Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: aKnKBWlL+iJ0WNLHZkjKUDH7eGlx0CDERCFhRavTym8=
Subject key identifier: 0A:52:D2:42:BF:90:20:49:93:BE:2D:76:11:FC:7F:05:A1:6D:5A:EC
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01967E336045DDEF3069B10F75934FDB448B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:18 +0000
Manifest this update: Mon 28 Apr 2025 21:00:18 +0000
Manifest next update: Tue 29 Apr 2025 21:00:18 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: 0dl81iiU5TsVWzdYizXjfbH05Dflv5TrMfbSicyN3ps=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:60:45:dd:ef:30:69:b1:0f:75:93:4f:db:44:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Apr 28 21:00:18 2025 GMT
Not After : Apr 29 21:00:18 2025 GMT
Subject: CN=0a52d242bf90204993be2d7611fc7f05a16d5aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:9e:01:f7:8c:17:83:38:2b:e1:ba:c1:75:
f2:3d:a2:70:7a:93:28:85:02:54:f7:3d:d7:79:54:
1e:50:f0:b2:6e:88:cb:6f:7e:62:52:66:c6:2e:52:
fe:b5:23:22:38:0d:3a:b9:fa:41:0e:d5:30:4f:14:
bc:e8:54:87:d6:22:df:da:f3:7a:a2:8d:ef:71:24:
03:18:a1:89:31:3d:a6:a3:36:4c:f5:d2:b4:83:e1:
c2:5e:fc:42:b1:16:6f:e1:85:80:77:ed:d3:cd:b7:
1a:ce:ba:0a:5e:f4:60:c6:df:c1:f2:bb:6c:60:9a:
2b:44:08:7a:d3:eb:d6:a1:31:18:0c:08:06:85:3d:
3d:ff:a4:c4:64:53:df:c0:42:af:30:4d:ae:ec:0a:
32:c8:e0:36:23:1a:5d:ee:02:ba:91:bb:ff:fa:b5:
8e:c8:18:f8:2b:c8:37:3a:74:30:58:8d:2a:f5:e5:
25:80:04:77:70:a8:10:34:42:f6:4d:f3:be:da:f3:
52:e5:ab:e3:73:92:db:54:ba:2c:97:6d:e2:9b:c7:
ad:f2:80:e0:ae:03:6e:c2:21:69:ba:2f:10:0e:5e:
ac:2d:ff:a8:5a:11:75:3b:74:f4:14:0e:bb:2e:1e:
80:ad:80:50:ee:74:b5:73:f5:e2:a5:e4:72:9c:aa:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:52:D2:42:BF:90:20:49:93:BE:2D:76:11:FC:7F:05:A1:6D:5A:EC
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:dd:6d:8d:22:b2:76:c9:5f:8c:e9:31:48:b1:d4:65:77:
78:7e:45:0a:1f:71:51:bb:1b:46:e6:f2:22:7f:0c:5d:34:14:
2f:80:45:70:08:e1:58:90:b6:91:13:db:cb:d6:94:ed:f2:99:
4e:96:45:01:f3:93:a3:6e:9d:18:9f:5b:0e:6a:a3:17:52:bd:
0a:b4:31:ff:c8:ea:b5:4d:43:94:42:87:8b:7c:42:13:73:5e:
de:8d:20:13:3a:65:55:c2:3f:1c:9a:88:33:b0:0c:79:12:de:
42:49:eb:aa:c0:23:b9:ab:b9:99:0d:a4:6a:53:43:7b:c7:bb:
60:16:e9:c2:30:6b:df:a2:c2:3b:49:d0:8a:a1:90:bf:dd:85:
5f:2b:8d:c8:ce:1e:28:c1:35:b2:86:1d:49:4e:fb:27:18:07:
6f:48:0f:a3:85:12:34:4f:29:08:2a:9e:2f:56:d5:3a:88:7e:
d0:d7:b3:54:8b:c4:2a:4e:2d:71:20:7f:75:e3:25:78:23:1d:
a3:ed:12:6d:c3:57:4c:ff:50:12:0a:e9:0e:14:1a:4f:32:93:
8e:cf:15:9a:11:c1:f8:98:36:d4:92:69:20:f7:aa:fc:86:7d:
f4:ab:92:f1:65:e1:07:58:fe:7d:22:86:83:08:a4:d4:ee:c2:
9d:4d:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:54 2025 by rpki-client