Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: eOWZ65fKNOCNaZpcuv54CGc4BqcOWUL4TLWMgSC620I=
Subject key identifier: 25:C7:5D:0B:21:3F:8E:BB:F4:D4:E7:B5:3E:28:27:88:00:49:B4:0D
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019680228CD75B5BB0B2BB3E4BB4E0C6EF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0973
Signing time: Tue 29 Apr 2025 06:01:10 +0000
Manifest this update: Tue 29 Apr 2025 06:01:10 +0000
Manifest next update: Wed 30 Apr 2025 06:01:10 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: 7Q8YMMsMtuqt9rmW58v2W67esrf2niY8rZj+b9fatok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:8c:d7:5b:5b:b0:b2:bb:3e:4b:b4:e0:c6:ef:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Apr 29 06:01:10 2025 GMT
Not After : Apr 30 06:01:10 2025 GMT
Subject: CN=25c75d0b213f8ebbf4d4e7b53e2827880049b40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:f4:89:39:aa:8f:f3:6d:5a:3d:9f:dc:c2:
7f:c8:1a:59:0c:6f:ab:c1:9d:0d:68:61:4d:d9:8c:
f9:c1:72:ec:50:73:d9:00:d1:0c:59:4e:41:fc:e8:
9b:bb:01:d5:00:4e:79:93:a2:2b:46:e7:cf:f3:e5:
b1:da:fd:ae:bd:49:d8:9f:02:f1:6f:d8:b3:cf:72:
26:ae:5f:44:7b:4d:1b:5a:09:d8:be:c9:33:a3:52:
fd:b4:cb:8b:00:98:ab:81:6f:b4:89:71:05:1d:e9:
0e:26:d6:11:c9:b4:6d:49:b6:f6:93:dd:66:64:90:
a6:2f:a8:70:77:ce:0f:f0:f4:d3:e4:31:b3:e5:12:
30:1c:8a:12:67:0a:10:b3:6c:f0:c2:77:43:5f:af:
cd:cc:27:99:d9:35:7c:a2:56:a8:95:f0:d3:95:55:
97:32:3d:e3:12:d9:ae:ab:75:4e:de:ba:37:79:9a:
d4:af:6e:e4:a4:67:c2:41:dc:96:1f:84:f4:9d:61:
ee:15:5a:14:9d:ac:78:4b:7f:58:63:9e:4d:52:d5:
b1:c4:48:28:f0:3a:99:7b:90:73:69:9a:80:e9:94:
94:60:a4:d8:86:af:45:ab:f1:6f:94:4f:b8:8e:ce:
8c:66:ac:0e:ff:4e:5f:60:1d:db:83:c7:40:cd:6c:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:5D:0B:21:3F:8E:BB:F4:D4:E7:B5:3E:28:27:88:00:49:B4:0D
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:f7:92:9f:83:85:51:50:0c:57:02:96:e1:4c:73:45:6a:
4a:fc:ab:f4:a3:6e:da:16:a5:1c:ba:6b:21:52:80:07:6f:33:
3b:38:a9:b6:e6:fa:59:4b:0e:42:a7:83:58:9b:7e:0a:2d:cb:
43:07:b5:d3:5d:ff:ce:05:6d:46:4b:28:0e:ae:67:20:b2:a0:
00:ab:4b:15:34:5a:9a:86:7b:ef:9b:ce:b7:a8:6f:4f:10:16:
db:42:2e:fa:cc:58:16:07:a1:64:a8:a4:d4:b3:b2:0c:46:a1:
44:13:1e:0d:21:85:9a:53:41:09:c5:7e:f1:64:12:be:95:d4:
bf:c2:dc:39:e5:89:e9:3d:c3:1a:25:d6:7c:1d:2c:bd:74:cf:
91:a7:33:c6:5b:02:5e:c5:2c:e5:61:35:d6:03:f9:f9:d1:d2:
71:dd:18:91:a9:15:ba:ba:fb:7e:c7:a2:76:7f:09:eb:2b:af:
fa:2b:dc:a2:9d:b3:23:91:85:04:c7:66:b2:cc:ce:e0:59:c4:
c4:47:b2:2b:0b:cc:e3:89:ed:6a:9c:37:9a:f0:b7:56:af:6e:
24:2c:2b:b3:26:3d:23:6e:21:18:eb:2f:53:35:33:15:2d:29:
3a:2d:cb:61:9c:3a:82:6b:51:1f:cf:ac:2e:6a:2b:d8:0d:a6:
eb:19:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:50 2025 by rpki-client