Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json)
Hash identifier: 2tpnmMLBVc4RdC2R2yGD8jh91nmDMKdZCBi52Ra1PTg=
Subject key identifier: 69:81:7E:18:1B:FF:B6:E4:4A:29:E1:D4:98:95:52:72:A8:92:09:A5
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019676B15C4E242661B0AF571FDF01A57863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
Manifest number: 154F
Signing time: Sun 27 Apr 2025 10:00:57 +0000
Manifest this update: Sun 27 Apr 2025 10:00:57 +0000
Manifest next update: Mon 28 Apr 2025 10:00:57 +0000
Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=)
2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=)
3: FKpqZdntLbQQiiDctaWjTQ-Jhgg.roa (hash: 2VKhNWCYf2bUYSS476FI+lvkfrpBpN2Ra578sYJxX0M=)
4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=)
5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=)
6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=)
7: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=)
8: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: gQc2shqBW8etvZQ90PFxdM83wJLL2ccK+GngjpMB108=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:5c:4e:24:26:61:b0:af:57:1f:df:01:a5:78:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 27 10:00:57 2025 GMT
Not After : Apr 28 10:00:57 2025 GMT
Subject: CN=69817e181bffb6e44a29e1d498955272a89209a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:4f:c7:e1:69:c5:d0:72:84:e1:19:21:bb:
93:b5:1f:ad:ce:95:f6:6a:01:09:50:73:d7:82:a2:
22:6d:96:79:6e:f3:ed:c9:6e:ed:9f:fe:24:75:55:
1d:5b:0b:19:af:88:e7:2f:dc:85:83:a0:2f:37:65:
67:99:1b:cd:91:77:c2:a2:46:2a:4e:10:0b:88:86:
7a:26:41:fd:69:f4:0f:7f:ce:00:3f:d0:c9:95:32:
4e:8b:85:0a:cf:a0:e9:66:fc:79:33:4c:32:b8:bd:
d5:22:c4:bd:d5:c8:f1:6d:ec:ce:06:75:96:6f:c3:
89:f5:d9:b3:d1:c3:82:17:74:85:c6:11:4c:7a:36:
00:ff:ec:66:28:cb:20:0f:2e:1b:c3:14:1e:ba:eb:
ff:9c:be:36:00:41:1d:62:89:38:a2:68:db:c2:12:
7a:ba:46:4b:e4:7c:d6:1f:94:0e:62:22:ca:be:e6:
76:ee:4d:81:d0:b2:61:fa:a4:43:de:6c:b3:81:0f:
fa:89:54:c6:8e:3c:69:73:9d:65:ff:b1:49:b1:76:
d8:eb:8d:bd:7d:17:10:6b:ff:78:ce:0c:c6:c2:05:
64:28:de:57:5d:10:16:54:b7:06:87:06:dd:51:33:
21:fb:0c:54:d6:35:52:c1:c5:ae:9a:07:9c:d8:6d:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:7E:18:1B:FF:B6:E4:4A:29:E1:D4:98:95:52:72:A8:92:09:A5
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3f:98:d9:4f:56:7a:80:6c:12:e7:3a:26:6b:95:fb:b9:ab:
9c:57:d7:fd:1f:ba:25:d1:e8:0f:cd:07:9f:09:f0:6b:cd:a5:
c7:af:f6:96:6d:58:0f:6c:b8:e7:7a:ee:ac:f3:a4:cf:83:11:
f4:3a:f4:e0:6a:02:f1:b2:e4:f4:ce:fa:f3:92:0e:03:58:f9:
e2:f3:6f:b7:c6:ab:11:66:54:af:1a:54:93:ee:cf:6f:a2:b9:
1a:10:43:8e:39:ba:e7:3f:26:e5:86:92:13:53:b8:bf:91:ea:
f1:a4:54:45:61:4a:5c:04:59:c5:f5:f0:92:8f:3b:0f:73:3c:
32:9e:78:40:80:a8:ec:84:18:96:28:d4:4f:dd:a9:a7:9c:29:
c4:de:08:a6:98:07:00:7d:c4:0f:3c:6a:88:2d:18:9d:51:6f:
cf:e0:91:78:aa:33:df:47:58:e8:2f:1d:4d:1a:4d:ff:ce:57:
87:48:57:d3:c5:40:d9:94:7a:f4:ab:b6:96:6e:6a:86:f8:00:
6e:5a:04:a8:a4:24:00:9c:b3:da:10:8d:b7:67:97:71:45:3a:
31:bd:dd:85:9e:0b:0d:f3:61:f2:81:cd:24:ca:ca:a8:38:6a:
2d:29:4a:5b:6d:63:47:05:6e:f9:61:7f:ed:b9:d1:ec:04:d3:
26:f7:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:56 2025 by rpki-client