Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: 6AUEWejTtQ+t2NAqodYJavfSk+2Aug4JaChmatqf7vI=
Subject key identifier: 52:3C:73:84:09:3C:B8:52:66:CE:53:FE:BD:09:D0:0D:09:A4:82:E6
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 019673790263A6513F80D9112872CBDDA787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0AD4
Signing time: Sat 26 Apr 2025 19:00:32 +0000
Manifest this update: Sat 26 Apr 2025 19:00:32 +0000
Manifest next update: Sun 27 Apr 2025 19:00:32 +0000
Files and hashes: 1: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: DD8nxOse8piYody3gM7u+5SasADXa5qKUh188Ap5vKI=)
3: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
4: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
5: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
6: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
7: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
8: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:02:63:a6:51:3f:80:d9:11:28:72:cb:dd:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Apr 26 19:00:32 2025 GMT
Not After : Apr 27 19:00:32 2025 GMT
Subject: CN=523c7384093cb85266ce53febd09d00d09a482e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:06:91:31:d0:27:02:fb:c4:44:c3:c8:14:
89:c0:f0:97:5b:ab:5e:2d:08:1c:3e:36:fc:d3:a5:
32:a1:3e:05:fc:48:20:b8:9f:8b:c5:3f:ec:cd:f7:
e7:6f:d2:ed:b0:cf:15:51:5b:05:39:b2:5a:53:de:
d4:54:f2:f7:44:52:af:bb:33:5f:22:5d:4f:e4:55:
07:f8:46:85:85:ed:5e:2f:57:bc:8c:1c:0e:fd:20:
cf:5d:69:41:c1:54:92:16:a8:0a:f2:ff:a9:1a:3c:
02:40:13:19:50:5f:a2:74:1e:d9:08:a9:69:e6:64:
c4:8e:82:48:b6:9c:c8:ed:26:a9:ec:dc:7f:98:98:
56:e2:74:c2:ab:2a:ae:1a:26:19:ed:37:96:72:1a:
50:08:24:55:58:eb:2c:e9:d5:e5:ba:53:9b:1d:d0:
53:f8:e2:8f:5f:d0:14:f1:6e:25:97:2e:fa:c7:6c:
9d:c8:3c:f9:99:31:cb:75:56:32:1f:bc:f1:ab:f6:
d0:09:e8:29:7c:30:79:33:56:94:3d:81:72:6e:39:
a8:ae:20:7c:7d:0d:2a:59:c6:f0:d6:bc:71:62:0a:
fc:61:65:c2:8d:11:df:b6:7a:8c:9c:c6:83:0a:60:
d8:ae:1a:bd:ef:6c:1d:e7:b2:24:32:86:b0:1c:b2:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:73:84:09:3C:B8:52:66:CE:53:FE:BD:09:D0:0D:09:A4:82:E6
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:18:7f:76:90:d7:67:25:c3:e7:87:10:a7:b4:ac:cb:28:
9a:ce:0e:13:b8:cf:85:a3:f4:e7:2a:8b:0d:ca:1d:67:15:16:
ab:d4:53:29:77:9e:65:09:e9:8a:f7:20:a6:74:21:e3:e8:a7:
b1:a7:f5:b1:bf:fd:e2:1c:fd:20:60:e1:05:6b:21:bd:8d:c7:
90:9e:0e:5c:85:71:33:4c:97:52:94:79:c6:0a:65:69:fa:33:
d2:aa:96:ae:2b:31:03:0b:a5:63:50:0e:31:8d:ec:40:db:be:
08:0f:7b:1b:c8:ba:40:a4:8f:a4:76:b5:23:9c:35:4f:94:92:
3c:d9:aa:54:17:24:f0:38:64:8c:75:db:05:ad:e7:c2:f1:90:
3a:66:6e:ed:67:86:28:69:c5:24:79:bf:c6:cc:03:db:ba:3d:
bd:9d:cd:ae:83:4b:79:82:c4:ab:1c:f0:9f:95:d7:af:28:71:
18:34:54:3c:ee:03:2d:6b:50:7d:83:3c:c6:24:24:74:6d:9a:
4c:96:74:64:fe:6c:9a:70:df:ad:c9:69:fc:5a:9c:0b:57:94:
e3:1e:fe:34:c9:5d:e6:93:cb:17:0f:07:e8:d8:14:da:8e:b6:
0c:65:59:ff:e9:b7:20:9c:c1:98:e8:59:00:43:47:0b:4f:17:
42:29:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:31 2025 by rpki-client