877087f4563dc96db449c84e5c58cd046c45cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:66:f0:0d:d3:b3:99:a1:e4:9a:c8:3e:79:
44:56:aa:53:71:aa:92:24:82:be:eb:8c:43:95:b8:
3d:aa:56:4f:07:f0:0b:a9:3b:f8:79:af:66:30:28:
bf:63:fd:5f:53:ee:53:11:a5:55:9d:1c:f6:27:55:
f1:a9:2e:09:cf:28:6f:72:fd:32:8a:25:07:2f:a5:
3a:c0:9a:6b:d0:ea:e3:36:9f:6d:d8:1d:97:b5:32:
20:44:eb:43:a7:18:71:e3:35:32:54:c7:1e:ed:8b:
98:80:7f:d6:74:73:75:14:4d:00:d7:05:23:26:b3:
c5:17:58:c2:ad:9b:94:90:a3:1a:df:27:e3:1b:5d:
2e:e4:e9:37:1a:80:73:ed:91:b3:81:2a:2f:28:55:
0d:32:2d:19:b4:74:c6:15:49:15:aa:8a:6c:c5:c1:
f3:1d:bd:46:33:8e:ff:f6:4c:36:db:7a:fc:bd:b2:
34:e3:5f:1c:1a:70:bf:a9:a2:c5:9e:82:07:2d:3a:
95:fe:b3:c3:fe:c8:cd:9c:1b:f6:ba:2b:23:95:a1:
e6:b5:ae:ab:76:92:b4:a6:8b:e3:3a:ee:5c:db:53:
44:6d:57:b9:eb:17:94:6e:48:47:f5:36:39:06:c5:
c2:96:f2:2e:da:4c:4d:2a:4a:7b:92:06:de:bd:1b:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:77:08:7F:45:63:DC:96:DB:44:9C:84:E5:C5:8C:D0:46:C4:5C:F0
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e2:f9:69:12:ee:ef:80:ee:cd:2e:7d:6b:10:72:a9:24:3b:
be:3a:c6:76:d1:77:c0:4b:31:bb:b2:70:1f:a1:da:a9:63:26:
c0:9b:fe:09:10:c9:e6:a5:ba:a9:d8:0a:52:17:08:0f:be:c2:
62:5a:f0:4f:04:b1:1a:72:a4:fa:98:ce:08:0b:c6:9b:e4:80:
1b:ae:51:f4:d2:45:f3:15:67:cb:46:29:6b:de:15:96:7d:ea:
ab:8b:42:a9:89:da:1d:0a:da:99:a8:59:20:5a:89:17:ae:83:
a8:aa:69:ce:3e:f0:4b:fb:a7:e4:0c:bc:f5:38:10:a5:58:4c:
0d:a9:7c:c4:b0:43:bc:da:51:ea:3d:2e:2e:ed:48:8d:72:82:
57:c4:68:80:41:87:68:71:f9:1b:7a:37:bf:58:35:70:da:5d:
8b:8a:df:68:0b:83:e1:80:09:64:ce:c6:90:fc:7e:d2:4c:5c:
f6:19:7c:6f:49:70:b1:37:89:96:57:d8:21:57:dd:01:ae:b3:
b3:99:0b:a2:ca:b7:6c:32:52:00:85:ad:e9:8f:a7:46:32:91:
35:cc:67:02:56:6f:ba:b6:6e:c6:0b:09:d1:a9:2f:24:19:09:
8c:40:db:33:e4:b5:a1:f5:c6:1f:4b:c5:81:81:1c:d0:15:a7:
f8:41:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:27 2025 by rpki-client