Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: pXRVy4VQrM/Iz1xkQdnh+OKjzVJojc0iN+3Xwx1vPhg=
Subject key identifier: A3:B7:F8:5D:BC:13:B9:BD:29:A2:E8:26:FA:7B:1D:0F:F6:E4:5E:A4
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01964F359CB882A39603136392D13E821545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 150C
Signing time: Sat 19 Apr 2025 18:00:35 +0000
Manifest this update: Sat 19 Apr 2025 18:00:35 +0000
Manifest next update: Sun 20 Apr 2025 18:00:35 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: r6Ek0jK0FewLR88BcZ9L7WB51x1qBap9DhXYeqd+0No=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:9c:b8:82:a3:96:03:13:63:92:d1:3e:82:15:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Apr 19 18:00:35 2025 GMT
Not After : Apr 20 18:00:35 2025 GMT
Subject: CN=a3b7f85dbc13b9bd29a2e826fa7b1d0ff6e45ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:c8:c1:64:4c:f7:31:31:32:6c:86:80:7d:
f6:81:4e:83:c2:22:bc:d6:12:80:d6:c1:3b:df:25:
51:97:15:f4:d0:02:53:1d:0c:a3:5e:4b:56:5e:cf:
9f:4d:af:d8:16:c4:a5:80:06:d9:eb:81:be:96:8d:
26:d8:0d:3a:aa:ee:53:98:4c:50:7a:6d:be:0d:cc:
c6:20:16:7e:22:df:86:26:8d:ab:a7:01:0c:d6:59:
91:73:c5:31:57:9c:22:26:05:ee:f4:5f:26:af:0a:
65:de:f8:43:6e:8d:63:47:4a:e5:51:e9:90:55:01:
2a:39:82:18:1b:02:59:54:21:3e:db:bd:30:9d:10:
e2:b6:67:66:c6:8c:7f:29:77:58:a6:d3:a6:20:0b:
1e:d8:e4:a1:5f:aa:e7:f0:93:d7:63:78:cf:ed:57:
e2:7b:46:27:28:00:88:18:35:d3:33:3d:26:ae:73:
a4:2f:45:66:32:70:26:92:f9:92:d0:4c:fb:06:66:
48:94:d9:66:57:db:c2:ca:ef:a0:4e:2e:03:32:1a:
cc:78:1c:ca:36:a0:b1:f5:95:42:d7:26:d1:38:aa:
7a:34:6d:f8:aa:4b:1e:d2:98:11:94:80:e2:36:91:
3d:83:d5:fd:9d:36:60:35:be:df:0a:14:09:e1:86:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B7:F8:5D:BC:13:B9:BD:29:A2:E8:26:FA:7B:1D:0F:F6:E4:5E:A4
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:04:45:fe:6e:31:4b:c3:23:8d:b4:36:2a:a7:e1:b6:94:a3:
6e:58:3e:96:da:e8:d5:2e:35:7a:cf:4a:0d:d7:71:a3:6d:b0:
bf:c1:d4:9c:e8:09:8b:a0:c7:5d:f1:a0:47:ac:e8:0f:6c:7b:
5b:c6:62:0e:ed:e9:30:ac:98:3b:2c:ee:66:ee:ff:a2:c5:ff:
fd:e2:ba:06:2d:14:b6:76:81:59:fc:59:6d:0a:74:d8:cf:6e:
e0:6c:17:fa:56:04:2c:2d:5b:c7:0f:30:84:8b:49:b3:90:30:
a5:2b:1a:ea:28:4c:0d:25:b8:e4:b0:9c:cc:28:dd:2d:79:21:
fa:2c:26:96:06:7e:36:16:45:10:21:56:be:a4:e7:66:bb:5c:
0d:8c:a0:6d:d1:52:0f:29:8f:bd:ea:d8:a8:c3:db:38:10:70:
aa:eb:79:ed:29:69:59:f3:60:39:78:25:61:f2:4c:38:fa:fa:
e8:3d:94:00:97:8b:df:4e:f4:85:4f:a7:97:ab:63:76:ed:81:
10:71:9d:3b:a5:35:25:e5:6b:90:4d:6a:87:68:fa:2a:e4:e7:
5f:6f:e0:3f:80:67:6d:d6:21:0f:6a:10:a8:e4:86:5a:ca:44:
5b:20:0e:7a:bf:e0:24:21:64:ae:a4:8e:ee:df:84:2a:e2:fc:
17:dc:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:30 2025 by rpki-client