Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: LfAwYFFVpXqHHn/4Kk0V6ykS9aPwk9QIdMuZ5c8uTaQ=
Subject key identifier: CD:3C:98:56:09:A6:BE:FC:CD:19:2C:9E:D8:AF:07:B7:EE:F7:EB:84
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 01967B698CFD4E86969FA291FA5286C01890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 08:00:36 +0000
Manifest this update: Mon 28 Apr 2025 08:00:36 +0000
Manifest next update: Tue 29 Apr 2025 08:00:36 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: uFFU1PWFSHH8xeCF6R2GEjQdhN33VBlMQUy7P+LKf+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:8c:fd:4e:86:96:9f:a2:91:fa:52:86:c0:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Apr 28 08:00:36 2025 GMT
Not After : Apr 29 08:00:36 2025 GMT
Subject: CN=cd3c985609a6befccd192c9ed8af07b7eef7eb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:e6:b7:48:53:a2:30:b0:f7:02:a0:88:41:
b3:64:be:40:63:1e:36:75:75:dc:4c:b1:30:fb:a1:
9d:23:f1:84:3f:4c:c3:76:dc:d2:96:e5:37:de:2e:
32:5e:0b:f2:50:3c:93:48:4f:aa:57:fa:a7:78:cd:
a4:1c:31:df:bf:36:96:85:8d:18:96:68:a9:8e:20:
06:ae:4d:21:d6:b8:12:05:b6:73:83:bd:c0:8d:ed:
c7:30:8e:b9:f8:c5:e1:d4:e5:76:7c:07:09:b0:cf:
ed:0a:60:15:15:f1:64:af:7e:2e:2d:6e:e3:5c:29:
8c:a7:32:ee:66:fa:5d:13:a0:d5:25:79:92:16:49:
7d:f8:b3:41:c4:ce:08:0a:51:4c:15:cc:c6:ec:2c:
ae:02:0d:4a:be:2a:c1:0b:6f:8a:3f:c5:e5:72:1d:
8f:1a:96:2d:9b:54:e3:b9:37:7f:3b:6b:ac:e6:fc:
fa:b4:a6:b1:be:ba:97:e5:30:a5:4c:04:74:e7:97:
de:f3:c7:fb:6f:1b:f3:cc:04:e9:6d:60:a6:6e:ee:
11:9f:75:52:33:82:ad:7a:46:ec:63:f3:90:48:aa:
b7:0b:47:30:e0:df:ac:81:f4:b8:3c:c1:0d:b0:9b:
e7:b0:8d:74:13:59:91:84:a2:c8:44:cf:cd:4d:10:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:98:56:09:A6:BE:FC:CD:19:2C:9E:D8:AF:07:B7:EE:F7:EB:84
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ad:67:8b:ad:1a:2b:88:64:31:1d:bf:b2:0b:c9:75:8f:7d:
ef:95:94:96:3c:ed:74:ab:43:71:dd:68:62:85:f7:83:be:53:
ae:57:50:96:6d:f4:7d:d6:89:e2:76:b3:56:53:ff:f5:e7:b3:
e4:a6:55:05:ac:79:8c:80:c1:cf:aa:a7:a3:0f:3e:45:6d:5c:
e9:21:11:83:21:f7:5c:04:c8:b8:ec:99:33:78:64:c9:4c:ae:
7e:bd:43:47:ba:91:e8:75:11:7b:76:38:f9:d4:02:71:38:05:
14:5d:d3:f4:15:2e:ea:ff:56:cf:a4:a6:91:ff:65:6d:95:53:
6a:da:e1:51:eb:52:f6:12:17:ab:8b:52:b3:57:2c:1a:53:74:
fb:36:40:b4:f3:f4:83:b1:3b:8a:dd:03:9f:09:dc:59:2f:ce:
fd:f5:82:b8:be:40:c8:52:6c:71:28:93:a8:bb:79:d7:e4:20:
d0:a7:fc:c9:c1:7c:ef:e6:a4:1c:da:84:28:00:ca:f3:33:4a:
f2:4d:d3:a1:85:39:a8:ba:d1:3c:18:72:55:9c:db:72:31:2e:
ec:91:e8:cc:46:ba:fa:ab:55:05:0a:e9:66:43:5e:17:00:fa:
09:24:ae:1d:66:b1:45:a1:5e:57:ec:00:33:48:36:2b:02:7a:
d8:55:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:27:45 2025 by rpki-client