Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: IfaTXlXHKek9OnfGpUTdldA1uIjxU38i9gQTllUBNFk=
Subject key identifier: 4C:44:A5:5A:42:DA:0F:9C:C2:E2:5D:AB:5D:A6:C3:75:EC:4C:CD:43
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 01969115E0DFE6C2AC78929DD232F491C3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 089D
Signing time: Fri 02 May 2025 13:00:52 +0000
Manifest this update: Fri 02 May 2025 13:00:52 +0000
Manifest next update: Sat 03 May 2025 13:00:52 +0000
Files and hashes: 1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: KDvJNJ5KlxYoC+ifhiF0NuL0is2m0qWtJ58bNDQL+nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:e0:df:e6:c2:ac:78:92:9d:d2:32:f4:91:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: May 2 13:00:52 2025 GMT
Not After : May 3 13:00:52 2025 GMT
Subject: CN=4c44a55a42da0f9cc2e25dab5da6c375ec4ccd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:6c:b3:56:bd:84:f5:29:d4:df:9e:9a:80:
d2:45:d3:0b:9b:99:58:f6:d4:6b:ca:d3:9d:60:8b:
e8:7b:ab:b1:4a:de:e6:6a:87:60:17:9b:6e:ff:1b:
50:43:2a:1e:d4:26:12:bf:2b:81:bd:c7:44:30:11:
33:59:b7:64:9f:0a:8e:01:41:5a:c3:81:8e:df:7f:
55:78:23:4e:e1:a4:16:b8:8b:05:57:43:45:97:8c:
fe:aa:d4:42:92:d6:33:22:6c:6d:01:9d:a4:b3:b8:
71:04:7c:64:85:b6:f5:60:87:32:53:5e:23:5e:15:
29:3c:a6:08:9f:3b:9e:81:fa:79:a9:4f:7e:6c:15:
8b:85:a4:67:59:6d:2f:14:b2:d3:b9:99:d9:9c:45:
96:ff:ae:d4:44:94:ca:e6:76:d2:9e:3c:31:4b:5a:
8e:b4:52:20:6b:08:d7:0c:fb:29:82:84:36:78:ca:
9e:d3:e7:9e:51:39:93:25:e1:e4:15:57:8a:b3:b7:
5e:96:0e:75:15:41:49:e9:a1:16:db:28:df:9f:d5:
29:50:40:c8:d0:74:60:c9:28:1a:0a:9e:af:1e:3e:
f1:e4:04:af:60:15:b4:a4:78:ff:ef:17:8b:33:01:
7b:27:cd:8a:d8:07:dd:9d:b1:8d:d5:c8:8f:80:55:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:A5:5A:42:DA:0F:9C:C2:E2:5D:AB:5D:A6:C3:75:EC:4C:CD:43
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:78:54:cf:f6:1d:5e:64:5c:1e:56:95:4b:94:75:5a:dc:3f:
10:d2:3d:3c:7f:8f:ca:f8:de:91:0f:29:b1:dd:cd:ce:57:94:
e7:ba:66:1c:6b:fd:2f:7d:e4:c0:ea:6c:6b:3f:a8:a9:d1:30:
59:eb:03:20:2a:c1:1d:15:46:37:e3:10:00:34:ed:5b:ed:9e:
b9:66:c6:a7:58:1e:a5:f6:ad:97:d4:7c:a1:b0:41:0e:38:0a:
58:96:a9:18:d7:7c:6e:21:6d:66:25:49:b3:00:07:d1:31:db:
4a:af:8e:68:dd:79:49:b6:21:e8:83:ee:17:4e:41:5d:38:67:
7e:10:32:01:a2:46:5e:23:13:cb:a4:b5:12:5c:0e:a8:11:b8:
43:76:8f:d0:2f:25:e8:2b:c4:a4:e5:8c:63:30:e0:ff:53:d2:
64:54:6d:92:31:19:fb:b7:f9:9e:ea:b3:66:7a:96:ea:b4:4d:
77:30:24:09:fc:b4:fb:42:e9:e8:38:c1:92:e3:b6:25:7d:1b:
f4:8c:1b:86:1d:cf:41:72:bc:7d:d7:70:a0:82:84:af:da:85:
f2:2f:c5:f4:02:c6:d5:7b:74:52:74:d1:60:56:e1:a8:1b:ba:
93:95:91:5f:b6:1a:07:3c:b9:29:f4:f0:fd:f5:e2:c5:e6:71:
de:43:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:29 2025 by rpki-client