Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: x7gf/wXhcEJbi4vZ8ZI7o1kmNiXtmQTiBFx7ondkguk=
Subject key identifier: DC:12:00:E0:83:DE:BE:E3:DC:70:05:90:DB:14:C3:ED:BA:5A:7C:91
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019673B0536DB3E088BFA4ABDAC7AF297157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0283
Signing time: Sat 26 Apr 2025 20:00:57 +0000
Manifest this update: Sat 26 Apr 2025 20:00:57 +0000
Manifest next update: Sun 27 Apr 2025 20:00:57 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: 8GN4UCLbUvg8ZS9zN76YJ3gFxkWBFPLLnm4gwj2NCkE=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:53:6d:b3:e0:88:bf:a4:ab:da:c7:af:29:71:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Apr 26 20:00:57 2025 GMT
Not After : Apr 27 20:00:57 2025 GMT
Subject: CN=dc1200e083debee3dc700590db14c3edba5a7c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:48:51:b8:ac:23:e2:e7:63:e1:7f:e4:f9:
f3:a2:e3:8c:53:7f:da:39:69:59:2e:f9:07:31:ff:
2e:db:05:0c:20:12:f0:08:a1:da:b3:18:65:bd:d7:
7d:98:31:2a:b1:07:ab:6c:4d:e4:53:12:a9:25:7b:
b1:83:65:22:fc:8e:4c:58:37:aa:a1:a0:79:45:35:
98:ab:5a:e1:bf:6a:36:20:63:54:f9:45:5a:36:67:
33:5e:a4:d7:a0:c6:ea:61:d4:5e:ba:a1:5f:90:60:
f6:97:5b:2c:1d:f8:5d:08:fc:49:4f:c2:97:8f:e0:
db:93:f3:3b:52:54:6e:b1:37:8d:63:cd:a2:bd:a8:
1d:10:24:1c:a9:42:86:25:06:41:0a:e2:90:9e:8a:
d6:50:cf:68:64:c7:83:df:2c:81:f4:4f:6f:f5:e3:
c0:34:9a:1d:cc:31:a9:ec:1a:82:13:81:67:a6:d4:
be:47:6e:2e:b1:88:92:f3:b2:2a:35:78:e3:ac:2e:
66:95:0f:32:fd:8c:a3:2b:77:f2:83:04:8c:a7:01:
b2:3e:94:90:14:62:60:36:25:75:d5:ed:c6:22:5b:
96:46:6a:6d:80:0d:74:20:16:d2:57:b2:2b:6b:99:
36:6a:e1:ea:43:f0:05:d1:54:03:12:f5:04:14:35:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:00:E0:83:DE:BE:E3:DC:70:05:90:DB:14:C3:ED:BA:5A:7C:91
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2d:eb:50:2a:59:f9:7e:98:9b:f0:e6:53:2e:61:a8:0f:55:
28:fa:3c:07:4d:d9:67:fd:e8:b2:95:32:19:20:a7:61:af:f9:
05:30:b2:92:2c:2b:f3:f3:a7:0f:4e:1a:9d:75:3e:06:22:d4:
1a:32:30:e6:ca:14:a0:81:05:7b:9c:72:19:10:a5:69:61:e5:
3e:9e:42:74:f4:00:63:2c:aa:ea:e9:6c:79:39:4f:ca:1e:42:
ff:f4:42:f9:96:37:b5:1d:92:21:e6:70:dc:92:a7:61:67:e8:
a5:89:6f:94:ce:5a:b2:6a:aa:61:70:3d:3f:ea:4f:f7:68:ed:
58:0f:0d:39:9e:a8:38:90:ec:09:74:15:2c:4b:3c:3e:a4:cb:
1a:1d:74:d2:1e:72:b7:b6:09:9f:44:ec:ea:2b:d9:7c:94:1e:
d7:10:ea:f4:bb:6b:1b:dc:90:71:7b:34:60:59:dc:bf:0d:87:
cf:ca:13:f9:c6:d6:54:63:19:68:bb:20:96:42:6f:8f:b2:4b:
ee:42:fd:17:2f:75:ac:28:8a:5a:4c:34:44:0e:cb:dd:31:42:
48:af:9e:e7:8c:81:d6:cd:db:c7:da:cb:1a:f4:51:fe:de:3c:
bc:bd:2e:a8:2e:d9:a6:d2:21:28:59:b3:7e:d3:74:55:15:72:
1d:41:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:17:31 2025 by rpki-client