Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: NOvr3A9y53AtnpgUR9Naru5lB6lOiAPZ2tz6qs171zw=
Subject key identifier: B1:2E:17:82:D9:E4:69:CD:5E:C4:D4:14:68:7E:82:BC:D0:D6:4E:19
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0196496A9E20E0ED9C6D1BD75CB126CA9C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0A2E
Signing time: Fri 18 Apr 2025 15:00:46 +0000
Manifest this update: Fri 18 Apr 2025 15:00:46 +0000
Manifest next update: Sat 19 Apr 2025 15:00:46 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: QTFW1uqaL5eDYldjwz/2g0sDdJL28+k6w1iGFDEX6BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:9e:20:e0:ed:9c:6d:1b:d7:5c:b1:26:ca:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Apr 18 15:00:46 2025 GMT
Not After : Apr 19 15:00:46 2025 GMT
Subject: CN=b12e1782d9e469cd5ec4d414687e82bcd0d64e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:ff:73:19:44:1b:ae:c3:74:20:3b:88:a4:
54:72:1f:d0:b5:4d:2a:63:e7:18:cd:db:65:9f:d0:
57:69:eb:28:42:27:0c:2f:b7:17:e7:9d:fb:6e:56:
1d:7e:bf:d1:df:a3:ed:e2:48:70:13:10:18:59:ca:
2a:09:16:fd:c9:df:3e:69:4d:35:bf:94:9d:e9:1c:
cc:57:ec:f3:94:9b:f3:91:e3:b0:c3:cb:f3:8b:8a:
6d:1f:b1:79:7d:8a:d1:f6:d5:de:34:be:24:73:d5:
50:1f:9a:9e:9b:8e:18:da:ef:15:0e:6a:bc:94:bb:
03:53:fd:71:cd:0f:b9:95:2b:22:17:6d:ac:1e:57:
11:e6:62:55:50:b1:4d:26:05:e4:08:1d:9b:c4:5e:
3a:3e:d2:f0:cf:38:62:f4:2b:0b:1b:94:18:0e:a2:
8c:b0:ec:9f:99:0d:94:97:cd:8d:cc:3f:51:d8:00:
53:c0:9d:a4:e0:4b:48:76:96:43:2f:b2:37:95:6d:
b0:65:f7:18:af:b0:26:7e:b8:3e:b0:a2:cb:ae:90:
10:59:14:c7:42:3c:fc:9f:29:ef:29:5a:b9:6d:40:
55:ae:1a:9f:60:81:08:a1:0f:e5:23:40:7f:da:09:
b8:22:25:22:62:f8:dc:f1:40:3e:7e:b3:6c:40:6f:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:17:82:D9:E4:69:CD:5E:C4:D4:14:68:7E:82:BC:D0:D6:4E:19
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:8e:33:a4:bf:c2:60:64:f5:64:e0:ca:80:5e:84:09:93:
58:b7:f1:b3:32:91:38:e7:ec:a6:15:fe:20:ac:0d:10:c4:57:
fa:2b:73:42:d2:82:84:0d:1b:7d:86:c4:31:69:7b:8f:ea:82:
39:3b:2b:42:63:56:46:8b:b7:4c:fd:93:aa:30:cb:d1:77:1d:
07:d5:51:7a:ce:88:70:94:67:ff:c9:1e:0d:45:8a:d1:1b:39:
47:01:ad:4f:46:50:25:3d:e3:9f:cc:b4:3e:5b:30:4d:c0:98:
6b:69:c2:ea:fa:e1:db:bb:9a:2d:c8:cf:68:7c:e4:61:ac:17:
3c:60:b3:08:73:ef:34:51:d6:43:11:fa:a8:92:de:a3:73:c6:
c4:9e:16:b5:16:56:4a:d5:a6:22:e8:7f:56:f3:6e:92:11:2b:
4c:1a:ed:ec:a2:46:6f:bd:52:d1:41:87:65:3e:4c:36:4d:42:
89:a2:d9:c3:2d:ad:04:92:dc:af:67:eb:fc:39:3c:85:68:30:
c5:c5:c2:95:e1:eb:50:d4:f4:b0:68:f0:e6:fc:05:e4:0e:cf:
cb:0a:6b:75:2d:61:21:66:02:d4:98:04:a1:d8:2d:1f:f7:52:
fe:a5:0e:ac:8e:2a:52:b3:81:aa:f4:db:17:7a:76:5a:1d:68:
2a:3a:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:37 2025 by rpki-client