
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: 5+jM9FLjTp33fJW+TEpTxzZQHsBooudN/Isii/C1sgA=
Subject key identifier: 99:E8:FE:C4:6A:6C:E2:91:34:08:CB:99:7D:1D:24:91:38:69:BC:27
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01967642FC39C8F97EB7ACDE85ADC9B11853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 151D
Signing time: Sun 27 Apr 2025 08:00:23 +0000
Manifest this update: Sun 27 Apr 2025 08:00:23 +0000
Manifest next update: Mon 28 Apr 2025 08:00:23 +0000
Files and hashes: 1: 3sXbnheUCQXhnB4uHOp4va4TiJM.roa (hash: uyEoZMdeQNWZewaEv7D69o7VgUXJzS6Io688dhhSGjw=)
2: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
3: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: vqKMwhcVxtVNw4GWkz+I9TgUtzD+SoVMoyeV9JjvqE0=)
4: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
5: XfZZR_2FfbmcTCDqh8YB7ukHChU.roa (hash: qIIEx0fwjjqTdiQ160yJWGELXKdKRH39DjIU1xmNQYg=)
6: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:fc:39:c8:f9:7e:b7:ac:de:85:ad:c9:b1:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Apr 27 08:00:23 2025 GMT
Not After : Apr 28 08:00:23 2025 GMT
Subject: CN=99e8fec46a6ce2913408cb997d1d24913869bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:43:30:8b:7d:3d:43:04:97:d0:2d:7a:8b:
6c:d9:76:94:f2:f8:c4:fb:bf:0d:dc:23:47:f1:ba:
c5:bb:ea:42:bd:c4:d0:93:a4:d8:46:ad:1b:77:59:
d4:78:ff:19:6b:d1:3b:7e:87:df:7e:a0:62:22:82:
4e:f0:88:45:cc:1c:57:b1:1f:ab:67:e7:28:2e:6d:
85:fc:eb:7e:aa:c8:a4:27:f3:10:86:47:66:8b:6b:
89:ea:28:6d:4d:c8:ef:1f:0e:60:8d:a7:35:11:8d:
d3:6b:36:22:ca:85:fb:2c:06:1a:47:7d:be:25:c9:
81:19:88:c3:45:93:2a:56:48:d5:0f:b2:81:58:ab:
9e:bf:31:58:81:75:6e:17:a9:b6:03:f5:05:d2:ad:
76:6f:94:ec:87:4b:9b:9f:e3:fc:2b:ce:db:70:16:
61:49:c2:8c:7d:e4:a8:9f:17:bd:da:3b:e3:fd:e3:
74:a5:bb:3e:25:39:48:da:9a:0a:4b:03:1d:ec:af:
e6:e6:92:19:9b:59:a7:90:21:42:69:2e:52:8a:0e:
c2:3d:c3:ee:43:21:67:3e:34:42:e7:1b:d6:5a:dc:
77:68:02:c4:43:86:d8:61:79:06:72:a2:e4:4e:59:
73:7b:b5:20:d8:3f:51:77:15:86:85:62:a9:12:ee:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:FE:C4:6A:6C:E2:91:34:08:CB:99:7D:1D:24:91:38:69:BC:27
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b7:b7:61:69:cf:a9:fc:f7:ac:06:ab:01:c6:47:7a:77:b1:
d1:8c:fc:a4:ce:c6:43:0a:b1:a5:b5:20:bc:7f:50:d7:e3:b3:
9d:a8:15:67:cd:e8:fb:86:b0:52:d9:c3:8f:0b:01:a2:4f:42:
88:cf:79:a8:9b:c3:fc:32:05:0f:15:8c:d6:f0:5a:31:f2:14:
5f:cc:25:53:c5:8e:0e:ac:11:6d:00:84:60:c0:50:09:2b:d2:
3a:bd:8f:47:b7:a3:8f:ab:49:84:6a:86:05:da:31:60:68:6a:
63:27:0e:06:50:4b:39:c0:78:81:30:32:97:a5:36:5a:19:24:
64:b2:d8:f5:b0:9e:59:ea:ce:63:b2:1b:06:03:b9:ba:cb:07:
2b:db:a5:84:4b:11:d4:b2:10:62:f1:ec:ab:3e:17:e6:72:22:
29:56:ee:10:c1:41:4e:0c:b7:27:1a:2f:62:21:a5:ed:d0:ad:
02:00:39:43:77:04:f5:07:25:1e:c5:96:3a:17:a6:5f:04:b5:
be:90:3b:fb:b9:0e:1c:3b:f9:e1:49:bd:43:d8:8e:5d:ed:d2:
bc:3c:5f:5f:c6:5b:9b:55:da:54:d1:ab:41:c5:a7:e7:8e:02:
2f:70:d7:9d:4c:a6:8d:c7:17:43:63:19:f4:0a:0b:ce:38:04:
75:33:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:35 2025 by rpki-client