Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: Y0HZbB+2Z5+mSlaWIBzCEfX0alvRGUkEsGz88fHaHpM=
Subject key identifier: AF:BB:19:31:1D:80:BA:AF:49:A8:E4:CC:8B:70:7D:B5:FF:B0:98:0E
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 019678D6A91219FDD4F26D20F8B655224D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 20:00:55 +0000
Manifest this update: Sun 27 Apr 2025 20:00:55 +0000
Manifest next update: Mon 28 Apr 2025 20:00:55 +0000
Files and hashes: 1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: xNgNrIkXsaFKvMocqKx7PVgDwSvi6YxO6pDlNXl/3OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:a9:12:19:fd:d4:f2:6d:20:f8:b6:55:22:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Apr 27 20:00:55 2025 GMT
Not After : Apr 28 20:00:55 2025 GMT
Subject: CN=afbb19311d80baaf49a8e4cc8b707db5ffb0980e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:81:7b:65:a1:44:d2:bf:82:d4:30:c9:7a:
a4:3c:ad:b8:aa:7c:32:ac:e4:07:c2:14:64:21:0e:
cb:00:8e:2e:56:52:08:8f:eb:50:f7:e6:ba:1b:41:
3d:68:37:0d:89:b0:50:47:f5:a9:c1:6b:d1:cd:14:
79:7d:57:8b:73:4c:84:50:37:58:d1:66:bb:a4:30:
44:38:f0:54:2a:7d:05:2b:d3:c3:d0:dc:de:42:24:
4f:ba:70:10:8b:80:25:af:64:25:68:71:70:90:75:
6e:a4:b7:f4:d8:e8:26:6a:3a:9c:37:84:d3:93:37:
a8:b9:01:39:1e:e6:41:3b:0c:3f:ec:48:16:c3:2c:
96:f5:b5:09:4c:b0:ac:7d:4d:63:8d:68:f0:f3:e4:
f9:35:62:04:94:ce:92:63:11:ed:2b:4e:92:59:17:
38:bf:9a:99:a8:5a:da:fe:60:b2:e9:0b:0b:5f:f3:
03:e0:7b:c3:ee:bc:c2:c0:da:10:1b:a5:49:67:a5:
4d:a9:ce:a5:b6:c3:8b:80:90:d7:61:b1:69:e0:b2:
c1:b3:a1:e2:ca:43:0f:91:13:12:17:df:af:f0:65:
a7:a0:26:bf:ce:7e:55:09:6e:a4:1d:88:41:ca:9e:
0c:17:d4:a7:3c:69:d8:d2:15:48:5b:c3:91:c9:e5:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:19:31:1D:80:BA:AF:49:A8:E4:CC:8B:70:7D:B5:FF:B0:98:0E
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:88:8c:2c:e0:c0:e3:0f:d7:05:00:91:46:ef:de:5d:42:c4:
34:2a:27:1a:cf:13:64:c7:64:3c:07:58:a6:2b:20:f7:95:a2:
5a:7a:9e:5a:81:3e:82:c3:42:0e:6b:b5:a4:ac:0d:7e:7c:29:
5c:fa:ce:5f:f6:b5:3c:76:4c:9b:47:03:2c:54:a8:37:ea:e4:
a9:c0:1d:10:c7:7b:d3:78:3a:b5:a3:7d:c7:e9:59:36:e2:dd:
42:48:3a:7a:74:68:b0:f8:f9:f5:fb:5d:4d:80:4a:ef:ce:04:
4d:9e:b5:67:75:68:0f:ac:87:23:ae:e1:dc:38:c6:f5:ee:bc:
ab:b4:16:33:60:ec:2b:b1:4d:ae:93:84:ea:d0:48:ba:03:8c:
b2:ae:36:9a:25:2f:f0:20:a6:69:fa:97:17:a2:04:40:d0:49:
7d:33:d9:f5:7a:05:97:89:a5:7c:08:7a:65:d0:76:e6:13:d7:
6c:91:65:2c:8c:a3:df:d4:f8:57:e3:6b:87:30:9e:1d:8d:29:
07:52:1f:29:cc:1b:a3:2f:73:fc:b5:88:b9:b4:c9:08:d4:55:
00:83:b2:36:cb:d9:c5:19:07:e8:ac:ee:10:19:3c:5c:be:38:
bc:00:5e:b6:f1:2e:92:07:3e:93:a2:e3:e7:c7:9e:f5:c6:52:
5f:08:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:46 2025 by rpki-client