Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: JdTIugUOi1il5Nqpka9r4O1pDwejReg2GfPV27/rVkE=
Subject key identifier: F1:62:B2:A2:E8:B4:F3:C7:53:BB:AF:1A:5F:53:7F:52:54:94:60:69
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019692CCCF351E4673F0E3A58ED6581FAFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 21:00:17 +0000
Manifest this update: Fri 02 May 2025 21:00:17 +0000
Manifest next update: Sat 03 May 2025 21:00:17 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: QSrNf1EMa5dsL49zejVOmboS/cZOUqGQuBKJ2zFRNNY=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cc:cf:35:1e:46:73:f0:e3:a5:8e:d6:58:1f:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: May 2 21:00:17 2025 GMT
Not After : May 3 21:00:17 2025 GMT
Subject: CN=f162b2a2e8b4f3c753bbaf1a5f537f5254946069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:15:de:87:47:a8:db:ab:04:f9:f3:60:7d:
fa:06:c4:8e:d8:52:17:52:0c:41:de:5e:fe:c8:a5:
e7:37:ac:ca:52:c7:10:c1:3d:37:76:ad:11:38:eb:
27:ed:68:87:36:a2:8c:c3:05:27:24:02:54:c8:74:
26:a7:31:2f:fa:1d:d2:50:d5:25:8e:03:bf:d7:61:
e6:a3:42:17:b5:62:cd:84:5b:04:6d:c1:c2:3a:81:
db:af:12:dd:16:a9:f2:ec:93:59:6a:a1:29:9e:55:
9c:44:43:e8:1e:7f:b6:32:21:b6:49:49:e8:66:a5:
be:aa:04:e2:13:7f:6f:f5:4d:9f:0e:9e:97:46:d4:
13:8c:78:4b:cc:24:8f:2f:a9:63:63:33:0b:82:d8:
db:0c:49:4e:1c:ca:65:2e:e5:a3:dc:1f:22:83:74:
b0:96:d7:8c:29:0c:fb:ed:ea:de:c6:8a:26:64:1e:
21:d1:bc:7d:af:0a:dc:a4:05:82:ee:b2:91:d9:d2:
14:d5:3a:a4:49:38:fc:cd:b6:f4:27:9f:59:d0:5e:
6f:df:08:3d:20:1e:6a:67:ea:40:5e:55:b4:68:e8:
36:06:70:4c:6b:da:aa:1b:29:f9:44:81:8a:85:5b:
8d:ae:45:2e:d3:d4:5d:99:5c:1b:d8:95:2d:b3:53:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:B2:A2:E8:B4:F3:C7:53:BB:AF:1A:5F:53:7F:52:54:94:60:69
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:60:56:ee:9e:45:5c:5f:bc:19:f5:d0:20:d9:e6:24:52:
32:c8:bc:5f:d0:78:85:37:5b:cb:3e:b5:b9:6d:a2:72:78:6b:
47:3e:25:a9:7a:88:2d:42:a0:c4:9d:ee:b4:dd:09:eb:bd:33:
4c:15:06:c6:89:d7:be:96:3f:0d:19:19:d9:4b:76:76:73:d7:
04:81:97:2a:83:08:c0:63:9e:aa:67:85:fb:f6:eb:33:3f:28:
95:3c:0d:82:ed:c1:ec:3e:5c:a9:fc:1c:e0:67:64:02:f9:f3:
9b:98:7c:32:14:f5:fa:33:e3:77:f6:39:8c:77:89:00:03:c4:
d2:4b:5c:46:78:7f:09:9e:8e:43:9c:57:9e:7b:84:94:7d:b4:
57:c8:35:c1:ed:12:15:de:d2:24:f0:c1:13:5b:0d:05:dd:64:
f3:cc:25:59:d9:05:46:08:93:20:7f:ea:8c:94:59:6b:60:a9:
e1:16:f4:f1:03:03:91:5e:2d:2e:ad:69:99:99:49:78:66:7c:
c8:88:8b:cd:b3:cc:1e:87:7a:a8:34:97:33:e5:88:86:6d:e2:
57:cd:33:5a:fd:12:2a:c8:07:17:49:a7:63:91:28:36:ce:5d:
9f:51:52:24:d9:3f:6d:37:da:8a:8c:0d:1a:6e:f9:06:e2:45:
b6:50:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:22:53 2025 by rpki-client