Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: E+GRxPcC8UzQDi/GIylHPmmTQBXpkQgDfIXqEMQ+WOc=
Subject key identifier: 3C:5F:CA:CB:B6:37:90:7A:9F:CF:A2:6D:4F:02:8E:B3:57:F1:D9:77
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01958C290AE5C83AE6E11AF3E77D2AE8A774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 14A7
Signing time: Wed 12 Mar 2025 21:00:54 +0000
Manifest this update: Wed 12 Mar 2025 21:00:54 +0000
Manifest next update: Thu 13 Mar 2025 21:00:54 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: Yc/SKnbohydZyK9Y76onn9r0aUTPHYxUOnIHSUDFtDw=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:0a:e5:c8:3a:e6:e1:1a:f3:e7:7d:2a:e8:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Mar 12 21:00:54 2025 GMT
Not After : Mar 13 21:00:54 2025 GMT
Subject: CN=3c5fcacbb637907a9fcfa26d4f028eb357f1d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:67:d1:c0:d3:9b:7b:c6:ce:d2:7e:93:3d:
1c:64:71:f3:19:05:94:41:76:bd:37:0f:21:4e:7d:
ea:4e:8a:15:de:8d:67:6a:a1:84:c4:39:14:dd:af:
ad:f3:a9:3e:0b:07:7c:2d:eb:3b:34:df:07:ae:0d:
4b:13:49:cb:1a:36:59:9c:32:70:3f:59:5d:e2:e8:
5c:14:64:0f:4a:76:9d:b7:48:48:c7:48:e6:fb:2d:
3a:f0:7d:36:fe:30:b7:49:a4:fb:33:46:8b:2b:b1:
18:b7:1c:da:26:cb:c7:80:38:3c:3a:7f:7b:be:f3:
90:01:67:33:d2:aa:c7:e5:cb:f3:6a:ec:ae:8b:3c:
58:f3:a7:4d:f7:70:8e:1b:b2:fb:c7:88:1e:d9:b0:
c2:f7:8b:a7:37:33:f2:8e:e6:d2:61:86:a2:9a:57:
c3:2d:94:78:c0:51:d4:98:da:7b:0d:b1:2c:3d:1e:
cd:ba:31:f1:ba:04:f7:2c:4f:89:99:75:00:c3:29:
ae:30:de:bd:e9:79:84:85:71:e5:48:a2:ed:3c:b6:
a5:07:a0:4e:8c:05:11:e0:18:4c:8d:d9:d2:44:e8:
6d:f6:74:43:32:15:63:be:f6:59:eb:04:22:30:1e:
30:85:fd:fd:44:ee:44:df:00:a0:e3:c7:de:82:eb:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:CA:CB:B6:37:90:7A:9F:CF:A2:6D:4F:02:8E:B3:57:F1:D9:77
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:29:59:46:b8:6a:df:53:c1:5e:99:3d:2d:61:25:dc:26:02:
ea:32:7f:fe:8b:f0:37:44:47:d0:1a:68:2b:f5:64:b4:32:ab:
34:f2:86:1f:59:9f:00:e0:ca:26:ba:6b:54:bc:46:c7:27:2f:
fa:a7:cb:45:f2:86:ad:db:cc:51:ef:de:b4:14:ce:e5:c8:dc:
1d:13:bf:12:97:91:8c:43:95:fa:d1:90:72:cd:f8:37:54:03:
6f:6d:26:03:e8:e6:43:75:64:7d:c8:a6:e3:8d:f8:17:52:ae:
ac:de:c7:99:e6:9a:b7:63:b0:9b:0d:4d:7e:38:25:cf:f7:d3:
4b:5a:49:77:84:84:9e:3b:63:ab:a2:00:8b:0c:7d:19:35:97:
69:7f:ff:fc:82:1c:aa:35:3b:95:0b:0a:25:85:80:b6:8d:aa:
a9:2c:5e:5a:09:f2:4a:dc:3b:77:8f:18:f2:fc:ef:bc:3b:0c:
e1:cb:a5:2a:e1:c2:d0:31:1c:5d:7f:6c:60:cb:e9:4f:dd:53:
87:ce:18:a9:9d:0a:4e:17:fe:a8:7b:44:6d:17:51:d6:29:b3:
4a:a0:ac:2e:32:46:eb:0d:05:ca:0f:f3:f4:53:2a:30:c4:53:
85:38:5a:6e:f9:5a:18:e6:fa:39:7f:bb:da:65:a2:97:94:36:
1c:ce:f5:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKQrlyDrm4Rrz530q6Kd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1
NTYwY2MwHhcNMjUwMzEyMjEwMDU0WhcNMjUwMzEzMjEwMDU0WjAzMTEwLwYDVQQD
EygzYzVmY2FjYmI2Mzc5MDdhOWZjZmEyNmQ0ZjAyOGViMzU3ZjFkOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5xn0cDTm3vGztJ+kz0cZHHzGQWU
QXa9Nw8hTn3qTooV3o1naqGExDkU3a+t86k+Cwd8Les7NN8Hrg1LE0nLGjZZnDJw
P1ld4uhcFGQPSnadt0hIx0jm+y068H02/jC3SaT7M0aLK7EYtxzaJsvHgDg8On97
vvOQAWcz0qrH5cvzauyuizxY86dN93COG7L7x4ge2bDC94unNzPyjubSYYaimlfD
LZR4wFHUmNp7DbEsPR7NujHxugT3LE+JmXUAwymuMN696XmEhXHlSKLtPLalB6BO
jAUR4BhMjdnSROht9nRDMhVjvvZZ6wQiMB4whf39RO5E3wCg48feguvoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxfysu2N5B6n8+ibU8CjrNX8dl3MB8GA1UdIwQY
MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct
MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl
LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSlZRrhq
31PBXpk9LWEl3CYC6jJ//ovwN0RH0BpoK/VktDKrNPKGH1mfAODKJrprVLxGxycv
+qfLRfKGrdvMUe/etBTO5cjcHRO/EpeRjEOV+tGQcs34N1QDb20mA+jmQ3Vkfcim
4434F1KurN7Hmeaat2Owmw1Nfjglz/fTS1pJd4SEnjtjq6IAiwx9GTWXaX///IIc
qjU7lQsKJYWAto2qqSxeWgnyStw7d48Y8vzvvDsM4culKuHC0DEcXX9sYMvpT91T
h84YqZ0KThf+qHtEbRdR1imzSqCsLjJG6w0Fyg/z9FMqMMRThThabvlaGOb6OX+7
2mWil5Q2HM71Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:16 2025 by rpki-client