Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier: LB8g7MiMI9YiX6mTOsdmd4nkc+I1WH2+tXSb3DyGmEU=
Subject key identifier: 38:F4:C4:FA:18:D5:EF:B3:A9:B0:6E:5E:54:72:A2:C9:F3:D6:80:9C
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 0196507F40AC3869E7A521CF48F4A12CD37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number: 0484
Signing time: Sun 20 Apr 2025 00:00:38 +0000
Manifest this update: Sun 20 Apr 2025 00:00:38 +0000
Manifest next update: Mon 21 Apr 2025 00:00:38 +0000
Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=)
2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=)
3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: eyN7XqICdYvrUBcoJOyW1+xj14BoLs79D4xWIMwalfo=)
4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:40:ac:38:69:e7:a5:21:cf:48:f4:a1:2c:d3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Apr 20 00:00:38 2025 GMT
Not After : Apr 21 00:00:38 2025 GMT
Subject: CN=38f4c4fa18d5efb3a9b06e5e5472a2c9f3d6809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:e2:6b:93:ae:ef:16:fd:ba:cf:37:c8:4d:
ad:89:56:df:f7:9f:eb:5e:00:05:b1:68:b8:f8:e2:
66:b3:a6:2d:b5:03:04:13:d2:81:78:dd:79:55:57:
bf:8d:b3:f8:7b:98:96:fd:9c:0a:52:35:db:5d:2c:
44:c9:d9:39:08:b4:83:d4:be:3b:1f:81:08:ae:dc:
ca:ed:76:1c:6d:e0:3c:99:74:8a:29:c3:fb:50:f4:
64:80:40:33:0d:f5:70:37:02:29:6d:63:42:99:7f:
5a:20:77:c4:9d:a3:71:f6:93:9a:08:e3:58:7f:4d:
00:3b:9d:ff:07:53:fa:a1:c6:ed:61:ca:37:da:0e:
44:9d:b0:75:2c:cf:9e:91:56:19:b2:bb:4c:52:ed:
c9:ae:73:1c:4c:84:ce:f6:58:b1:37:09:99:cc:fa:
d3:3c:b9:a7:0c:ad:b0:20:78:42:95:b8:ea:cd:8c:
93:8c:9c:fb:7b:04:83:ff:e4:0b:91:f9:c7:89:15:
39:25:e3:44:60:9e:2d:da:07:e7:04:32:51:90:56:
1d:38:c9:3c:1b:7d:71:36:11:00:0d:e8:65:b3:46:
ac:3f:0b:fc:33:30:56:2f:8f:ac:ac:a4:ef:71:7e:
83:cc:46:8d:9e:3f:f4:e9:18:1a:93:ea:94:bf:b0:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:C4:FA:18:D5:EF:B3:A9:B0:6E:5E:54:72:A2:C9:F3:D6:80:9C
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:93:fe:1a:f5:28:d6:d1:e3:82:c4:a2:49:51:f6:fd:ef:
25:be:27:02:4e:4e:4b:05:8b:bd:20:c1:34:0c:56:27:50:a0:
eb:70:11:fd:d1:bf:b9:cd:47:9b:9e:0d:a9:56:63:24:dc:e3:
b4:ba:3e:2d:21:92:db:dd:f1:23:c0:7a:d2:3b:81:18:04:f5:
86:96:3d:33:83:a9:e8:0a:3a:77:7b:5b:33:3d:c1:fc:c4:d4:
7f:1d:94:d0:11:df:6b:20:c4:a0:16:db:d0:f4:a6:c6:32:f8:
32:64:8b:02:91:b2:e4:c8:0f:7c:36:c4:66:6b:e0:94:ae:9c:
39:a4:6a:11:7f:8c:b9:7f:b6:f2:61:b1:01:f2:be:0a:f6:df:
72:2e:f1:9e:6d:04:17:c4:38:13:22:46:60:00:20:74:9d:07:
c4:78:91:8e:94:dc:e7:ab:cd:be:7d:59:bc:0f:99:fb:65:34:
45:d3:19:b3:de:28:72:6d:19:9d:fa:00:5e:ad:7c:2f:1e:d3:
c8:5a:a4:cb:40:ff:6a:f7:37:39:da:bc:13:15:68:45:bc:6c:
ee:e3:f8:e2:00:af:a9:79:ac:75:0e:88:dc:f3:24:c8:f7:58:
5c:59:b0:8d:28:95:2b:74:84:2f:ff:ea:44:08:24:23:1c:8d:
4e:a9:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:39 2025 by rpki-client