Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: 02LXTERYnyEP7jonKB9yCh7DMTC2eV6N9XE03ACG3Xo=
Subject key identifier: 46:01:42:19:06:3D:DA:CC:0C:E2:33:8C:7D:7D:34:CC:5C:6D:AA:1B
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 0196C270036CD861826986FD2B693F71B965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 03:00:42 +0000
Manifest this update: Mon 12 May 2025 03:00:42 +0000
Manifest next update: Tue 13 May 2025 03:00:42 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: q/0aRXJHRVGOsbLKrZN40DZ6PWrm/EafktRcfkrwLno=)
2: v9geoE7KmWCRnCztGaTkN5bSNF0.roa (hash: yJ1Hvyh5t82gNQ9PRDa/lCyqTlzjssbfVD5EEeI11lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:03:6c:d8:61:82:69:86:fd:2b:69:3f:71:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: May 12 03:00:42 2025 GMT
Not After : May 13 03:00:42 2025 GMT
Subject: CN=46014219063ddacc0ce2338c7d7d34cc5c6daa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:10:cd:3d:af:b5:a6:37:22:27:2e:79:93:
4a:29:b5:8e:e8:84:57:09:00:49:e8:50:3b:26:d5:
a7:78:88:18:5c:4e:8b:c6:e9:f4:84:cf:2a:fb:7c:
67:18:b0:07:15:e5:40:82:70:ac:d7:b6:bc:8d:78:
57:ae:be:d4:3a:92:f4:f0:0d:b8:e7:04:e4:26:b4:
3f:59:b5:8e:c4:f3:fc:79:f6:d8:0a:24:81:e5:90:
04:43:13:37:5f:d2:44:80:b4:77:92:fb:ea:ec:db:
71:70:f1:55:dc:a2:b1:af:c4:b9:6b:a2:47:79:ee:
7d:37:21:48:55:18:cd:b1:be:94:fc:ac:4e:d1:ff:
7d:f6:63:0b:bd:40:67:b1:93:ef:cc:ee:51:bb:71:
48:e7:e6:aa:44:06:51:94:1a:c4:34:0c:a0:0e:02:
a2:4b:f7:7b:89:61:09:cf:f4:c3:dd:b7:1c:5a:6d:
5a:68:6a:d2:6e:11:d7:42:17:42:d2:6e:8d:6e:9f:
dc:1a:dc:51:a0:7d:9e:e2:a2:d7:9e:3b:4e:2e:4d:
9a:53:42:54:26:5d:8c:81:24:53:c5:d6:32:77:8f:
88:c3:41:f3:86:a2:d5:a7:63:24:51:fe:a8:05:51:
2e:ca:c7:69:b7:b0:d7:d6:5e:8c:65:52:ba:14:af:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:42:19:06:3D:DA:CC:0C:E2:33:8C:7D:7D:34:CC:5C:6D:AA:1B
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:43:6c:06:ea:c6:43:92:c7:02:4e:96:29:fd:0e:1a:71:eb:
ad:8c:01:5c:98:4c:b0:c9:e9:36:e5:b9:55:9b:21:f5:fb:e6:
94:1f:74:98:f0:c1:eb:c6:05:f3:da:a8:e2:c9:3c:67:71:e2:
3d:81:a7:a6:73:7a:6e:80:12:ab:e7:99:ac:00:a3:4f:0a:41:
3e:5b:53:85:cf:99:75:24:c3:4d:f0:f2:20:83:2f:f7:2e:6f:
12:34:a7:de:5c:b4:eb:3e:0b:da:ff:7b:03:bb:32:bc:13:58:
96:ae:f9:3c:a5:ea:6e:b5:66:b3:96:fa:d0:04:31:27:d1:91:
78:61:de:0c:b9:d2:de:b0:3f:06:77:ac:50:a6:57:7e:da:d9:
15:31:75:65:0a:41:8a:0a:31:af:4d:27:88:82:cb:e2:44:5a:
5b:3e:fc:4b:42:43:62:e0:d4:e5:6d:bb:0b:7f:92:86:b7:a2:
cd:d3:32:96:c1:14:e5:ff:11:48:d6:0d:68:6b:b7:7b:49:7d:
05:50:e3:90:f3:44:ff:03:bd:ac:79:80:57:70:71:03:6d:46:
49:57:d1:0b:77:f2:5f:ed:87:d7:3e:76:77:93:98:c0:34:a4:
8b:96:17:fc:83:1a:e7:87:a6:21:d9:a6:dc:86:7a:e7:de:cb:
72:cb:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:08:14 2025 by rpki-client