Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: 4V4oMJalJ/YFDKHBHfB5OD/gjdaGtmO1cU5IqiCW+wE=
Subject key identifier: 47:8B:C9:D5:A9:9C:BC:78:B2:5F:F3:A5:86:A0:34:7D:9A:21:14:3C
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019675302C608D6CFD0012C56CC11BBF8DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 03:00:13 +0000
Manifest this update: Sun 27 Apr 2025 03:00:13 +0000
Manifest next update: Mon 28 Apr 2025 03:00:13 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: AglZ/43WJiKgzgabpyaFel3kCmu67K0hYBFw/RHHhDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:2c:60:8d:6c:fd:00:12:c5:6c:c1:1b:bf:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Apr 27 03:00:13 2025 GMT
Not After : Apr 28 03:00:13 2025 GMT
Subject: CN=478bc9d5a99cbc78b25ff3a586a0347d9a21143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:7d:36:10:11:c6:9e:4f:72:14:01:d8:6c:
eb:91:ca:2f:5d:aa:49:b3:16:32:52:bd:02:c5:87:
62:44:5a:12:31:ac:30:87:2f:86:ba:6c:c8:40:43:
12:4a:81:fa:23:f6:ae:bf:80:10:23:33:fd:59:bc:
25:22:04:93:ea:c3:72:27:67:68:58:24:32:22:63:
02:44:06:c9:fa:7c:d3:f6:ac:58:45:a7:f1:c8:4d:
f3:da:67:d3:1d:4d:ce:13:c7:f2:f8:81:67:a1:d4:
24:29:d1:2d:dd:2c:c2:d6:d6:81:48:00:9a:10:e6:
02:38:b1:81:00:3c:e6:9e:f9:b5:42:c6:46:44:88:
85:13:6f:31:f0:71:86:71:66:1b:3d:60:fa:4b:8c:
b3:48:9b:4f:67:be:e1:a6:f7:7f:56:7d:14:71:0f:
44:a0:e1:d1:68:d4:98:2e:eb:1b:6d:c4:e1:92:7c:
13:a2:17:be:e5:ee:e6:b6:45:5b:b0:89:2f:de:5b:
28:72:eb:fb:ef:0a:19:aa:97:2d:fd:ad:f6:eb:56:
8b:ee:1b:92:6b:de:fd:ae:5c:3c:53:59:1c:51:eb:
44:e8:48:36:30:39:12:9c:70:cd:6a:a5:ff:bc:50:
47:b1:47:8d:da:ee:73:b7:83:20:6f:36:c5:c1:66:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:C9:D5:A9:9C:BC:78:B2:5F:F3:A5:86:A0:34:7D:9A:21:14:3C
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:df:4d:c6:55:02:d8:c9:fa:17:3d:cd:5f:55:2e:a5:c8:7a:
d5:77:b7:d1:aa:ac:c2:68:40:64:69:be:da:52:57:cb:80:23:
6f:e3:10:7e:c7:db:b2:d4:ce:e7:71:f2:04:e0:c0:2e:29:f9:
ec:4b:d3:c8:71:06:91:71:03:c8:41:d5:a4:6a:d8:b8:77:53:
1b:a2:a1:4e:eb:a4:97:ee:3d:81:52:04:e5:24:9d:d8:cd:ea:
72:86:b4:7e:ff:f8:ce:a5:5c:f2:45:a0:7f:0b:29:0f:3a:7c:
32:a4:70:35:96:5e:3a:d9:06:9d:e9:6c:25:4b:46:89:00:2a:
51:d8:c1:6a:02:df:4b:64:b6:88:22:62:4a:e4:b9:b2:3e:96:
5d:15:b7:2d:26:01:41:f7:9f:ed:c0:58:5d:05:03:d2:f9:08:
53:90:d6:13:e4:3b:41:b7:ae:45:88:17:ee:73:83:c5:f8:92:
93:88:ba:e1:8b:66:97:5c:11:b5:4c:a2:d3:60:4c:a3:31:13:
84:56:cd:b6:7b:92:da:d0:9c:53:bc:90:f8:11:49:85:88:61:
4e:9b:be:d6:01:09:ec:a5:8b:08:07:69:bc:57:b7:c4:4d:a2:
36:0e:5c:30:ee:27:a1:1b:17:81:d0:ac:ac:c8:62:27:13:93:
f1:1e:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:41 2025 by rpki-client