Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: lBb2szNSnR44ibxGyRiVjqnPZxuwpkqSU8G/YZXfgwE=
Subject key identifier: B9:A1:8B:22:DF:0A:22:8A:0A:6F:97:3A:DD:72:5A:A7:C5:86:B8:60
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019636BF071FBAFAAA7903B67B55A820C5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 00:00:10 +0000
Manifest this update: Tue 15 Apr 2025 00:00:10 +0000
Manifest next update: Wed 16 Apr 2025 00:00:10 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: MthvpsnZfx+DCT7nAlcMizDB+GPq5kWxjFn72oEQo6A=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: KsYncnghaxDA5x4UiPyWsOmG9RM.roa (hash: UI503uf1Ey46JuitcxCO88jhsuoBiLbllr+HxyvpTkA=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:07:1f:ba:fa:aa:79:03:b6:7b:55:a8:20:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Apr 15 00:00:10 2025 GMT
Not After : Apr 16 00:00:10 2025 GMT
Subject: CN=b9a18b22df0a228a0a6f973add725aa7c586b860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:81:4c:b6:db:49:d8:a8:df:b3:5a:37:7c:81:
67:f1:91:f9:b3:9b:ed:6d:79:76:78:8a:bc:16:51:
44:9d:c7:4d:b5:b4:c9:93:1b:3a:3c:f1:ed:82:35:
51:39:5d:9f:58:77:18:5e:a7:91:b5:b0:84:ab:53:
ef:2b:c7:56:78:cd:84:6a:c6:ed:22:e6:d6:b8:fe:
9f:9c:71:12:1d:1c:8b:df:df:86:38:91:2c:0c:05:
e6:38:1d:62:e6:dc:3b:5f:f3:5e:08:2b:8b:26:8e:
4d:99:af:96:95:65:d6:e3:44:2c:39:09:2b:6e:95:
53:14:6e:d5:9c:64:76:91:96:4f:35:19:8e:8f:9c:
2e:fa:af:b1:65:5f:f1:8c:97:02:75:7f:87:5b:1e:
67:53:a9:63:0d:b0:10:cf:18:28:ca:b5:73:85:dc:
75:e0:da:d6:9f:47:92:38:64:3e:e3:ae:b0:01:7c:
bc:19:52:00:48:df:5c:36:81:54:54:f4:34:d6:8d:
1e:54:63:57:e0:10:46:d9:af:e3:08:98:14:cd:37:
e6:fc:4a:b3:84:05:ec:40:10:12:1d:61:bc:79:87:
b9:75:a4:8d:8b:53:d1:2e:11:87:d8:09:8b:84:e0:
25:08:41:17:c4:c7:c7:56:c2:ad:ab:5b:64:74:b7:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:8B:22:DF:0A:22:8A:0A:6F:97:3A:DD:72:5A:A7:C5:86:B8:60
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:68:72:9f:9b:92:d9:b4:e3:34:c0:03:6f:da:32:7e:01:0b:
af:f9:f4:8c:9f:29:3e:25:37:18:5a:d6:59:bf:a8:c6:ab:d7:
9a:dc:e4:bb:df:7c:4f:4f:1d:63:57:08:e3:ac:0a:47:48:d3:
7b:7d:ee:f1:03:c1:69:80:65:92:a6:65:2c:3e:41:1b:47:2b:
78:a4:62:65:3e:d8:cc:63:d9:28:46:3a:3b:21:9e:28:cb:bb:
db:69:29:39:99:36:26:51:ce:f2:b7:4c:df:80:a8:21:44:95:
32:ab:d3:74:35:14:46:91:5a:1f:68:47:72:27:f5:d6:e7:48:
a6:73:af:f6:ec:1a:ff:f9:a8:16:b9:ac:75:4f:1a:78:ef:84:
12:b1:7a:50:13:64:40:5d:f7:26:05:63:b2:66:ed:c2:86:b9:
67:4f:01:91:af:8b:7e:8b:89:66:14:e7:01:84:80:ad:f3:15:
b3:31:e5:1b:39:62:55:bc:eb:eb:bb:22:46:8b:80:14:00:de:
2d:34:a2:18:2a:ff:1f:60:f2:49:f3:d0:e5:2c:f8:9f:56:1f:
d4:e3:dd:d8:f4:f2:ad:f9:55:bf:77:df:08:b1:4e:78:a2:02:
49:f1:e2:ea:06:da:44:99:83:f1:e2:78:7e:ab:2f:41:20:b4:
68:ed:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:32 2025 by rpki-client