Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File: pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier: sTzjOeSsSIz/SNxx3Kbe/KWLv+IIoOESlgE1s8sD4PI=
Subject key identifier: 37:82:92:CE:5D:29:5D:64:C4:68:F9:C8:EB:B1:B0:AC:8B:97:D8:6A
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 0195900639B4E02967A902BBD176686F43DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 15:01:21 +0000
Manifest this update: Thu 13 Mar 2025 15:01:21 +0000
Manifest next update: Fri 14 Mar 2025 15:01:21 +0000
Files and hashes: 1: 1-vk3La2yyZFnILeGGhJFe58kLvs.roa (hash: RGkYbhYFu12+UlOAOHZuU+R1lpv4+udmzfRD0bN3gMw=)
2: DDotDGxvVqfHzQUKIdqNZjL6I0Q.roa (hash: sMg43UN/gdg+NoR/7BTQI+4KqXRII5o94BppxKuF23U=)
3: SlaU9HSyWOLbPlhtr9erox7ST1o.roa (hash: iCddRZIQh0GzddiojJsCNP64OOzV5SHbTR0s3vNWL+A=)
4: Vs8JrhOp8doi0Pejo3pFyxkxSF8.roa (hash: v1TXYBsbMNvSJhKVhhxeD9z0NXgTARHKv2tqAe3hsUE=)
5: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: EfzUEkp0v0Uqkbp4dYAcM1N/mNzBtOrbLX2wkDbzSGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:39:b4:e0:29:67:a9:02:bb:d1:76:68:6f:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Mar 13 15:01:21 2025 GMT
Not After : Mar 14 15:01:21 2025 GMT
Subject: CN=378292ce5d295d64c468f9c8ebb1b0ac8b97d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:85:b9:74:25:44:fb:79:4d:aa:21:5f:5d:
67:3b:00:88:53:cb:3a:ba:91:3a:5d:d4:3a:98:49:
c7:d8:01:c3:ad:db:7f:62:11:29:39:c6:49:8e:a1:
4c:d0:56:c0:21:7e:b3:9b:35:d8:6e:90:28:a2:cf:
31:77:f8:8d:20:18:88:27:bf:24:24:b1:77:50:0a:
8f:59:b7:32:1c:70:25:33:23:90:a5:04:c1:de:75:
3c:1b:d7:50:2e:c4:2d:c5:37:3f:5b:5d:76:65:7f:
30:32:4c:d7:12:a3:64:bd:60:da:42:a0:88:61:7f:
6c:13:1d:56:cf:ed:60:00:19:cc:37:81:9d:8a:55:
ab:1c:cb:fe:33:2c:ba:2c:9a:74:49:4d:d8:30:75:
46:d6:29:d5:ee:7a:fd:ba:be:fb:02:c6:6a:72:0c:
0e:78:07:81:4b:6f:3f:8c:0e:4a:68:d9:4f:d6:4e:
aa:b9:01:e9:b0:ac:9f:b0:54:d5:0f:5f:13:a2:e0:
8a:5d:ae:ca:be:56:6a:e9:8b:f4:84:88:55:f9:74:
0c:a8:69:97:be:01:14:69:81:e3:88:58:e8:9f:47:
fd:96:af:7b:48:21:09:fb:e4:75:8c:88:98:20:59:
fc:61:e0:16:99:3f:87:50:2c:81:60:42:af:a4:5a:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:92:CE:5D:29:5D:64:C4:68:F9:C8:EB:B1:B0:AC:8B:97:D8:6A
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:02:3f:a5:67:10:15:37:a2:87:aa:f2:bb:9a:ab:79:41:
ec:3c:f3:bc:44:b6:a1:b5:d7:71:4c:78:2b:a6:3d:50:8f:f8:
f2:2b:b0:b5:bf:3a:57:91:58:d3:80:ae:3a:3f:a6:35:e7:e8:
d2:15:e5:52:23:24:d0:fb:bc:c0:02:a8:6c:85:65:59:cc:3c:
29:00:b9:42:05:b2:6f:77:61:72:df:39:a7:8b:9b:e8:a3:e3:
51:e2:5c:b7:25:65:dc:80:27:0a:f1:09:2a:58:5e:65:3b:44:
9c:94:90:9c:f8:c4:0f:7e:70:e4:d0:10:54:87:51:a4:c5:2f:
5d:43:64:5b:30:67:dd:dd:8e:ae:7c:f1:87:1b:12:5c:71:41:
f6:4d:81:21:b0:69:eb:0d:93:66:fa:5d:fd:59:27:9c:a7:a8:
5c:b9:d5:e0:ee:30:37:0d:fe:37:bb:05:77:6c:bc:6f:89:e9:
2a:eb:44:e8:31:83:43:7d:0a:d7:bf:b8:03:ac:9e:c1:d3:d1:
05:b5:7d:1f:03:be:7c:e8:9d:2f:f5:0f:4e:d1:78:4b:79:70:
7a:9a:f1:fe:24:1a:8d:67:bc:88:2a:25:e0:3c:59:cf:ed:a3:
c4:d1:83:1e:a3:d1:38:3d:49:cb:2f:9e:a3:6a:e0:ab:61:96:
fd:c9:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:55 2025 by rpki-client