Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: EVCrHZ+WLaauDDAb8f6dPnMDSY/XKllgIUUkgA/bhok=
Subject key identifier: 01:24:E6:26:FD:32:DB:5E:AB:B9:AC:16:1D:63:C4:AA:95:D4:3D:23
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01968C25F20A656A9D13EBAF16E42E1188A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 14:00:19 +0000
Manifest this update: Thu 01 May 2025 14:00:19 +0000
Manifest next update: Fri 02 May 2025 14:00:19 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: GRIVtt7+VJBId7/A844QAaHPyE5UcYjFWyxsN5KM1y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:25:f2:0a:65:6a:9d:13:eb:af:16:e4:2e:11:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: May 1 14:00:19 2025 GMT
Not After : May 2 14:00:19 2025 GMT
Subject: CN=0124e626fd32db5eabb9ac161d63c4aa95d43d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:44:3d:ae:8d:2d:c0:f2:78:65:11:99:cb:
bb:fb:d7:62:c3:07:02:42:b7:df:54:2e:b4:6a:ef:
0e:3a:95:b5:c7:51:84:db:0e:86:3c:62:08:cc:55:
ff:36:40:b8:24:01:a2:94:40:24:c4:72:93:58:dd:
b5:bb:a7:77:5f:d1:6d:7c:75:b7:3c:75:d9:b4:44:
a6:34:d7:b4:68:86:d0:33:ee:a6:52:09:9f:44:d4:
5b:30:a9:d7:d9:60:08:fd:81:13:40:d9:ee:4f:c9:
af:75:68:89:4c:83:b2:25:36:ce:f8:b0:f5:51:a8:
e5:78:1e:76:82:87:6e:ef:22:bd:62:d3:93:51:3a:
8a:a0:9a:09:1a:76:bf:51:9a:f1:cf:b1:84:2b:37:
83:43:1f:e0:bd:93:7e:53:26:0b:5d:c2:4e:87:79:
2d:00:56:d4:e6:0f:97:a2:83:74:47:19:a7:56:39:
b9:91:fe:89:9f:a8:96:ff:86:37:25:2a:52:6e:e0:
0c:75:0f:9a:72:40:38:fc:ea:26:f0:a0:24:1a:9f:
98:d1:63:bf:0c:8a:8e:a3:69:96:a2:dd:6b:cc:f1:
b4:16:98:77:dd:03:4f:f8:74:f3:f5:73:34:76:73:
7d:86:cb:50:83:9f:09:03:9a:d0:b9:66:4a:53:b8:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:E6:26:FD:32:DB:5E:AB:B9:AC:16:1D:63:C4:AA:95:D4:3D:23
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:90:92:99:b1:84:0f:f1:ea:fb:7b:df:77:b7:cc:d6:1f:
52:24:65:fe:64:f6:bc:8a:c2:59:b8:31:28:f6:ec:e3:2c:1b:
a9:b4:42:e5:21:70:de:d3:bd:c3:82:2f:60:e3:d6:14:3a:04:
49:88:d8:9d:89:a3:c8:1e:76:06:e5:ba:d8:73:cf:9b:50:27:
ff:f5:5c:4e:b4:f4:4f:f1:82:8b:33:78:04:72:db:f2:cb:aa:
ba:81:29:7a:5f:9e:bb:b7:af:4a:ec:a6:cc:3d:be:13:ae:50:
93:d3:63:c4:84:3a:52:19:d0:82:a7:f1:04:dd:e0:49:76:68:
38:bd:91:15:b9:8b:52:9c:d3:0d:fe:c3:40:a1:54:ed:34:8b:
05:97:22:66:91:10:33:88:2a:2e:d6:02:80:1d:ee:ed:c0:24:
f9:fb:ef:7c:dc:ae:90:f4:59:27:ac:d3:f9:fe:7b:cd:c3:42:
b1:c8:b1:a1:3d:a5:0a:4c:02:9d:29:a6:74:01:34:b8:c5:46:
91:0f:a7:aa:cf:6c:9f:65:06:dc:0f:9b:8b:ff:06:3c:09:0f:
35:cc:dc:58:6a:81:95:06:87:3f:8f:78:95:47:a5:54:98:37:
9c:1f:ee:3f:f7:ea:6f:5d:da:aa:53:2f:64:bd:db:ec:b0:7f:
12:68:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:15:24 2025 by rpki-client