Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: TL427uUYddZwiwsjahUGqk46Dv6n5BaqzV2w7IP8Xbs=
Subject key identifier: 7E:9B:AA:A5:70:48:6C:C3:F9:EE:73:97:23:BB:A3:7C:DE:92:05:E9
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 01968736D9EAE0809DA4F704FC1DA91B7432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 13A0
Signing time: Wed 30 Apr 2025 15:00:40 +0000
Manifest this update: Wed 30 Apr 2025 15:00:40 +0000
Manifest next update: Thu 01 May 2025 15:00:40 +0000
Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: IKCxJ3l+b0CT2Cw4ybgzwjrBXdwuj3r9iVLzTr4LaPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:d9:ea:e0:80:9d:a4:f7:04:fc:1d:a9:1b:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Apr 30 15:00:40 2025 GMT
Not After : May 1 15:00:40 2025 GMT
Subject: CN=7e9baaa570486cc3f9ee739723bba37cde9205e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:f3:e3:60:95:c3:6f:88:d2:6c:63:b7:8a:
25:20:4f:72:2a:bf:76:6f:74:80:97:bf:c8:a6:44:
ff:e9:41:e7:f3:19:f1:fb:bd:97:b3:33:8d:b6:a2:
d4:f7:0c:4b:9c:a3:cb:4a:2f:8f:df:25:8f:63:fc:
4a:50:8f:96:b9:84:c8:8f:45:31:fe:8f:01:0e:76:
24:b9:34:2e:09:3e:89:0b:9d:1e:b7:c6:bc:17:4b:
c5:8b:8a:5c:ea:8b:d6:73:50:73:ae:c0:23:ba:59:
4e:d2:9d:a1:f7:54:76:dd:7d:b0:39:9c:3a:5f:fa:
1a:3b:3e:69:5f:d6:1b:d3:41:e3:3a:4d:a8:a8:bb:
0a:7a:a4:5c:ae:f9:eb:30:ca:eb:dc:54:f8:cd:2c:
4a:e4:9d:df:bf:64:b3:2e:69:89:07:a6:95:86:55:
3f:9e:0b:c8:de:c7:ae:6a:7f:25:3e:af:8e:2e:b7:
ef:12:c4:a0:2b:b9:0f:0e:ef:ef:39:c9:53:b5:7f:
41:32:ae:ba:a2:93:0c:ad:43:b2:5a:eb:ff:e7:7e:
91:15:99:0f:85:ca:41:a1:5a:64:9c:bc:a6:69:a4:
e5:a9:22:30:f4:04:8c:d2:b7:0b:f4:27:2f:d5:9b:
48:4e:e3:1e:43:51:2a:04:b9:73:41:a3:42:3d:c0:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:AA:A5:70:48:6C:C3:F9:EE:73:97:23:BB:A3:7C:DE:92:05:E9
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:cc:b2:aa:70:ed:b8:e8:ea:a8:6c:ea:e0:db:f6:0b:83:
e6:1a:25:82:be:ec:31:eb:b5:81:d1:e7:3d:3c:e1:bd:35:5c:
9c:91:3a:e8:2b:e4:f0:10:fc:36:dd:3d:ca:6f:8d:58:54:0a:
fd:81:7d:8f:1d:89:8b:f7:9c:b3:06:90:ed:f1:e5:4b:b0:79:
68:68:74:e3:67:9c:f5:1a:64:76:5e:30:ec:2e:0a:6d:16:e1:
f1:0d:c3:9b:75:a5:2f:69:5c:de:1a:80:3e:3e:07:c3:69:a3:
59:71:a6:72:00:fd:64:5d:1f:52:be:81:1e:8e:ba:b0:1e:f5:
c2:f4:82:5e:47:6a:56:2f:8f:99:ea:cf:46:e2:80:f1:a3:47:
cd:4a:f0:3a:db:88:5f:17:cd:3a:71:e4:f0:a0:fe:4b:07:c8:
b0:24:9f:0f:49:31:6a:18:a4:c4:4e:b8:27:56:e2:7d:07:f4:
45:e7:4a:7a:ef:ea:fb:d7:00:ed:55:55:6e:73:ee:2f:d8:34:
10:73:5d:44:86:e0:d8:00:21:78:b8:8a:fd:60:91:3a:c9:af:
65:a8:2a:e6:95:30:a7:8a:b9:0d:9d:af:6d:c9:c3:76:7d:14:
9e:16:6b:df:7a:54:16:3c:fd:35:96:9d:bf:59:80:07:7c:53:
89:f9:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:53 2025 by rpki-client