Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: BR+eaiCfrzgKd+DqQuwIg3eunM2Ytl3Sm+JBAhyFhGw=
Subject key identifier: 63:0E:E1:E4:3D:C5:DE:4A:F7:62:0B:93:F1:41:E6:0E:6F:C8:3B:8F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019618EC2A4A5DC29B08993E659F9E3ACF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0ECA
Signing time: Wed 09 Apr 2025 05:00:52 +0000
Manifest this update: Wed 09 Apr 2025 05:00:52 +0000
Manifest next update: Thu 10 Apr 2025 05:00:52 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: Iy2MjqJNiQBRyNBOhgIIKe5YbveohHlHYmfpNTwAyAY=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:ec:2a:4a:5d:c2:9b:08:99:3e:65:9f:9e:3a:cf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Apr 9 05:00:52 2025 GMT
Not After : Apr 10 05:00:52 2025 GMT
Subject: CN=630ee1e43dc5de4af7620b93f141e60e6fc83b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:83:25:ad:4c:96:e7:ac:11:dd:53:c4:1c:
b4:9b:f6:ce:21:00:5d:36:11:f4:2d:6e:54:8c:15:
e4:1b:64:6d:3c:bb:ca:86:ec:79:e9:e2:2f:9e:c3:
78:a6:43:0f:d8:9d:f8:98:cc:3c:4b:0a:1a:8f:f5:
7a:cc:ea:9e:d4:6d:2d:0d:8a:e3:4f:47:79:05:d0:
c4:8a:20:de:09:4d:f9:e5:a0:35:80:33:ad:2d:48:
0f:7b:f7:c8:d8:a2:fc:a7:3e:9f:0a:cc:6f:f2:aa:
03:b9:77:6a:95:0b:e9:6b:46:0a:de:03:87:76:d6:
23:23:bd:ed:c8:d8:42:88:e9:67:75:ee:a5:91:71:
33:28:2c:fc:a7:8b:af:b0:4e:56:92:47:6d:90:95:
ed:3b:4f:69:3e:b8:d5:13:e3:13:62:c4:78:fc:29:
d2:d5:ac:34:e0:f7:85:22:36:29:14:20:e0:b2:2c:
a3:aa:d0:e0:be:2b:df:57:8a:f8:d8:ed:5c:23:e7:
6a:25:9f:91:84:35:6e:0d:4d:e0:ad:3b:9a:b6:ef:
22:54:85:3d:f0:7f:c2:dd:04:94:74:3b:b6:d8:01:
dd:33:e7:3c:6a:c3:f8:80:d6:99:50:2f:ad:d1:b3:
18:5a:56:3d:5f:a0:e2:f9:58:cd:05:a1:7c:6c:d9:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:E1:E4:3D:C5:DE:4A:F7:62:0B:93:F1:41:E6:0E:6F:C8:3B:8F
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ed:27:94:93:da:c3:99:72:d5:62:3b:d9:da:64:2f:f6:57:
31:dd:d8:cc:b1:7e:ab:8c:26:7c:ab:71:9d:58:6c:ed:1b:49:
0b:11:f2:c8:dc:b5:28:6b:4e:a7:f9:ea:a7:ec:12:ba:c3:13:
6d:40:08:15:d5:02:83:ae:53:c7:5b:15:f0:79:0f:07:95:db:
29:4a:b1:7a:4d:45:6b:45:a7:a4:b1:5b:86:cc:34:3f:07:d6:
70:52:f5:1e:24:74:33:78:e0:41:2e:bd:9d:31:8f:1b:ec:b3:
22:f7:6f:93:12:23:51:f3:66:69:ef:4e:93:b3:ca:64:ef:51:
29:88:0e:e6:b1:fe:9e:51:cb:a4:d9:17:50:4f:5e:7f:8e:91:
84:49:40:df:84:7b:06:c3:d8:2b:57:59:94:23:1d:92:0a:a6:
1b:22:c1:bc:6c:d4:6d:3d:16:40:eb:48:75:1d:2d:73:84:d9:
f5:3d:7f:2c:9f:1c:f9:4a:95:1a:89:29:3c:b4:b0:73:95:4d:
be:df:91:09:0a:92:b4:fb:d5:19:b1:a1:31:a8:0f:4b:86:44:
4a:f7:64:b4:ac:78:22:d0:f3:cc:40:13:a3:f2:ef:fb:c6:35:
a3:de:42:92:5a:74:9c:3e:3c:d1:11:38:ce:d4:d0:12:d5:56:
61:f9:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:21 2025 by rpki-client