Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier: TM/2sWILxZKwSKt8T3zhHTqAQpftPseIoXbreDfZqS4=
Subject key identifier: 04:09:26:8E:09:C8:2F:2A:98:8D:56:54:68:6F:C3:9C:45:9A:C1:AA
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial: 01967A56A3F1878DECB74AA3C7397BEF9EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 03:00:20 +0000
Manifest this update: Mon 28 Apr 2025 03:00:20 +0000
Manifest next update: Tue 29 Apr 2025 03:00:20 +0000
Files and hashes: 1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: uKK3+ypVDz2fttMrUN8SmDHuOFMGYlSNk4ApY3dV3RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:a3:f1:87:8d:ec:b7:4a:a3:c7:39:7b:ef:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Validity
Not Before: Apr 28 03:00:20 2025 GMT
Not After : Apr 29 03:00:20 2025 GMT
Subject: CN=0409268e09c82f2a988d5654686fc39c459ac1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:c0:aa:de:c2:8b:f5:96:78:37:56:d2:95:
c9:4a:b2:c7:2e:f1:c4:aa:e9:50:bd:c8:ca:9a:15:
b4:8f:87:0c:ef:44:5b:96:08:70:ed:d6:07:a8:25:
82:e2:08:e0:27:48:a6:74:87:f5:26:5f:1f:93:60:
c3:b8:ab:6e:b7:1d:9b:3a:c9:1f:c7:e0:05:4a:02:
bd:77:7f:f9:73:b8:10:0f:8c:a2:67:c2:3a:f4:c4:
af:df:d3:7b:65:23:87:c8:4a:68:49:7f:e4:28:8e:
06:4c:42:3a:05:b3:eb:c7:35:80:43:a8:98:1a:3c:
28:68:89:1f:4c:c6:d2:e6:da:6a:d1:58:59:de:67:
d5:de:03:23:b6:3a:6c:57:24:79:fa:8d:32:de:02:
c0:67:92:1b:59:51:30:83:c0:19:76:3e:f3:14:89:
b5:6c:e1:04:f3:80:a5:8b:eb:6a:1e:06:c7:66:81:
85:d5:9f:60:14:47:f0:0e:e5:27:a4:9e:0f:c7:9a:
e6:fa:55:e7:2b:ff:01:d0:f2:ed:59:31:f0:a9:4b:
5a:fd:53:4e:78:ef:33:dc:b4:70:b7:8d:92:31:ec:
e7:e1:a2:43:91:69:af:22:23:9a:31:ec:2a:56:41:
2f:68:d6:f5:da:f2:a7:5f:c1:40:aa:1b:44:b7:e5:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:26:8E:09:C8:2F:2A:98:8D:56:54:68:6F:C3:9C:45:9A:C1:AA
X509v3 Authority Key Identifier:
keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9f:cb:c9:fb:3a:46:87:0d:c2:2b:ec:d0:79:24:24:40:37:
1e:fa:a7:7e:33:26:b1:58:c4:3a:97:5d:23:03:d9:84:61:0b:
a3:aa:74:55:bf:56:56:ec:16:d0:22:c9:e3:85:bf:99:8d:6c:
73:a6:ff:48:0d:22:36:3e:9f:ba:ab:42:df:0c:51:b2:6c:e2:
80:ab:09:c7:8f:ff:03:e7:08:30:d6:3c:19:ef:62:cb:0c:56:
63:fb:d5:90:1b:e9:eb:00:1d:c0:9c:02:35:d1:eb:fb:51:1d:
e7:16:15:f5:90:e3:fa:c6:45:38:51:b3:d7:41:0b:00:87:f5:
ea:db:24:49:ba:a0:1f:b6:5a:dd:86:a9:d5:17:b9:41:ee:b5:
7e:38:59:2c:fa:6a:c1:ad:64:c4:bb:68:4b:46:e7:07:9b:ea:
4e:1a:28:e5:ae:83:d8:be:76:64:1a:3a:ec:5c:a1:1a:59:7a:
4e:b7:a1:eb:ed:43:b3:2e:c2:cf:33:29:2f:8c:17:26:4c:42:
66:7f:87:11:ac:7e:6b:1a:92:7f:26:87:2c:d0:d6:5b:ca:c0:
c8:0d:50:95:c1:5b:ec:27:00:5d:f0:c5:22:62:eb:fe:6e:58:
0c:08:2b:d3:92:1c:4c:42:c6:ba:09:05:37:f8:36:90:7b:fd:
cb:41:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:59:07 2025 by rpki-client