Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: gNgIWJAvvvFYd54ALqwy7jeJCP2dyOc9gyK6rfLKLBY=
Subject key identifier: DB:61:A0:E3:F0:7D:B6:89:FB:CF:63:A0:D7:80:4A:E4:20:97:B0:EC
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019674C2E4089E3921A2822F69475A37D18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 01:00:51 +0000
Manifest this update: Sun 27 Apr 2025 01:00:51 +0000
Manifest next update: Mon 28 Apr 2025 01:00:51 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: 6Ch0/qpVzymFxILQv6QMT5uJea6HoCD/x9MrdQbB12g=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:e4:08:9e:39:21:a2:82:2f:69:47:5a:37:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Apr 27 01:00:51 2025 GMT
Not After : Apr 28 01:00:51 2025 GMT
Subject: CN=db61a0e3f07db689fbcf63a0d7804ae42097b0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:70:f1:99:a6:de:98:b5:31:3a:c9:75:4b:
46:02:1c:ce:77:4f:c0:e9:43:3d:50:22:2d:aa:52:
40:a8:48:b7:65:8e:df:40:c6:18:65:09:6c:de:fa:
21:07:7d:fe:86:30:2a:21:d3:21:ff:4b:84:1f:03:
f1:8b:dc:ab:79:c8:c4:00:e8:74:da:35:94:15:7d:
dc:9d:89:1c:ad:67:09:67:09:e1:f8:fa:d6:29:6e:
7a:85:e8:93:71:69:33:7c:d1:f0:ad:fa:30:4b:9a:
a3:74:06:f7:3f:b8:b0:eb:55:0c:84:e2:35:37:dd:
1d:86:28:9c:f5:d5:0b:86:a1:fc:e3:46:f6:9c:57:
d5:93:5b:ae:95:7d:f5:68:93:ff:04:35:73:0f:55:
95:c3:a2:e7:8e:76:2a:77:de:7d:01:be:9d:1b:a7:
b4:19:01:83:72:14:ce:dc:06:97:7c:38:81:1d:32:
93:80:4d:7c:77:11:ff:07:90:db:d0:94:9f:78:c5:
e0:f2:ee:39:d1:7e:0c:30:a3:a8:a3:ca:46:eb:64:
0a:a0:b8:a8:5b:05:1d:7b:06:ac:b4:bd:f5:11:cd:
c3:59:21:12:e1:33:7e:3a:58:95:ea:05:6a:b2:a7:
4c:5a:e9:dc:ee:bd:db:46:86:02:83:ed:67:67:12:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:A0:E3:F0:7D:B6:89:FB:CF:63:A0:D7:80:4A:E4:20:97:B0:EC
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:13:07:c1:23:1d:f6:00:ec:3c:3c:71:69:b1:61:4a:73:fc:
2c:54:bc:25:32:38:c6:99:57:be:2a:ed:ab:1d:7c:63:2b:71:
2a:46:68:d2:23:52:7f:93:68:b6:12:3b:30:aa:fc:7b:0b:e4:
df:3a:d1:1a:45:11:c5:57:c1:57:95:a2:8c:5b:d2:78:16:fa:
ee:2d:6d:10:ac:89:37:21:83:cd:ec:cd:a0:19:6b:b7:d8:cb:
f0:54:da:c4:73:50:e2:1c:f6:f9:54:61:09:0e:af:c2:a6:41:
3c:98:bf:ec:50:50:c8:d8:dc:f1:a1:37:f2:8f:a4:09:28:99:
26:9b:0f:2d:67:a2:8e:80:04:04:d5:8c:ae:42:6c:17:91:83:
00:1d:b1:c9:66:ea:49:10:3c:4f:b3:02:ef:e9:4f:6f:12:6c:
b9:71:54:35:21:92:4f:28:e8:b5:e0:7d:ef:89:54:34:bd:3e:
c7:f6:e4:56:99:e7:2c:6b:7f:87:4a:6b:dc:98:35:dd:39:31:
7e:5d:f8:fa:99:4c:2b:79:75:40:30:56:d3:bb:ff:4b:6a:3b:
cd:4f:c6:b7:a0:da:f7:b0:64:1f:c6:a2:2e:7b:49:2f:a2:ab:
5e:bd:10:3e:54:da:a2:6f:84:c8:03:52:38:9e:27:cc:c7:e9:
ee:f2:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:29 2025 by rpki-client