Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: 4Ljsd4XAaSfZs0SJeGWK1Ddopdl7PX4jhfdNLwFNHAE=
Subject key identifier: AA:0A:92:C1:E2:B0:72:3D:46:83:21:0D:CD:F8:3C:98:07:D4:9A:97
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 01965492FB8105A203F96A06C35B93DC6926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 09B7
Signing time: Sun 20 Apr 2025 19:00:40 +0000
Manifest this update: Sun 20 Apr 2025 19:00:40 +0000
Manifest next update: Mon 21 Apr 2025 19:00:40 +0000
Files and hashes: 1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: Zq5NJb1yGxemGNnsBASe2l2x7wGWJbhZLr3Ele7lyes=)
3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:fb:81:05:a2:03:f9:6a:06:c3:5b:93:dc:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Apr 20 19:00:40 2025 GMT
Not After : Apr 21 19:00:40 2025 GMT
Subject: CN=aa0a92c1e2b0723d4683210dcdf83c9807d49a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:05:4c:6e:84:fe:dc:74:1c:87:59:e3:18:04:
90:9f:6b:3b:9f:ef:2e:48:a2:fa:4c:49:7a:6a:6e:
98:ff:44:c2:c5:25:f4:0b:a8:c0:18:7f:90:ba:10:
01:b8:da:01:91:21:a8:3b:3f:3d:00:ca:8f:ba:fe:
af:b4:02:d4:ce:46:78:4e:79:52:be:58:e4:c0:44:
6b:f6:c1:55:f9:36:64:f9:de:ee:e5:4e:2a:a2:0c:
b5:05:3c:27:f9:91:f2:33:f2:54:40:25:07:4d:85:
d2:f5:62:98:20:77:bc:eb:f5:28:63:a2:f5:36:12:
0c:d9:3f:90:1c:df:85:38:f3:44:35:73:63:cb:e1:
00:5e:f0:3e:04:a3:f0:dd:60:8f:5e:c7:ee:2b:b8:
2b:b5:40:e3:1c:e1:52:7e:04:ba:5a:aa:0c:4b:df:
ec:64:f0:79:62:37:dd:02:02:88:0b:a8:e7:9b:bd:
aa:51:bd:9b:69:c9:7f:35:e9:9e:62:f9:2c:31:1c:
a3:a7:79:e6:86:af:51:0e:ed:61:94:75:5a:53:5b:
c2:26:75:e1:c0:ba:8b:93:2a:d0:9e:1e:c1:46:73:
1a:03:96:67:b4:36:49:82:2a:ec:be:d6:94:cd:27:
32:68:8a:43:29:72:ee:25:4a:06:68:ec:1b:50:d1:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:92:C1:E2:B0:72:3D:46:83:21:0D:CD:F8:3C:98:07:D4:9A:97
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:73:4a:d8:a7:3f:2a:d7:de:ca:99:82:fc:46:4a:8f:5f:e6:
29:9d:16:7c:55:12:37:ec:48:ec:f0:5c:87:2e:b3:7b:02:8b:
cf:1c:b6:bd:fd:53:be:82:d5:86:14:c3:24:bc:44:1e:8f:95:
6a:34:a9:d3:8b:0b:f4:d6:5a:1b:1e:58:7a:c2:87:4a:be:ea:
03:22:09:07:8c:b8:0b:9e:93:6f:cb:ce:06:17:80:8e:bb:40:
5b:74:e2:e3:6f:e8:c0:31:b5:3e:6a:27:30:b6:73:89:15:15:
7f:f9:51:6f:10:ec:22:40:6f:ce:48:87:74:32:93:d6:dd:4b:
6c:93:c9:44:75:4d:17:63:ce:72:68:85:02:74:a5:6a:dd:d6:
34:0a:14:d4:f6:3f:0b:63:95:1d:d4:ae:76:ae:1f:a6:1c:b5:
0c:b9:d5:36:c3:c3:04:53:7f:25:77:bb:d4:25:7e:82:ee:10:
e7:86:0f:21:5c:ed:af:34:db:c4:bc:13:28:75:c2:9c:53:3b:
09:db:f8:ab:c0:87:b6:17:c0:66:79:83:df:37:42:d5:42:52:
f1:48:55:e3:9f:91:d5:2a:09:6d:62:30:07:00:cc:b4:c1:d0:
0f:57:c0:59:06:46:20:a4:43:b3:6e:b0:10:c6:01:3c:21:f5:
ea:ae:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:13 2025 by rpki-client