Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: uRTQ2kLmFe8aGGNvfixPr8nVEBQqrOxPV9iWy2hPSY8=
Subject key identifier: 35:4A:FA:D9:20:8E:FA:24:DF:A7:A6:B7:8F:2C:12:A1:9E:E7:44:6C
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 019656130A0313176AB2208A8B7FB9AA0A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 1506
Signing time: Mon 21 Apr 2025 02:00:10 +0000
Manifest this update: Mon 21 Apr 2025 02:00:10 +0000
Manifest next update: Tue 22 Apr 2025 02:00:10 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
3: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (hash: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: KDM4rXjbcsS1DLEhMM4kEgH58RE.roa (hash: nJE4dlKDHUmjXp0Xdi00ikIZCMR+yvC+rxJD7lUuOrk=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: BYrS+B7wB57ijAi7giy1svqwCY4v8dnBj/LWLQ2QOUg=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:0a:03:13:17:6a:b2:20:8a:8b:7f:b9:aa:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Apr 21 02:00:10 2025 GMT
Not After : Apr 22 02:00:10 2025 GMT
Subject: CN=354afad9208efa24dfa7a6b78f2c12a19ee7446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:a2:d4:2d:db:48:11:9b:ad:97:4f:70:08:
26:e0:4a:a4:ef:2d:fd:3a:f9:d6:34:b0:14:27:d5:
c0:9a:8c:73:c4:68:35:23:28:53:f6:aa:53:a9:b4:
fb:19:75:31:f1:d9:36:4f:d9:81:fb:3f:21:99:b9:
44:1d:37:58:37:06:55:27:64:db:a5:9e:2b:23:c4:
4e:18:ba:c1:ae:3c:a9:a6:0e:48:8c:b7:0f:c4:a2:
73:ee:f6:6b:6f:be:57:d3:95:e9:38:5e:9f:6d:a3:
76:b0:ba:0e:84:60:44:e8:4d:8a:b2:90:a0:0c:2e:
10:0a:a1:db:5f:75:c5:b1:4a:68:e7:b7:67:aa:e6:
aa:59:1a:c7:9d:65:98:11:52:3c:7c:3e:ce:2a:c5:
3c:e5:dc:0f:20:20:dc:ca:a3:41:1c:e7:58:fe:bc:
c0:7d:29:56:02:ab:03:e8:83:93:2e:87:83:2b:c2:
08:6e:9b:d0:a2:be:a9:fd:b5:a9:bd:61:a3:87:db:
24:dc:a9:03:d0:0a:2c:94:b8:aa:10:2e:1c:6b:49:
5a:59:dc:43:b0:dd:08:5b:fb:f0:a7:ae:ee:29:06:
90:80:2d:0b:ba:20:77:4d:d8:a2:11:cf:2b:b6:5c:
7e:93:6d:4f:61:1e:2d:c6:77:4e:7d:d3:0d:11:83:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4A:FA:D9:20:8E:FA:24:DF:A7:A6:B7:8F:2C:12:A1:9E:E7:44:6C
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:9c:0a:39:8f:c3:cc:f6:be:29:7e:0b:64:dc:12:8c:b9:
7b:ef:b6:e6:d1:ec:00:28:fd:1c:9d:95:2d:94:f5:1d:e4:89:
c4:71:ec:c1:f7:ed:7c:ff:15:8e:27:7a:ca:7e:92:b1:c3:f8:
f0:21:b9:5e:c4:10:37:85:18:fa:1e:9f:45:38:41:b0:f8:d1:
45:c4:3b:09:be:32:c1:1d:44:fa:44:9a:38:c1:cb:bc:a8:5d:
9e:b1:81:59:b0:8e:93:25:e5:96:94:5a:ff:6e:52:d0:26:86:
9e:52:80:53:b1:9e:69:8a:a0:79:d2:59:1c:e0:f3:85:59:5f:
94:89:43:b3:c7:13:47:d9:55:c0:09:35:08:2e:e5:42:61:0e:
82:d4:15:71:c8:a1:ab:24:00:03:e8:95:15:9e:3c:5c:17:7c:
ee:32:7f:11:36:5e:22:d6:32:c1:fd:43:d1:23:02:72:d1:b2:
80:20:ac:d5:64:53:31:be:a6:ba:6b:b5:12:84:55:68:fd:72:
df:08:52:3a:74:b4:7c:f0:23:2b:f2:ef:f6:7f:3e:6b:3a:a9:
1a:6e:a2:9a:80:29:b9:62:86:bf:8c:a3:6d:c4:fb:e3:b6:00:
57:95:7b:db:8f:e8:c0:6f:fd:5a:c6:e3:c0:60:43:fa:42:7d:
2e:2c:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:05:09 2025 by rpki-client