Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: mxxjjM94nwW9+2dWp8ZNcTBGAoop6xp4RP+BhmvbmXE=
Subject key identifier: 0C:F6:C1:BD:2D:1C:D2:5F:FD:31:5E:9E:70:F5:0E:77:5A:C4:5E:5B
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 01968BEF4681AE01D5AD9C5526F7B0E88E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 13:00:36 +0000
Manifest this update: Thu 01 May 2025 13:00:36 +0000
Manifest next update: Fri 02 May 2025 13:00:36 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: 7eIRR2jF12eAOq4Cc6F5Aw4WvIbOP0SAInZ6qHaq7IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:46:81:ae:01:d5:ad:9c:55:26:f7:b0:e8:8e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: May 1 13:00:36 2025 GMT
Not After : May 2 13:00:36 2025 GMT
Subject: CN=0cf6c1bd2d1cd25ffd315e9e70f50e775ac45e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:90:70:79:0f:f9:0d:00:cb:62:c6:b5:28:
9f:ae:9e:45:6c:c0:8d:dc:a1:de:3e:25:d8:1c:bc:
14:38:32:1c:33:94:4f:bd:f3:61:3d:09:93:fa:37:
bd:86:b8:00:56:94:07:7f:36:59:ea:be:37:db:cf:
49:8a:ba:19:67:4b:5f:e8:9f:a2:55:22:ce:35:b4:
63:74:0c:e4:cd:63:51:7f:aa:17:94:4f:6e:3f:3c:
c7:7d:ef:40:70:7b:85:f2:45:09:1b:e8:6e:b6:8c:
b9:f3:5a:a6:b8:f1:b0:a5:3e:19:dc:48:df:05:5f:
be:50:2b:49:3a:5f:46:0b:1e:a2:4f:25:a2:c3:83:
b0:fb:af:f4:76:bf:7e:14:c0:79:52:2d:58:73:a5:
fd:a1:b3:29:d2:01:3d:ba:2c:8c:fb:60:c8:e2:98:
e4:35:5b:57:a4:c9:bb:e1:2a:f4:dc:0c:86:4e:ce:
40:7b:9d:28:c3:4a:1b:20:aa:fc:ed:1a:4d:93:6e:
de:d4:93:03:9f:8b:f5:c8:38:4f:a5:6e:d1:ab:83:
cd:6e:a5:20:20:7b:93:73:f9:c2:11:0f:f5:c1:93:
3e:62:2d:5c:a3:db:ae:34:a7:8e:42:fc:61:f4:20:
20:5c:6f:5f:1c:4b:ea:d0:d3:f6:e6:ba:84:6d:87:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:C1:BD:2D:1C:D2:5F:FD:31:5E:9E:70:F5:0E:77:5A:C4:5E:5B
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:04:c9:27:8e:9b:93:49:24:04:60:10:86:2d:4d:ed:de:
57:d0:c9:f5:13:26:c6:cc:a6:8a:26:be:dc:d4:2f:7d:d1:46:
23:eb:34:6b:18:48:4e:d1:2c:df:f5:6d:25:02:26:57:10:bc:
d1:a9:ed:f5:4e:ea:4c:70:ee:94:ad:1f:b6:e6:ac:02:74:23:
7c:0f:ce:ff:0e:54:84:7e:4e:86:b2:43:7c:a1:d6:3e:df:77:
0a:4b:5b:86:76:7b:0a:9d:73:b4:a7:20:a4:e6:78:5a:17:94:
5b:40:95:ae:2c:13:64:8c:23:e0:69:c3:98:75:50:d8:80:c1:
56:90:78:32:c9:e0:93:4b:fd:e9:9b:d5:ca:4b:a5:25:66:3e:
c2:d9:d6:49:eb:ab:1e:7f:3d:c6:c4:67:90:fe:ef:26:88:88:
9e:97:86:de:67:98:f5:e3:0f:41:12:22:09:7e:5f:19:e3:6b:
e0:a5:01:c0:fe:9a:27:00:25:c8:ae:5d:fe:18:b6:99:ce:9a:
c8:f6:0f:f7:24:a9:ee:0f:76:a3:33:97:94:2b:ee:18:09:b7:
5b:8e:da:e6:7d:6e:e5:90:5c:6c:94:9f:ad:2f:67:5a:fc:da:
aa:38:06:de:87:61:2c:f6:b5:df:dc:a0:40:80:a5:ae:16:2c:
df:58:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:33:12 2025 by rpki-client