Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier: fNrjAh2FsB9qunaXrHJQHF8o4539oF1PMipiyy8491o=
Subject key identifier: 66:65:25:86:1A:4E:8E:FF:1D:7B:B7:48:31:81:2B:70:BC:E4:D4:B0
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 0196108E7DCB26293D3209280498C9E99676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number: 149D
Signing time: Mon 07 Apr 2025 14:01:35 +0000
Manifest this update: Mon 07 Apr 2025 14:01:35 +0000
Manifest next update: Tue 08 Apr 2025 14:01:35 +0000
Files and hashes: 1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=)
2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: j1iJqPPzDYt4ebJ1mpNkav78wWEmhZl8b8vVZDgrzqQ=)
3: hyarknq8b7RuIBM-YBqseStGpbs.roa (hash: Q8UycgtcBXykUE11/kKCtnDO8tk0NFq+ACIXZD0W+5A=)
4: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:7d:cb:26:29:3d:32:09:28:04:98:c9:e9:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Apr 7 14:01:35 2025 GMT
Not After : Apr 8 14:01:35 2025 GMT
Subject: CN=666525861a4e8eff1d7bb74831812b70bce4d4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:7c:d1:7b:f8:f6:36:d8:76:e7:cc:a7:52:
bf:f3:2e:b2:3b:c7:2a:19:b2:ae:7f:dd:da:4a:ce:
bf:3b:85:47:8d:77:e9:6b:34:08:8c:0f:4c:6f:dc:
78:77:e7:c1:dc:76:1d:5e:61:71:e8:05:a3:27:b0:
25:64:8d:76:7b:d3:b0:22:c3:65:a5:db:0a:36:10:
9d:e3:75:04:20:e4:0e:27:fd:22:dd:05:b2:f8:b3:
fe:4e:95:bb:0d:98:79:b3:26:62:e9:a5:e1:d9:a3:
30:60:b2:5f:2a:c8:ed:fb:5f:21:17:1e:f1:5e:80:
f7:d0:65:e7:78:46:2e:e6:af:71:f2:fb:59:ed:04:
8c:66:4c:ac:97:51:35:48:fb:78:3f:38:56:04:37:
da:d8:d9:be:dd:50:65:94:81:d6:3c:d5:08:46:c1:
19:5a:2a:a3:33:e6:2f:e0:04:be:c3:bd:11:0e:89:
ef:8d:14:74:9f:5a:fa:f5:15:fb:d2:aa:19:bf:5d:
fd:81:df:bb:cd:67:c1:12:f1:f6:da:6b:5a:83:af:
75:12:48:0c:47:4a:b0:1b:49:51:04:75:62:8e:ab:
f7:31:03:b5:91:83:2a:87:55:4d:94:c1:d8:39:7a:
c7:3a:e4:c0:6f:91:08:23:1b:bd:25:3c:a4:f6:e6:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:25:86:1A:4E:8E:FF:1D:7B:B7:48:31:81:2B:70:BC:E4:D4:B0
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:46:40:c7:58:89:ac:92:a4:a0:96:8e:a1:f6:f3:f3:ef:5c:
1f:47:51:87:c6:5d:58:0d:d4:39:6f:f2:26:ed:3d:21:f1:3d:
b9:c7:e5:28:36:c9:5c:24:de:1c:ed:95:e5:bf:55:b3:f9:72:
ed:de:96:d0:6e:49:08:6b:0d:dd:41:3c:8b:6e:a4:31:fc:88:
26:ff:72:40:f1:ad:19:6a:d4:60:ec:89:36:45:b3:1d:b5:93:
0c:00:30:aa:a6:73:87:70:92:84:ec:ed:d4:15:a1:30:11:2d:
a2:14:1e:55:ed:da:fa:8b:bb:2c:e4:47:5f:92:bc:54:3f:48:
c4:f6:5b:71:17:89:be:b6:ec:b7:46:78:57:29:10:88:6c:99:
34:0c:d3:5e:4c:4f:63:b2:50:56:f1:18:ad:b8:75:30:97:a3:
c7:ba:80:17:93:8a:a0:53:fb:b0:c5:cb:10:f9:29:2d:6a:08:
05:28:0b:24:08:9f:8b:43:77:3c:68:f5:15:30:9f:fe:df:f2:
6d:dd:52:43:1f:09:f7:1c:12:44:f0:b3:3b:04:c6:55:3c:f2:
e0:99:be:e5:b1:37:1f:0a:53:22:75:39:61:6c:4d:f2:8d:15:
b4:bd:60:a5:8d:a1:46:17:e1:91:db:25:31:e8:2e:7e:e0:09:
62:d7:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:35:06 2025 by rpki-client