Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: f8XXdz5mMRUNXVlupvNxINabHlnBqV3v8MLlJLSiGCQ=
Subject key identifier: 61:E1:7B:BD:7B:54:B3:3C:12:54:20:98:93:C0:B0:F7:60:A4:0E:FE
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0196C0EF24A51984B78EDADC090277677BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 20:00:19 +0000
Manifest this update: Sun 11 May 2025 20:00:19 +0000
Manifest next update: Mon 12 May 2025 20:00:19 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: SjU2fkgu4MF6TXZDdixEO9uun8UFpDODHUxHPDk39j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:24:a5:19:84:b7:8e:da:dc:09:02:77:67:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: May 11 20:00:19 2025 GMT
Not After : May 12 20:00:19 2025 GMT
Subject: CN=61e17bbd7b54b33c1254209893c0b0f760a40efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:98:31:91:62:6e:a9:1e:86:7e:fd:81:8f:
cb:a4:e7:8b:1b:83:fd:a3:2e:31:c3:e6:9e:5c:ec:
71:7c:36:d1:fd:ac:e7:f5:9b:c8:91:5c:a0:11:d0:
67:39:63:88:e6:00:15:66:84:e6:27:60:65:65:5f:
4e:7f:5e:bf:c8:52:b0:a2:68:fa:fc:a0:90:ab:19:
68:a8:90:af:53:3b:4c:ce:9b:8a:f3:a4:af:e5:e5:
5d:10:91:ae:59:af:ce:33:ae:87:20:a4:e8:12:50:
23:0c:a0:c5:71:7b:bf:3e:09:05:4c:a8:b9:ca:ea:
d2:73:52:47:4e:26:0d:3d:05:3a:dc:bf:d6:8f:b2:
80:01:14:fb:57:eb:af:0e:4e:40:49:2f:63:17:6d:
b9:ac:4d:e4:0b:5a:cf:98:58:54:2e:dd:68:bc:7a:
f0:8a:92:7c:30:20:32:f6:89:e1:00:81:59:50:f3:
82:be:53:22:f0:e1:f7:d1:42:d7:78:50:49:33:1a:
0a:c2:83:f5:99:f0:53:fe:be:a1:82:30:8e:eb:69:
82:d1:65:56:aa:2e:d7:07:d4:19:95:24:ae:12:17:
cf:4a:27:fe:d1:93:ab:25:0a:33:3d:12:99:7f:18:
6c:22:ac:98:5c:f6:24:7b:ca:6a:94:5f:5e:55:3b:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:7B:BD:7B:54:B3:3C:12:54:20:98:93:C0:B0:F7:60:A4:0E:FE
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6c:76:bd:a9:38:0a:af:76:56:f5:db:d1:b4:34:6b:b7:82:
ea:26:50:0a:86:2f:d8:72:25:65:3c:a8:35:f7:40:e8:72:f4:
f1:d0:c9:fb:3c:7d:b7:73:48:ca:3c:98:ed:7b:9e:4b:43:f6:
a1:0a:61:53:44:5b:dc:aa:33:4a:0b:a3:9a:34:06:dc:5e:ac:
1f:1f:26:bb:b3:37:58:8a:08:f2:fa:24:18:ab:ba:2e:94:46:
64:a8:20:4d:74:c7:c8:0e:4a:ce:9c:6d:81:ab:24:bf:f7:4e:
d7:b5:90:12:0f:22:ee:ca:1e:8f:c1:9e:50:42:17:f4:14:e6:
5a:14:0b:13:1f:9e:5e:34:75:6f:d2:75:bf:d3:5a:16:91:c4:
05:27:15:12:8d:eb:f8:2e:ed:0a:73:d9:d7:3a:40:73:e9:4e:
02:41:b6:ae:b9:ce:0f:b5:3c:cd:a8:fc:b0:c8:b3:a1:56:81:
cd:80:22:f7:80:cb:0c:3e:e8:df:92:90:47:3f:d9:e3:61:97:
07:8f:d4:a8:b5:59:e1:d1:a6:1d:32:02:ff:22:ac:c8:22:d3:
dc:80:ad:10:f5:9d:ea:22:60:eb:cd:0a:98:b6:86:0f:c4:40:
0e:9f:33:d7:11:13:3f:2d:0f:52:b2:9a:c0:2a:7c:06:8a:15:
85:ad:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:12:25 2025 by rpki-client