Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: OlhiQr+oF0avP3ze1jE5ipUV1+oJSTK81ULCteKjffA=
Subject key identifier: 11:F0:F7:31:2B:D2:67:1A:8A:98:07:17:FA:0A:38:E4:37:7E:83:96
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019655006DCD761C489452387966E4FB3099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 0ED8
Signing time: Sun 20 Apr 2025 21:00:13 +0000
Manifest this update: Sun 20 Apr 2025 21:00:13 +0000
Manifest next update: Mon 21 Apr 2025 21:00:13 +0000
Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=)
2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=)
3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=)
4: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=)
5: _Mh128pzYy1Xp_Mqu2FTdaxsXrM.roa (hash: t+fZ7eI3onUFmCJkmSKbgzVRgPnoPOzTTVumnB2v6Xo=)
6: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=)
7: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=)
8: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 5MugtTyL6EJsrfm8wy6FLUD2rG9L43N4pzf0qbxYZtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:6d:cd:76:1c:48:94:52:38:79:66:e4:fb:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Apr 20 21:00:13 2025 GMT
Not After : Apr 21 21:00:13 2025 GMT
Subject: CN=11f0f7312bd2671a8a980717fa0a38e4377e8396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:0f:ca:09:34:85:c2:da:6b:9b:45:9b:89:
b5:d5:61:8d:54:13:3b:06:73:62:ef:41:76:dc:da:
79:fa:ec:e6:3b:97:47:9c:27:83:34:34:67:a9:da:
c5:e2:46:e0:cb:3f:75:9c:11:7f:00:f1:2e:2b:92:
1f:2d:48:91:1b:d8:94:07:39:79:bc:04:6d:fb:bb:
6a:63:de:f6:96:5c:a4:9d:80:8f:7b:75:07:6e:4d:
bc:41:ba:69:16:16:aa:31:41:66:de:b8:9c:51:d5:
75:91:b2:25:dd:c2:aa:f6:aa:4a:dc:3e:99:88:c6:
7b:8a:7b:c7:9b:ba:cb:62:fe:0a:bb:a6:04:84:f6:
07:22:52:bd:b2:d0:a0:91:b6:e9:b1:ab:56:d1:b2:
0e:36:7e:a4:06:0c:b8:5d:ad:a9:c0:eb:2c:fb:6b:
f2:8e:05:2f:ef:48:ce:ac:4c:4b:ae:f2:08:83:98:
e9:50:2d:8c:43:72:5c:a8:a7:1c:19:ad:3b:3f:70:
7b:f1:a6:ee:44:0b:4d:1a:70:37:a2:85:9c:0d:35:
b6:22:87:79:88:b7:cb:24:78:45:67:82:17:8c:69:
c5:66:49:a8:03:4c:96:97:b3:d6:92:c3:5d:03:37:
c2:96:e5:08:e4:68:bc:b5:19:fb:c2:03:66:9a:a5:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F0:F7:31:2B:D2:67:1A:8A:98:07:17:FA:0A:38:E4:37:7E:83:96
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:80:39:e8:62:a1:97:e2:d4:07:39:0f:f0:8f:f0:f6:b3:91:
26:58:ab:d1:96:24:c2:9a:9d:bb:06:fc:30:9b:0f:8f:60:e1:
a2:13:0b:55:3e:62:55:b3:a2:cc:e3:7a:0f:93:10:27:99:41:
74:ad:1c:f5:cc:12:79:90:70:0f:8d:5a:85:86:17:21:21:93:
ee:41:18:38:0b:9c:27:2b:4a:aa:28:bc:cf:7f:cb:3c:72:b2:
20:7d:64:2e:6d:c7:95:3e:26:2d:16:4f:8a:9a:8b:f8:ea:bb:
55:12:1f:54:bb:70:e9:83:ca:68:69:c7:f3:f7:16:dc:82:71:
bf:c2:ee:a9:d9:a1:b0:d7:0e:df:76:be:b1:53:6e:08:63:6b:
7d:19:6a:e5:35:40:21:a1:7c:67:52:6b:80:d5:1d:a2:29:f5:
51:a2:7d:28:55:89:59:7e:d6:b6:aa:c4:d4:d8:2c:5c:bb:10:
d7:b7:08:dd:bc:c4:bf:c9:91:06:4c:2b:9d:4c:62:28:2e:11:
8b:da:81:a0:03:32:41:7d:1b:75:f4:91:41:1f:57:f1:5e:06:
23:a8:47:cb:8e:01:28:8a:d7:81:32:02:f9:43:43:7d:15:70:
c2:1d:8c:c6:33:7b:ea:49:8e:e8:bd:03:6f:95:f9:98:39:f1:
82:ce:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:42 2025 by rpki-client