Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: usEJy8KMngZz7NGQ48bQceBtBMpr4Ev1c7J57t4FYDM=
Subject key identifier: 2D:22:E0:80:39:1B:87:23:DD:A7:9D:8D:2F:B5:78:D4:C1:7C:3D:14
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 01967EA18C7301F357CD99CC0CBEECB868E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 1523
Signing time: Mon 28 Apr 2025 23:00:38 +0000
Manifest this update: Mon 28 Apr 2025 23:00:38 +0000
Manifest next update: Tue 29 Apr 2025 23:00:38 +0000
Files and hashes: 1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: Bdrjv42gVCgupnrMOt5QdJM7lxIuuqa/EJxbaSZXpyA=)
3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:8c:73:01:f3:57:cd:99:cc:0c:be:ec:b8:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Apr 28 23:00:38 2025 GMT
Not After : Apr 29 23:00:38 2025 GMT
Subject: CN=2d22e080391b8723dda79d8d2fb578d4c17c3d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:0a:ed:19:78:43:3b:c1:8d:2e:3d:be:a0:
8a:2b:80:7f:3d:c2:ef:73:b0:b2:31:68:a1:e9:d7:
48:3e:f5:c2:cb:54:bc:6f:00:fb:3a:6c:30:e4:71:
9a:aa:4e:8b:7d:74:82:d6:fd:8a:9b:d9:52:d9:16:
99:64:f6:5e:2a:5c:63:8c:a2:de:77:55:ba:6d:9a:
ae:fc:60:4f:20:bd:c1:83:a3:60:9e:a8:47:1d:74:
c9:ee:a8:a8:71:ab:22:f7:39:60:29:6d:16:8c:72:
d4:4c:86:e3:63:44:0c:60:4a:ea:5e:0a:69:69:ed:
eb:d9:8f:b9:9a:d9:48:3e:e2:fa:ec:e7:ee:4c:d4:
c2:d2:ab:e8:90:74:97:f4:14:d2:b5:fc:53:fb:fc:
62:f6:cb:83:a8:29:7d:07:19:61:4c:fc:da:b6:03:
f8:45:6e:42:39:07:ad:c0:e6:58:57:e5:b8:8a:8d:
5f:53:f8:46:2f:f7:c6:af:cc:f6:e7:fb:d4:92:6d:
9b:28:41:db:38:e6:1a:33:11:9a:75:e2:51:20:83:
ae:e1:5e:60:c9:b9:45:98:04:3b:73:79:53:c7:c2:
76:35:d6:a4:ad:a4:5f:4e:5e:ac:cd:d7:75:18:e1:
1b:c1:db:ab:b3:1a:db:43:ab:36:7d:97:b1:5f:fc:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:E0:80:39:1B:87:23:DD:A7:9D:8D:2F:B5:78:D4:C1:7C:3D:14
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:64:36:8d:54:73:84:4a:fe:a3:50:ce:06:54:8c:3e:56:
2c:88:29:f0:44:0b:ca:b2:ef:85:a8:22:95:98:2b:65:09:f6:
66:58:e2:be:b2:1b:22:6c:54:57:91:c8:0c:60:4f:cf:b4:e3:
bb:53:e5:08:67:8c:c1:d0:45:cc:29:d3:5f:d4:00:41:e3:0b:
5e:01:29:09:7b:b3:60:ca:b7:b3:c4:21:29:17:7b:c1:59:d3:
2a:2d:a3:0c:65:1e:96:4c:f2:36:07:85:53:b2:56:96:87:a5:
26:77:7e:14:fd:5d:5c:b5:bc:48:01:57:a2:70:b6:20:eb:20:
53:c9:69:72:3f:c1:dc:e8:0e:0d:d1:e1:e5:36:32:fc:b5:b1:
d7:6f:e0:0a:24:9d:b8:64:93:aa:fb:56:80:84:7e:16:4d:e6:
60:1d:32:79:3e:0a:ca:ce:69:b4:55:f2:85:77:5d:ec:8f:73:
7e:69:01:8b:98:54:c5:9c:a7:b3:5d:7d:65:27:9f:51:00:5c:
94:76:60:e6:a1:6e:1c:78:97:ab:e6:74:b2:98:c1:67:80:b4:
f9:0b:ec:0d:e2:8d:ba:85:25:08:59:bf:84:66:88:5c:0c:25:
f1:8d:ae:54:8d:bd:3d:9d:a0:1f:5b:9a:a1:f5:78:8d:12:e1:
c4:d7:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:43:33 2025 by rpki-client