Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: kJrTG085Ip1tjKcohnOfOsSJlFmxGTz0H5gsN1vlHm0=
Subject key identifier: F6:7E:7A:B2:8A:3C:78:0A:D8:D3:DE:D4:A0:83:87:92:10:7E:8E:03
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0196759E853CBAB1F8ABCCDE6C474A8D1803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 05:00:45 +0000
Manifest this update: Sun 27 Apr 2025 05:00:45 +0000
Manifest next update: Mon 28 Apr 2025 05:00:45 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: vJ0CgKbdwz/X2A5T5cUznlEqqjhFt0Xd0HjPPxxAzcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:85:3c:ba:b1:f8:ab:cc:de:6c:47:4a:8d:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Apr 27 05:00:45 2025 GMT
Not After : Apr 28 05:00:45 2025 GMT
Subject: CN=f67e7ab28a3c780ad8d3ded4a0838792107e8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:5e:b9:54:2b:f6:62:a5:2b:47:d4:e1:57:
9e:13:e7:99:73:bb:2d:99:83:6d:22:7f:e6:65:35:
3f:21:84:9c:55:f6:5b:45:d4:a7:6e:46:53:0f:fb:
fc:5d:e5:3f:93:1a:a0:c0:26:1c:68:85:ee:49:e3:
08:d1:5b:7f:f4:56:22:2a:11:ee:72:6e:5a:0f:e1:
17:a9:42:1b:f5:c0:72:45:d8:e0:c4:4b:37:41:bc:
f8:5a:1e:73:84:23:84:8f:a3:1f:8b:2c:88:cf:fe:
11:4a:97:1c:79:18:bd:0c:7b:b7:13:d6:4f:47:76:
fa:84:34:01:51:42:67:23:dc:1c:10:c7:af:3c:15:
f3:dc:a6:fa:91:81:59:d3:4f:76:30:73:6b:31:14:
7f:dd:cc:51:27:c0:db:cd:8b:67:5f:4c:43:83:dd:
d4:2d:5d:a0:c2:63:db:d3:f1:1a:0e:c7:19:d9:4e:
83:05:66:a6:84:b2:cd:f1:cb:14:7d:11:0d:6f:67:
e2:18:0c:91:f0:79:2f:df:b5:a0:c6:da:84:07:2d:
8c:72:93:15:a8:e7:d4:05:5e:73:5d:4a:85:ea:f6:
c5:32:42:e4:cf:8c:6e:9d:43:12:cb:ee:9c:51:b1:
b0:a8:4d:af:ba:95:39:16:86:09:08:6e:bd:71:e9:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:7A:B2:8A:3C:78:0A:D8:D3:DE:D4:A0:83:87:92:10:7E:8E:03
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:10:b1:60:32:fb:c1:bf:fb:44:ec:2c:3d:8d:7f:95:ab:34:
8f:53:55:22:83:b8:68:4e:62:bd:fa:5d:50:05:0f:de:84:9c:
83:7c:ab:4e:0b:d7:00:0c:6b:62:83:e9:0c:ea:55:0d:6e:08:
d9:31:19:68:7e:24:f5:0b:d1:51:20:34:a8:28:78:59:1f:bf:
db:99:78:23:8f:d8:47:9b:e1:25:31:c6:65:97:c3:e5:93:9c:
df:80:76:fe:fc:2a:0a:65:d5:51:9a:78:82:c5:24:e6:70:4f:
a7:42:cb:fa:7d:c1:41:24:dc:32:23:4e:c7:94:ba:0b:47:27:
77:68:32:dd:26:d4:97:50:46:16:34:20:0f:e7:11:72:e2:03:
88:e9:05:d1:33:23:b0:63:5f:3b:05:be:3f:2a:74:00:91:46:
73:16:ae:46:ec:42:7a:d8:68:0a:d4:72:15:2f:84:3e:c4:04:
2c:36:07:43:f3:14:05:38:d0:cb:65:32:07:33:6c:2a:00:63:
07:ea:b7:6c:0c:db:53:b2:33:10:24:d6:42:d5:d5:3f:1f:aa:
1f:35:a2:59:79:1d:09:d1:aa:81:15:2f:72:4e:1f:85:e2:5c:
c6:23:7a:c0:5a:47:4b:20:b9:02:1c:41:fa:5f:d2:05:a1:e9:
40:06:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:06 2025 by rpki-client