Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File: Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier: dyhenadUSeQ4pbwo/C822Lvg7nMRnztFpSx3yvkV1rE=
Subject key identifier: 40:E9:56:DB:20:0C:8D:57:F8:BF:61:23:2F:9F:84:4B:CE:24:D6:7F
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 0196846CDBF1287332C935C559BB7B90A618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number: 1520
Signing time: Wed 30 Apr 2025 02:00:48 +0000
Manifest this update: Wed 30 Apr 2025 02:00:48 +0000
Manifest next update: Thu 01 May 2025 02:00:48 +0000
Files and hashes: 1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: ZCOJRuR1f/NoJgkHgCeQPWdDGqv/wdCKnqIU1igp3BE=)
3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:db:f1:28:73:32:c9:35:c5:59:bb:7b:90:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Apr 30 02:00:48 2025 GMT
Not After : May 1 02:00:48 2025 GMT
Subject: CN=40e956db200c8d57f8bf61232f9f844bce24d67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:76:53:43:34:b7:1a:2d:3e:e7:f8:f0:da:
b2:0c:f2:7c:68:3a:91:30:23:fa:81:88:60:44:22:
85:f4:39:cb:85:bc:fa:c4:ee:68:e4:bd:ba:06:1e:
d8:04:c4:12:3a:d5:d1:56:5b:55:a3:38:9e:c4:72:
81:ed:fc:03:00:02:e7:cb:ea:86:68:bf:53:20:5c:
89:81:29:fc:27:89:c8:d4:15:24:d2:8e:73:ab:7a:
5b:f1:21:36:aa:7c:08:02:e2:96:b4:cb:3c:c2:7c:
8c:4d:1d:b0:7d:37:3c:93:b9:5a:de:6c:64:bc:26:
bf:37:3b:5c:06:5d:af:de:c0:d7:11:6f:ae:ee:c3:
89:53:bf:5a:25:19:e8:25:64:2a:d7:e2:c3:3a:a2:
b1:60:27:77:d4:e2:d6:9a:de:2b:37:69:57:5a:6e:
07:3f:37:91:18:9d:28:00:88:21:04:ed:f5:b6:e2:
94:95:88:48:f9:ae:75:34:e9:b3:f0:10:80:6d:c5:
77:59:13:3d:18:ac:78:a7:8f:36:e7:08:a8:e3:e1:
f8:5a:75:e8:73:f6:d9:a3:9e:34:3b:eb:10:95:e2:
c5:88:ac:61:63:61:7e:a8:50:ba:71:d6:53:9f:75:
9d:46:bc:06:39:28:86:9a:7f:80:36:f4:6a:41:cf:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:56:DB:20:0C:8D:57:F8:BF:61:23:2F:9F:84:4B:CE:24:D6:7F
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:22:2f:f1:46:ba:3e:23:18:61:75:78:93:be:ea:21:fc:6d:
4a:eb:00:14:38:81:7a:64:6e:60:c4:2d:74:72:b2:d4:75:97:
bd:6d:60:d7:5e:c5:01:3f:08:e9:e3:5d:a5:61:58:6c:9e:b8:
13:a5:e6:17:df:33:c7:52:c2:9c:3b:fc:d7:b1:52:b0:99:0c:
b3:dc:bb:33:08:ef:29:ce:ec:24:e6:11:5f:3f:f0:0c:de:bc:
9b:a9:0a:f0:16:f9:d4:91:ee:8f:f9:89:10:0f:10:df:bc:3b:
79:5c:3e:55:61:ce:45:dd:be:96:4c:4d:b9:3e:ff:ad:2c:c9:
dd:a5:ac:ff:d6:e1:8e:78:6e:86:b7:13:1d:90:d6:ed:b3:ac:
22:bb:fc:06:7e:f4:d0:9f:2f:53:e8:91:dd:45:f6:13:c0:3f:
b5:71:ff:05:61:94:21:dd:fa:8d:c8:43:ac:f1:b2:5e:e0:7d:
1f:a7:7a:95:19:a9:4b:9b:8f:84:b3:22:47:33:ee:52:bf:9a:
38:37:7b:ac:0c:ca:60:3f:7b:78:1d:de:4e:64:34:99:a4:cb:
d0:d7:1f:ce:8f:d5:92:dd:40:1b:54:38:68:32:62:44:25:10:
6d:df:a3:e9:df:12:ae:27:7c:4a:49:b0:20:7a:12:f2:fc:60:
19:e4:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:05:42 2025 by rpki-client