Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
File: miZlfmslRJQlt0hkXnQgx2rCs6Q.mft (raw, json)
Hash identifier: ThSzi9o0fOJ1IgsAxY4kVsqqFvw4aghzfc5+aYfjivw=
Subject key identifier: 26:ED:CD:73:1A:D5:FE:5D:E8:7A:B7:7B:E6:CD:F0:63:7C:0F:43:CA
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 01967E3346091D9BDD21C53EA41CE230F04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
Manifest number: 0D0A
Signing time: Mon 28 Apr 2025 21:00:11 +0000
Manifest this update: Mon 28 Apr 2025 21:00:11 +0000
Manifest next update: Tue 29 Apr 2025 21:00:11 +0000
Files and hashes: 1: 2V_JK6rjk2y5OzV-jGzfsnfR4RM.roa (hash: 01s7oF2QbdI5IMZDB8rKIwaE1speupoZ2KjAlI2OqvU=)
2: ZoKIl9YZFuoqn-M6l74COof5MHQ.roa (hash: PDlBi/GUPca2M+ClQHY6i6FrWZfP2ejkU5uyGLD6hR0=)
3: cbtDU2QhUAaEdfn79ud9d1retQE.roa (hash: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=)
4: miZlfmslRJQlt0hkXnQgx2rCs6Q.crl (hash: B3KDiUfgTs63EKxP9XM/3R5iTIs4i6i7gMVvcNsVa9M=)
5: tcw5kSwgCsyK7wU_KlBpjuCfh_w.roa (hash: IkNsXEM5r0B1nHPPxQlYpu689+V6gLtheirq0sa61gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:46:09:1d:9b:dd:21:c5:3e:a4:1c:e2:30:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Apr 28 21:00:11 2025 GMT
Not After : Apr 29 21:00:11 2025 GMT
Subject: CN=26edcd731ad5fe5de87ab77be6cdf0637c0f43ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:c9:8f:58:5e:86:ea:5b:47:0d:03:16:39:
4f:99:cc:2a:95:0c:ae:42:30:4f:e5:d5:c7:3a:b2:
9c:b0:e4:4d:1f:74:75:53:78:2c:91:d3:55:7e:50:
eb:fc:13:14:5c:6b:6e:d9:c3:27:3a:c7:5c:b2:4a:
f8:89:8c:6d:2b:5a:3c:cf:ae:fe:04:ef:71:08:1d:
ec:24:98:6b:87:2f:cf:2a:9b:5a:fe:37:35:6e:0b:
e6:38:cf:c7:55:c6:53:f4:68:c0:01:33:fd:70:1c:
ad:29:a2:b5:dc:45:38:ed:21:80:d5:99:9d:cb:3e:
cf:5d:a3:7b:9e:a7:b3:2c:82:f3:4b:15:81:7d:7f:
c2:c8:f7:bc:48:e6:7c:d3:28:51:f3:56:70:d7:39:
0a:c3:3f:90:ef:dd:c2:fc:b9:0c:db:b5:98:5e:d2:
54:52:9f:10:7d:36:f3:17:8a:96:19:e7:9f:21:f7:
7d:d6:c5:7a:00:ee:13:88:2a:89:00:e8:b3:af:05:
d6:27:2f:56:a8:b2:c9:d5:48:d4:c6:81:ff:45:26:
1b:e0:70:9a:9e:b7:38:24:ea:53:7a:b1:89:c3:59:
ea:a4:11:d3:c7:7a:d8:58:9e:1c:ca:4b:51:31:14:
7a:90:8e:16:1f:fc:55:f3:f8:67:56:67:16:a2:72:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:CD:73:1A:D5:FE:5D:E8:7A:B7:7B:E6:CD:F0:63:7C:0F:43:CA
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:fc:ee:34:85:a2:98:5e:38:d7:f9:87:b4:83:53:8c:dc:
21:4b:89:a4:9f:5c:ad:31:ea:1d:be:05:b5:5a:ca:ef:09:94:
1c:8f:cd:12:41:91:d3:00:9c:fe:4a:ba:82:70:be:e2:87:2a:
66:b2:be:94:ad:93:e0:25:32:0b:2f:18:4d:2f:6a:86:4b:98:
5c:0a:eb:1d:7d:d0:5c:bd:37:46:24:c9:cb:8b:88:e7:91:75:
25:4b:16:bc:6f:b1:24:1d:85:be:23:e3:f4:8e:d2:c3:88:e2:
85:00:90:e0:d1:29:42:91:7d:d9:d2:d6:e0:20:47:f5:ac:69:
0b:d3:16:8f:72:07:99:27:88:b9:0c:5b:e5:28:e7:9b:a5:8d:
f6:bd:39:7d:52:4a:73:58:88:d0:0e:7f:c1:fd:a8:47:1c:f4:
30:35:43:39:40:d1:99:89:85:8b:bb:4c:16:c4:7e:95:91:dc:
70:1c:17:e0:cc:56:71:b6:14:94:ef:c6:78:c8:ce:67:21:66:
d1:57:b3:86:74:f1:8f:35:34:1e:bd:1f:19:bb:f6:3d:55:b9:
d1:ea:f3:ab:d9:3a:f6:f7:12:f8:e4:66:f0:3f:ef:25:b8:95:
df:b7:ea:d5:af:3e:d2:50:47:60:12:9f:73:c0:ee:c3:5e:73:
41:ca:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:55:43 2025 by rpki-client