Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: 3GTMd8M6WgGd4hG7zCVYIVs9Iq8R324bzmsM0R9CR2s=
Subject key identifier: FB:3F:0B:33:C0:7B:9C:67:14:F8:7D:8D:91:73:A8:8A:79:D0:FE:14
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 0196760C55E433D322B0F97A4665F7FDE82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: y5MN87cnGBB6YTqOxGdsuxLV0duQSJGrR/8jkSuGJts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:55:e4:33:d3:22:b0:f9:7a:46:65:f7:fd:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=fb3f0b33c07b9c6714f87d8d9173a88a79d0fe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:86:3f:5c:57:2e:47:3a:1a:1a:64:80:47:
e7:26:e4:6d:bc:ed:a2:56:a6:45:c8:fc:e8:7d:ab:
0b:2d:33:83:b3:06:af:3c:24:ac:ab:a9:2f:e9:42:
02:04:e8:6e:7e:ba:5a:9c:f7:0f:fc:38:6f:03:0c:
4c:06:78:2b:ef:81:11:6c:7e:26:7a:b2:a1:f8:c4:
4e:ee:c3:3e:4f:d1:76:80:b8:38:e2:78:0c:4f:cc:
19:01:e7:12:f3:8a:83:ba:b8:e9:f1:c5:3f:2f:14:
8f:15:10:53:53:49:56:c8:b6:69:40:5e:ec:f9:f7:
d8:75:d7:3d:f1:f9:77:e4:32:b4:89:e3:0f:b6:4e:
0f:b4:5c:64:5f:b7:49:0a:db:28:53:04:bb:da:9e:
9d:04:bd:5e:22:fd:86:25:d4:20:25:41:ce:f3:e9:
f8:20:01:45:6c:b9:f5:55:38:67:7e:b4:24:a1:79:
8e:b9:ea:6e:e4:3d:a3:bd:dc:7e:17:5c:03:7c:82:
8d:10:23:a5:5f:3e:54:f6:84:52:4d:3f:a4:1d:31:
72:9b:38:2d:cf:36:0a:99:7c:b9:7d:fb:e3:af:f8:
00:8b:17:7f:94:71:f2:d6:a5:4e:a6:bc:09:af:c7:
da:be:9f:60:28:18:ce:d9:3d:58:56:d0:9c:9d:61:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3F:0B:33:C0:7B:9C:67:14:F8:7D:8D:91:73:A8:8A:79:D0:FE:14
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:e4:ae:59:c9:81:3a:53:a4:24:a6:6e:de:72:31:6c:e9:
2a:9f:7d:ce:c3:c9:08:27:61:73:56:a8:7a:d2:45:68:69:90:
9e:19:79:6b:50:49:40:87:63:7e:e9:bc:41:95:ec:39:a6:dc:
07:96:1d:0a:08:bd:96:b7:a3:a3:09:57:46:47:d4:18:ef:5f:
c4:14:13:6a:1c:e8:57:ed:ef:56:97:8d:52:52:b6:13:09:ca:
e6:16:4f:3b:ef:f7:d5:ad:99:7d:a5:14:1e:34:a4:4b:50:04:
3b:ae:10:62:a1:79:32:4e:14:52:70:3d:77:51:a2:82:5b:69:
e8:b7:93:8c:dc:11:e0:66:aa:62:02:64:09:b1:15:af:b2:a0:
61:b3:a8:ed:10:ea:17:09:d7:6f:c6:0f:5f:4e:2f:1d:1d:63:
4a:06:d0:80:ba:54:ce:49:f1:c6:e9:ed:e6:29:5c:1f:57:2f:
46:bd:dc:98:50:e7:ed:df:f9:3f:3c:f9:ad:c6:c2:40:a9:52:
5d:27:bf:1c:91:53:ee:c5:7f:08:3a:70:f1:85:81:8c:f4:60:
b3:b9:0f:db:67:7a:95:d6:d8:e0:73:d5:4d:05:f6:0e:77:d7:
99:11:e7:17:f9:32:cc:4a:67:d4:7e:cc:16:7b:43:23:38:2f:
3f:d0:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:31 2025 by rpki-client