Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: 21kZdjOKu9AOE2utERA2Nnvhzz7BRM6x6DSbzWWrCcs=
Subject key identifier: 3B:CC:58:C3:BE:93:DE:87:83:47:21:00:D0:F7:B0:C0:CC:D6:77:00
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019691BA8B5830773BD2A2BE2D962836BE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1523
Signing time: Fri 02 May 2025 16:00:43 +0000
Manifest this update: Fri 02 May 2025 16:00:43 +0000
Manifest next update: Sat 03 May 2025 16:00:43 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: dW7RGIXHQZtvZ6bejDTmC2t+XGloCfmaTh/ZS5qYoHY=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:8b:58:30:77:3b:d2:a2:be:2d:96:28:36:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: May 2 16:00:43 2025 GMT
Not After : May 3 16:00:43 2025 GMT
Subject: CN=3bcc58c3be93de8783472100d0f7b0c0ccd67700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:82:2f:0d:45:aa:af:85:be:48:a1:6f:5c:76:
f7:60:2a:a2:ec:40:ec:f1:3c:66:e5:ab:a5:0d:4e:
fd:55:58:30:15:d7:ea:fd:f9:fb:b9:e8:a4:da:41:
d2:7d:0e:a1:c2:d8:a9:79:6c:55:49:ba:f3:6b:09:
1c:0b:e9:67:bb:0f:60:ca:41:79:c2:14:a0:3b:f6:
39:eb:0c:37:98:e5:a3:99:2c:db:43:2d:ca:14:7b:
4c:f2:3c:d9:e7:87:b9:e9:42:1b:37:76:7f:be:9d:
99:0e:d5:5e:99:91:35:6b:15:03:ca:99:49:c2:5d:
41:ed:85:f6:af:17:34:df:a5:53:d0:43:9a:70:0c:
00:7d:d8:12:76:30:8c:d0:e1:0d:36:0d:3f:3b:8f:
c4:ba:08:75:77:28:24:18:6e:40:2e:d2:6c:fd:82:
0b:c7:60:3f:7e:3d:f8:07:1e:e7:74:ef:7d:b2:4f:
ce:03:26:61:80:60:8c:8e:a1:b1:06:ec:e9:b2:72:
76:49:6f:ed:eb:6b:18:79:90:5b:28:51:5c:e7:ad:
6b:3e:f9:f4:77:50:be:2c:43:54:62:f1:d3:0d:f7:
f1:28:60:74:75:96:5e:19:e3:52:08:ad:b2:99:68:
c4:17:43:80:f9:1e:b2:98:4e:af:04:18:b6:56:da:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:58:C3:BE:93:DE:87:83:47:21:00:D0:F7:B0:C0:CC:D6:77:00
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fb:17:7e:4a:d5:60:72:7f:b7:32:d9:49:17:2c:a0:99:6f:
ac:b5:21:4a:71:a1:79:34:9c:81:b9:63:28:50:cd:b1:dc:8e:
71:74:cc:ec:32:36:01:10:8b:8b:81:0a:22:2a:58:8d:9a:15:
fc:22:a9:47:7a:36:98:59:6d:4b:40:73:88:6c:6f:7f:57:a7:
12:53:1d:24:31:18:1b:f4:9b:ef:cd:14:fa:77:99:62:7f:93:
b7:20:97:c5:d6:65:d1:c2:8b:97:44:14:f5:cd:ca:9e:09:8f:
d1:7d:18:d3:36:5d:eb:87:3b:af:78:c3:be:fc:33:84:55:86:
41:53:82:95:b0:7d:88:a2:2c:26:15:79:55:2b:ed:e9:bd:f0:
9c:6d:32:35:1c:f5:2f:2e:27:f2:98:02:a3:59:3b:f0:b4:1d:
24:08:1b:70:15:6e:89:64:c1:0f:d2:a7:80:75:17:3d:69:45:
e3:78:0d:d7:56:c6:4f:8e:f4:80:d1:ee:4b:e4:17:16:95:51:
7c:1e:67:e3:c0:24:b0:11:6d:c8:5f:be:20:c1:be:e7:67:e1:
1b:ac:23:f7:e7:df:3b:c6:0f:68:0b:d2:96:b5:8e:3a:17:e0:
5d:43:59:6a:99:1c:b5:cb:ab:f7:40:d5:51:11:6a:af:77:e9:
00:d2:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:56:45 2025 by rpki-client