Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: 7JwEx7zPdLAHK6VYwkB9vE6Hgz3LeVSuwl9O18S+j2A=
Subject key identifier: 91:AB:D4:44:BF:F9:0F:51:2B:92:27:C4:82:7F:26:E8:37:A7:3B:81
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019677C3AF8A85452C707C9AD8C0C751460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 1523
Signing time: Sun 27 Apr 2025 15:00:35 +0000
Manifest this update: Sun 27 Apr 2025 15:00:35 +0000
Manifest next update: Mon 28 Apr 2025 15:00:35 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: IBm9GWOfqqNifFhuQtJsxRaZ7NynSOwfhOijKqJDg1M=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:af:8a:85:45:2c:70:7c:9a:d8:c0:c7:51:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Apr 27 15:00:35 2025 GMT
Not After : Apr 28 15:00:35 2025 GMT
Subject: CN=91abd444bff90f512b9227c4827f26e837a73b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:08:ff:1d:14:70:2b:e7:34:98:e9:83:f9:
74:29:30:d3:71:cc:52:6b:81:82:99:08:a6:d4:cf:
bb:63:90:1e:a4:65:72:f5:1d:6e:d4:3f:bd:c9:55:
62:b1:42:ba:42:34:4e:2a:71:e1:01:9f:17:f0:f7:
a1:01:0a:89:7d:11:46:56:e6:3b:4d:f8:36:a3:88:
41:98:3e:7e:d2:d5:12:58:59:4b:f5:bb:1c:7a:f7:
16:14:2b:28:7c:4e:1c:78:99:ab:e5:3e:5b:ce:cc:
d5:e9:a4:39:40:61:98:da:0f:2a:13:51:31:55:c3:
8a:0c:a3:75:2f:62:ba:99:a8:01:7f:00:be:7e:b0:
9e:5f:70:cb:19:69:3b:05:7c:84:dd:5e:0d:64:a0:
a7:eb:ff:19:77:1d:53:dd:6c:96:99:33:50:37:65:
41:f5:e3:78:b6:da:6c:f1:45:a5:05:f9:12:40:b5:
7c:5d:3a:3f:f3:5f:e6:a0:b4:6c:90:56:fc:50:8a:
49:1d:e3:16:2c:51:ef:5c:93:fa:ef:7f:33:42:eb:
10:86:20:e3:23:7a:73:e4:ae:2b:ed:cf:d8:04:d1:
c8:80:55:ab:59:61:4b:f8:8d:90:d7:d6:66:d5:de:
7d:ec:d3:db:02:81:20:2b:71:54:49:d5:8a:dc:63:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:D4:44:BF:F9:0F:51:2B:92:27:C4:82:7F:26:E8:37:A7:3B:81
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e4:51:07:5d:0c:aa:96:ec:67:a4:23:f7:cb:96:da:17:e2:
a6:07:24:65:0f:15:cd:e4:1d:a2:8e:63:e8:0d:cf:1c:a5:1e:
a7:b1:c4:26:f1:f5:a7:e7:74:ab:9d:72:97:23:5d:e1:9c:15:
7a:2c:4e:d4:4a:b6:fa:07:2e:4d:1f:bc:a3:67:c9:a9:0d:5d:
a6:da:cb:0c:62:e6:ed:b0:d2:db:8c:2b:79:f5:da:7c:6a:12:
ae:3e:2b:47:cb:ce:0e:92:48:f2:05:49:e8:55:d4:c3:1f:bd:
db:06:57:24:56:df:08:df:41:50:a9:76:a3:88:12:86:ec:8a:
b2:b6:ec:6a:7c:0f:c5:d6:27:ad:1a:49:57:41:99:03:59:23:
ae:f0:9c:f4:11:40:a4:a4:43:39:e5:fc:b5:1c:89:94:02:49:
7a:d8:d2:34:f7:95:b1:24:19:fb:a8:a6:25:b9:9d:2e:d7:ac:
9c:20:8b:98:ca:9c:6a:30:47:9c:7c:20:51:48:8d:2a:51:45:
4c:c1:db:7a:cf:77:6a:88:b1:0b:a1:f4:77:c4:8a:8a:ae:cb:
75:54:f8:6d:82:54:59:03:3c:f0:9e:0c:b0:18:bd:32:40:cc:
2c:36:ff:8d:04:66:c6:6f:7b:93:8d:d3:d8:8e:76:4c:c5:1a:
08:ad:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:34:23 2025 by rpki-client