Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier: oRSMk984MRaPrCyKTD1D3qB00QzRVr41FEUCoYCL8Gg=
Subject key identifier: B3:D1:52:AB:16:92:8A:EB:81:C4:89:64:C7:94:99:A1:3F:ED:99:42
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 0196BE25478C7E5FE82BA0EEE6959E6E8645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number: 0346
Signing time: Sun 11 May 2025 07:00:36 +0000
Manifest this update: Sun 11 May 2025 07:00:36 +0000
Manifest next update: Mon 12 May 2025 07:00:36 +0000
Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
3: CF82jVUVZeKpuyFYv8cM6TsLQC0.roa (hash: JBQmTeNOrtVCdfq+3VNtxXtIRDR/14iOJ6hQdOlG2Jg=)
4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: Zn6YMH+dBKjfUkVq98OMuRu7fuT9k/QPd2gptdEMFBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:47:8c:7e:5f:e8:2b:a0:ee:e6:95:9e:6e:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: May 11 07:00:36 2025 GMT
Not After : May 12 07:00:36 2025 GMT
Subject: CN=b3d152ab16928aeb81c48964c79499a13fed9942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:bb:a0:c6:7f:88:6a:b8:e4:02:50:0a:9c:
a9:5e:d0:7d:3f:ad:f3:43:11:8c:d5:cd:eb:5f:6f:
89:ef:a0:05:ad:6b:54:cd:f7:cd:e1:97:9b:da:87:
7c:7f:72:90:c7:69:57:35:ce:07:23:33:fb:d5:08:
19:b2:3e:3b:9f:93:f8:82:ef:05:ed:c9:55:4e:60:
23:03:51:97:fa:f9:3b:84:c1:a5:0c:7a:8e:35:6a:
2a:fa:d5:1a:d4:13:02:6d:be:53:04:8c:ae:11:33:
50:71:34:2b:00:12:a9:e1:a9:b5:1e:4e:a6:7e:5c:
81:f2:94:1a:c7:fc:d0:7e:58:47:1e:02:02:ff:80:
f7:37:af:ca:69:cc:2c:dd:b6:8d:59:49:26:26:e0:
f1:1b:b7:fc:75:d4:ec:b1:ac:a2:a6:c1:a1:77:e3:
01:61:9f:1a:e0:aa:79:d9:94:fc:ae:74:73:0d:4b:
5c:d5:56:3a:07:5e:8a:72:38:d5:db:dc:6e:62:ab:
80:b8:55:3a:ae:e1:03:9d:29:c8:53:2d:3f:19:08:
84:73:ff:9e:bf:46:89:97:a0:fd:dd:4f:33:d7:d4:
03:73:f9:4f:a2:b6:5a:ee:81:4f:c5:51:40:22:ea:
cf:e6:dd:93:95:f5:62:d2:71:53:f1:29:38:2e:d7:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:52:AB:16:92:8A:EB:81:C4:89:64:C7:94:99:A1:3F:ED:99:42
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:d8:7e:ce:6d:04:60:28:6c:90:5e:59:50:29:62:12:76:
09:bf:78:4e:ee:f7:d6:c4:37:c8:da:5f:aa:11:a2:8d:d1:63:
88:fe:20:bc:b0:8b:84:9a:f3:98:0e:b3:0a:9e:e9:3f:f6:ba:
39:85:7b:cd:c7:00:f8:82:78:29:14:8b:72:22:a0:6a:d5:2e:
e5:4d:53:c2:53:30:36:54:87:2d:97:c1:fd:d9:28:23:5d:8b:
19:73:dc:5c:ea:5d:fe:58:ac:37:43:f1:2a:47:89:79:c4:50:
25:3a:40:c1:84:00:0c:91:a8:19:c6:cc:98:12:5a:5c:ed:2e:
ba:3d:c2:a8:ca:37:45:42:35:47:e0:3e:56:ab:27:37:41:af:
23:63:0a:28:25:18:ab:f0:ba:87:55:76:ee:df:89:fb:01:89:
d5:50:a9:45:96:f1:55:ac:9c:39:24:1b:2d:18:12:11:85:92:
ca:d6:98:ee:ea:aa:ad:0b:81:7d:11:5b:9e:9b:a7:5f:45:2a:
57:71:0a:fd:2a:88:4a:66:7d:61:7b:ec:44:aa:4f:d1:71:44:
2f:95:fc:5f:45:70:f5:80:f7:45:5a:d9:ac:32:a9:41:74:16:
3d:f8:07:d6:22:39:06:ce:02:7f:ad:ea:0f:fc:93:64:16:e7:
68:0a:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:10:54 2025 by rpki-client