Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: Hq4UsjVlFy9zW9uvB6WD0jRaKLwxrQuazpMCiriTEmc=
Subject key identifier: 81:79:CF:DA:4E:3B:B9:E2:EE:0D:AC:F7:2F:8D:63:6B:37:89:A2:41
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 0196BDEE4CE82BC656D9E69DE60EBD206CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 06:00:33 +0000
Manifest this update: Sun 11 May 2025 06:00:33 +0000
Manifest next update: Mon 12 May 2025 06:00:33 +0000
Files and hashes: 1: db9OeH46tzqgA4Lx9Y7WIwYTuDM.roa (hash: FuLyiACFaT6BITOZPeoXwp9XiYIYBsR3kP7HfHr2tYI=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: aPbzJW9xueB9QIloI5Cdca9ibhKySwXPMN859Dz7hhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:4c:e8:2b:c6:56:d9:e6:9d:e6:0e:bd:20:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: May 11 06:00:33 2025 GMT
Not After : May 12 06:00:33 2025 GMT
Subject: CN=8179cfda4e3bb9e2ee0dacf72f8d636b3789a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:16:76:7d:b3:67:e1:77:e0:9f:a5:4d:40:
d5:b1:14:d8:e4:d2:b0:83:ef:dc:df:6c:b8:15:73:
2a:1f:0b:87:4b:32:0a:5c:40:1a:91:7e:59:b0:0f:
f6:9b:c7:11:f5:e7:8b:31:c2:23:eb:39:63:08:15:
39:32:98:11:75:9b:8f:7a:1b:fe:3b:54:7c:27:67:
60:11:1e:7f:72:20:3b:fb:b0:41:df:76:25:1c:9c:
4e:03:b9:d6:46:f3:48:d1:2a:0b:2e:75:a6:bc:5b:
be:82:07:da:36:9a:61:ca:66:b8:3b:ee:bc:6b:6c:
5b:65:37:c4:6c:8e:95:3f:66:e2:53:4f:07:e8:41:
b1:04:d6:2a:35:29:be:3e:c0:c4:e6:f9:0d:37:20:
70:85:b9:98:7c:0a:cb:b9:c1:ea:71:6e:73:74:b9:
1d:f8:0b:64:9b:79:07:bc:53:99:16:23:78:de:a7:
55:f7:6c:4e:5d:6f:34:62:a2:e5:6e:26:c0:25:7f:
96:c2:be:88:3d:03:b1:e3:af:01:29:13:4f:2d:55:
7e:e4:af:5d:28:03:82:31:ad:6d:c7:6f:d9:08:40:
2d:89:80:05:af:12:13:82:c1:23:7b:09:91:a8:25:
3a:fa:c1:29:bf:cf:f5:37:81:00:79:0a:3b:34:8c:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:CF:DA:4E:3B:B9:E2:EE:0D:AC:F7:2F:8D:63:6B:37:89:A2:41
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fc:4f:45:73:51:07:97:dd:72:f9:93:03:9b:e1:e2:f8:0c:
f7:5a:13:66:65:71:f7:ff:fa:88:b4:56:f3:92:64:fd:3e:99:
a4:66:49:45:cd:ab:73:6a:7f:b6:31:98:ae:81:5a:6e:f6:88:
65:3a:a3:0d:ba:7b:a7:26:46:f7:50:7f:b6:5f:27:64:a4:fa:
de:6a:56:cc:15:a6:3e:15:b8:28:25:a0:12:d2:85:d2:fd:58:
da:42:36:06:f8:e5:be:02:e0:4a:71:1c:66:d1:32:92:20:01:
9b:c0:60:6e:6d:35:60:e0:ad:b2:08:96:6c:80:e2:0a:4f:f4:
6d:d0:f4:cc:c5:7a:63:29:9e:53:aa:12:a7:20:a1:6f:0c:2f:
3d:e1:c3:3e:3a:9a:ea:f2:a8:67:04:9c:94:f4:dc:b7:ae:5b:
e5:85:56:9f:24:5b:ce:4f:5d:09:1d:5e:2e:60:74:e0:86:2e:
88:34:ce:b9:fe:43:60:f3:d7:28:c5:6b:02:29:89:e8:ea:ab:
ef:99:47:61:80:a6:3b:d0:fb:96:03:e6:7d:2a:98:86:c2:2f:
41:84:df:d2:a1:58:c8:de:ef:8a:c3:f5:39:17:33:4c:4d:77:
da:cd:48:e8:fc:9d:8b:cb:24:04:df:0c:03:da:86:46:20:e8:
32:37:2b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:16:20 2025 by rpki-client