
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: G2MMnxL6xoUHlPCS2+YfvZs7YlLslsqPfciR0pwR6lE=
Subject key identifier: 45:E3:38:1F:DF:A9:3B:67:7B:34:48:90:0E:0E:51:91:BB:A6:E1:3F
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 0196A8B07FB1E6920D1C9225D347A5259F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 03:01:01 +0000
Manifest this update: Wed 07 May 2025 03:01:01 +0000
Manifest next update: Thu 08 May 2025 03:01:01 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: Oa76wq/g8M/QS0qr+EZVIzrGaCYlvh0zIpnK34zi2M8=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:7f:b1:e6:92:0d:1c:92:25:d3:47:a5:25:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: May 7 03:01:01 2025 GMT
Not After : May 8 03:01:01 2025 GMT
Subject: CN=45e3381fdfa93b677b3448900e0e5191bba6e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:23:74:11:73:79:f2:ed:25:8f:2f:dd:d7:
05:61:dc:ac:76:04:b9:ca:09:14:bd:f4:2d:19:0a:
db:fd:0f:96:c6:79:11:ff:aa:fd:9a:ff:3c:ea:9c:
e0:f6:15:13:60:63:3f:79:59:a2:b7:20:d0:0d:1a:
20:05:34:0f:8a:16:dc:ac:ed:1f:66:e8:4a:83:31:
d0:22:a7:e6:6b:28:94:c0:f2:10:ea:18:ed:2b:9c:
07:a3:e2:47:25:a1:6b:76:a3:2d:70:29:4a:16:e0:
e3:3f:38:30:fd:4e:ea:ab:56:74:ea:08:ac:13:ea:
8f:bd:37:60:b8:79:9a:db:ce:e0:3a:aa:74:8c:60:
d8:95:b7:39:91:9e:91:56:29:61:f8:52:fb:ab:cd:
f9:30:a5:aa:3f:46:67:be:6d:b1:99:c0:cc:d3:da:
f7:19:98:95:8c:aa:ff:75:ec:21:db:af:77:4e:a8:
10:18:a8:a2:93:1a:38:9f:27:35:b4:9c:fc:e6:a7:
3c:60:8d:f1:d2:00:b1:e6:b8:3d:eb:d0:38:3c:89:
c1:14:64:2d:46:0d:51:34:1a:03:7c:bf:44:f1:66:
09:a0:09:f4:19:0b:10:5e:08:d0:4e:88:be:91:ca:
52:33:12:f9:5b:63:59:e5:2e:dd:83:84:9a:26:52:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:38:1F:DF:A9:3B:67:7B:34:48:90:0E:0E:51:91:BB:A6:E1:3F
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:b1:4b:92:bb:19:35:4f:f1:e4:c5:9a:72:6e:76:59:05:
a9:aa:74:b0:03:03:b0:64:97:ad:69:9e:99:ca:f2:82:59:eb:
7a:a6:1d:64:72:6d:c5:29:37:b8:80:b1:3c:b3:0b:3f:ab:8a:
ea:06:91:b7:e0:1a:2e:d9:ed:38:ca:8d:7a:08:d3:38:24:7f:
85:ea:d8:18:af:b3:af:15:eb:fe:e1:dd:96:1f:10:d8:35:bf:
e0:00:6a:39:a7:e7:a9:58:66:3b:ca:0a:58:de:27:9d:ad:ef:
e1:f8:91:46:91:43:a0:7c:08:75:51:da:43:97:5e:f1:5d:59:
e6:70:f6:5b:c1:d8:9d:a5:00:73:f2:a7:2c:c0:d4:42:17:d7:
bd:49:e1:a9:e6:0d:54:a4:c2:8a:9d:e2:25:dd:22:a5:67:96:
bb:31:97:eb:2f:a7:c9:9a:4b:43:de:ab:a5:f3:98:22:48:76:
2b:5d:91:43:f3:37:1e:c8:8c:ba:88:b6:fc:56:99:56:ac:65:
ec:5e:69:0c:0a:e6:63:2e:8d:ba:02:33:ec:0e:e2:6c:6f:81:
a0:e4:db:5e:17:29:b8:04:23:5d:38:95:c9:df:46:f0:f6:4e:
c7:d2:9c:1f:45:8e:f0:79:a0:1a:04:ed:9e:79:d1:5c:c1:0a:
4e:92:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:14:30 2025 by rpki-client