Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: fDzmMpxT/HKhN4j1q52FMExTgr+3jIOs5lWh+vJC5pU=
Subject key identifier: 53:EE:70:5F:56:54:2A:3D:A8:73:36:52:79:61:21:B9:4C:13:C6:43
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 0196A578543CB5488C6B974DD625A1C3E4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 12:00:48 +0000
Manifest this update: Tue 06 May 2025 12:00:48 +0000
Manifest next update: Wed 07 May 2025 12:00:48 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: azoUtrDQU8dioKYMrnNopzwZsUSH54OLqennHDQOjKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:54:3c:b5:48:8c:6b:97:4d:d6:25:a1:c3:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: May 6 12:00:48 2025 GMT
Not After : May 7 12:00:48 2025 GMT
Subject: CN=53ee705f56542a3da8733652796121b94c13c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:06:a6:18:53:2e:5c:a0:11:29:73:f9:01:
9b:e5:12:7a:e5:36:7f:5a:00:2e:82:ca:76:a7:01:
38:b1:8f:81:3f:21:0e:8c:d5:a2:6a:33:a7:2a:17:
f9:ae:48:e6:32:0d:0a:c8:5e:c1:f2:17:30:31:8c:
2f:84:b1:1e:7d:cd:2f:62:9f:53:68:ab:28:35:bc:
10:25:ec:aa:ee:32:c1:5a:d2:a3:3f:04:f3:01:ab:
b7:6e:c0:f4:b1:a6:49:15:d9:e9:40:db:67:d0:a4:
0f:5b:66:ce:f5:d5:e3:6f:99:a9:f7:c7:e3:9d:4d:
21:d7:2d:ac:a2:98:0e:e3:2f:65:2b:ed:ab:c8:d9:
68:91:0e:7a:73:0d:31:ef:3d:05:e3:f8:b8:d9:10:
53:87:81:9d:f9:1c:7e:86:2c:d0:a4:61:1f:00:13:
d0:89:44:b9:23:6b:be:4d:7a:17:0f:49:a4:0b:fe:
78:b9:5b:dc:2b:be:cf:90:5c:47:dc:84:3f:b4:9b:
89:0a:76:df:76:8d:a2:09:20:e7:82:46:dd:6e:61:
a9:7c:a5:4e:a0:99:da:d9:59:fe:1a:c4:13:2b:17:
b8:c3:28:59:b7:b1:14:4c:32:b0:8e:30:57:ca:62:
c8:c3:57:a4:3b:a7:af:91:53:2e:d2:b4:e1:e5:3b:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:70:5F:56:54:2A:3D:A8:73:36:52:79:61:21:B9:4C:13:C6:43
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:5a:af:e5:dc:f8:5b:e5:be:f4:b9:4f:17:e3:71:be:5d:
db:37:f8:c1:f9:8b:c3:96:ab:72:f2:52:98:e6:37:32:22:ee:
66:44:74:9c:ac:ce:ce:95:12:11:88:24:5b:ca:14:93:f1:fe:
6f:bc:e2:01:d2:68:35:95:c8:1a:d5:26:1f:ab:b4:fe:f9:dc:
c0:a2:36:e2:14:dd:b7:f1:f4:20:b4:b4:76:1b:5d:40:30:ce:
54:96:28:9d:02:b3:5c:9b:0e:8b:23:cd:f6:73:16:4f:f3:48:
fa:17:57:77:e7:b4:9c:4e:d3:ea:96:85:34:c1:60:30:89:7b:
90:be:3c:8e:24:a5:14:54:2b:63:a9:06:f0:cd:aa:3b:bc:20:
57:d9:5a:36:68:1c:94:07:aa:36:80:c4:2b:6e:09:76:62:cd:
48:fc:3a:6b:43:15:f3:2b:06:66:96:2a:bc:4e:ce:13:2f:87:
ad:8f:ca:62:f8:e3:a1:95:40:21:62:b4:29:ba:0a:f2:eb:c0:
8c:2c:27:6d:68:28:85:7d:8e:82:7f:5e:c4:5d:73:ae:13:d7:
00:fe:4d:31:31:db:65:ce:93:ec:6e:c4:0a:20:18:fb:be:2d:
32:ac:81:87:37:75:93:46:0e:f4:46:bc:da:a6:ef:aa:df:d9:
96:42:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:05:55 2025 by rpki-client