Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: wJ+jA6ZfanhC+tBqpdsQkTJi/36di4IrjVeYgNaZA9g=
Subject key identifier: 8B:7E:AD:73:93:05:53:EF:BA:CC:64:8E:D0:71:E3:84:AB:00:E9:A2
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 0196A84248096F6857A92D324918431DEDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 01:00:38 +0000
Manifest this update: Wed 07 May 2025 01:00:38 +0000
Manifest next update: Thu 08 May 2025 01:00:38 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: 6qKcidnPsyD/YGjiH3P8KHw/EdjfcCzp+X3HSdBG+GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:48:09:6f:68:57:a9:2d:32:49:18:43:1d:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: May 7 01:00:38 2025 GMT
Not After : May 8 01:00:38 2025 GMT
Subject: CN=8b7ead73930553efbacc648ed071e384ab00e9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:de:74:dc:af:e4:f0:f1:63:c1:a7:c3:fc:
9c:fa:07:37:71:07:7c:a4:79:50:a5:d6:4b:63:0a:
08:b5:13:7e:30:ed:40:be:c8:e3:c7:75:71:03:7a:
dd:de:16:2d:96:e7:9a:f3:9c:5b:18:4d:48:c0:2f:
a7:e1:f1:7c:b1:76:3f:5d:ee:7c:4c:a9:1e:e9:98:
d0:b2:ef:e2:9e:f5:25:92:20:59:d8:8f:1f:bb:1a:
52:11:c9:c6:cd:e4:f1:72:fb:89:9c:75:0c:c6:18:
12:d2:f1:86:70:37:ce:27:b1:ca:e5:bd:b8:83:30:
f5:6b:84:dd:cf:cb:fe:4a:0b:6b:7d:e9:ba:66:36:
88:46:5f:1f:e1:32:2f:6b:cc:1c:dc:22:29:e5:1b:
35:5d:6d:3a:a7:42:f4:14:30:ac:13:44:f2:9a:98:
cf:bb:f9:05:9c:5e:63:60:fc:60:71:92:fc:df:71:
3e:1c:ae:aa:2c:bc:e8:e3:b6:04:24:80:44:c8:5c:
cc:dd:e1:18:b5:82:5e:da:f0:b6:09:f2:1b:41:68:
ad:b7:5e:f5:95:d8:2f:56:ed:02:db:4c:70:9f:d0:
db:7b:c0:2f:92:5f:11:8f:61:e9:55:fc:04:88:36:
ce:d1:8d:71:f4:97:8f:99:12:87:40:36:77:6c:ea:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:AD:73:93:05:53:EF:BA:CC:64:8E:D0:71:E3:84:AB:00:E9:A2
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:1e:a5:ba:e7:d5:f2:3c:45:6b:51:1d:66:ae:64:98:c2:
27:04:6f:e5:69:34:ad:4f:e6:3e:f4:30:b2:15:e8:76:47:cb:
44:b3:ee:3f:9d:da:ec:ff:5e:4e:c7:7b:a3:d9:59:22:5c:d8:
58:41:70:85:f9:40:25:1d:b5:aa:64:72:72:b6:e1:0a:b8:d5:
7d:d1:f7:08:0e:e7:b5:23:1b:bf:86:a0:1e:9f:c3:4e:db:6d:
10:44:ad:17:d1:87:e6:c0:d8:bd:46:c8:81:ed:14:1c:ec:3e:
d8:6d:36:48:be:f9:83:d5:be:97:da:3c:7f:ce:c3:72:5b:87:
e4:83:1f:33:22:95:e9:2c:b5:c7:72:0d:dd:65:5b:78:50:ad:
8b:59:23:19:12:b5:c9:8f:87:7a:13:81:06:65:5f:0b:1a:40:
a7:30:d3:fa:a5:68:b7:9e:ff:a3:1a:ff:cb:7e:a1:c3:ad:06:
d9:f9:7b:e2:c7:83:e1:d7:c3:01:d2:2d:b9:bf:a7:e1:43:70:
49:6b:6b:8b:84:58:3f:bf:5d:8e:b8:e5:e1:cf:e2:46:fd:7f:
63:fe:d1:5d:9c:5e:ca:4c:d1:d0:76:48:77:2c:44:1e:d1:cb:
ea:31:3d:2b:1c:42:fb:64:35:ad:31:18:3b:ff:d3:67:f9:b4:
78:e2:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:57:56 2025 by rpki-client