Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier: cuCuyDWZAeJMvw8LvTadMm46OMfOoprIQFyvDkzo3Mw=
Subject key identifier: 9B:4E:04:AC:C0:27:D6:43:0E:FE:DE:14:49:AE:EA:57:03:29:E3:3B
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019678D6CFEF791FFB1D4021E73BC47D9E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number: 14D3
Signing time: Sun 27 Apr 2025 20:01:05 +0000
Manifest this update: Sun 27 Apr 2025 20:01:05 +0000
Manifest next update: Mon 28 Apr 2025 20:01:05 +0000
Files and hashes: 1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=)
2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: s9C8pB6kuY0DRe0PiFTLaeqx6tNaglTHpxIhj655koU=)
3: hyarknq8b7RuIBM-YBqseStGpbs.roa (hash: Q8UycgtcBXykUE11/kKCtnDO8tk0NFq+ACIXZD0W+5A=)
4: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:cf:ef:79:1f:fb:1d:40:21:e7:3b:c4:7d:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Apr 27 20:01:05 2025 GMT
Not After : Apr 28 20:01:05 2025 GMT
Subject: CN=9b4e04acc027d6430efede1449aeea570329e33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:0d:91:84:22:86:7f:7a:00:5b:99:7d:24:
86:15:e0:8d:30:bc:ed:0d:23:9b:fb:59:a3:02:66:
ff:ef:6b:01:06:fe:6d:c9:21:f3:fb:d1:a6:f2:64:
65:99:02:21:c1:f9:15:28:0d:ce:cd:e7:f0:b7:ab:
90:3f:30:1f:de:c2:c7:c6:79:72:7d:f8:e3:79:5c:
5f:76:46:90:98:55:bc:15:0f:d2:79:47:54:cb:69:
45:de:dc:55:09:ba:2b:43:e9:69:e9:1c:d2:58:a4:
3c:0c:99:f0:18:a5:b8:ee:4c:be:3d:dc:06:c9:94:
10:06:d3:a8:eb:47:ac:a3:86:88:97:e1:eb:c5:00:
9d:e2:0a:b5:9b:aa:ba:7e:be:df:e6:c9:02:7b:72:
96:7c:5d:7a:33:b2:cf:3b:07:04:c4:4e:0e:0a:b9:
c5:d6:d6:a0:31:44:ec:c6:34:d0:81:b7:15:e5:2b:
9c:35:bc:10:2a:0e:48:16:b6:f9:24:4e:86:16:ab:
41:85:9b:89:40:b9:04:67:29:1f:61:36:33:89:8a:
cf:53:de:1a:7a:bd:d0:d4:cb:14:40:c3:72:7f:2b:
ca:96:24:07:02:54:7e:0b:a9:73:d9:d3:45:93:f2:
9a:ce:c0:52:d0:f6:f8:a9:f8:38:2e:b0:1b:3e:c7:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:04:AC:C0:27:D6:43:0E:FE:DE:14:49:AE:EA:57:03:29:E3:3B
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a2:fe:77:f4:18:04:b3:7f:8d:b0:be:46:95:69:32:ab:e8:
aa:fb:07:4d:bf:23:80:6c:33:25:aa:0e:1c:b8:19:93:25:83:
b0:45:32:4a:9e:c2:a3:11:d9:d0:cd:e2:61:50:43:f4:ab:9a:
58:f4:6d:66:e7:72:5b:08:62:62:af:57:6f:ac:16:2b:91:05:
e8:e6:50:66:f1:1b:ef:52:ff:7a:7b:5d:6c:71:a3:1f:2c:81:
75:d9:cb:52:ae:04:25:82:2c:d6:d0:53:b9:f1:4a:b5:9a:5a:
18:eb:9e:64:b3:10:a4:05:89:ce:7a:9f:3a:4c:09:f3:00:bf:
6c:00:d5:cf:f0:ca:95:4a:6e:ee:d8:4e:98:17:28:72:bf:40:
0d:75:b7:c8:a4:bd:2c:85:74:f7:4e:80:b5:d7:c9:c5:1e:12:
d2:85:a1:e4:a0:91:80:02:ae:c9:ac:ed:6a:04:c7:47:0e:f7:
73:39:10:1c:b8:ef:5e:b6:b5:9b:ce:77:67:31:10:3a:8c:4b:
b4:44:5d:62:a4:79:ac:24:af:c9:69:73:a2:54:0b:f8:0d:15:
22:b5:0a:9a:8a:6a:e4:7d:09:53:cf:f2:f8:a0:af:e3:b7:c0:
e5:a8:09:93:eb:f4:7f:c5:82:94:6f:79:bf:e0:83:24:7c:4f:
13:08:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:57:53 2025 by rpki-client