
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: yxvwJbTwXTfn9jypizWWcbGeWz+/1ZyRXAbKcXIDdlw=
Subject key identifier: A9:79:19:83:63:8D:74:15:27:BD:6F:E5:36:17:B7:5C:BE:12:E3:16
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 0196C4CC382A9A725E0A905FBAE23D580FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1540
Signing time: Mon 12 May 2025 14:00:40 +0000
Manifest this update: Mon 12 May 2025 14:00:40 +0000
Manifest next update: Tue 13 May 2025 14:00:40 +0000
Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: nV6/HOa1fcpXVMR/kLO2tNGXhpD7zzpZHCRPaRI13Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:38:2a:9a:72:5e:0a:90:5f:ba:e2:3d:58:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: May 12 14:00:40 2025 GMT
Not After : May 13 14:00:40 2025 GMT
Subject: CN=a9791983638d741527bd6fe53617b75cbe12e316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:9c:0f:79:df:f8:d7:b6:ac:af:2c:a0:f8:
fa:e9:55:96:d8:d8:ec:65:4b:9b:d5:71:c1:66:4e:
fd:fc:47:d8:3f:9e:a3:e2:b0:13:e7:05:5e:f1:b2:
2e:d0:cc:8b:87:14:21:c2:d4:65:84:e3:bd:cf:39:
71:7c:f0:57:e7:e8:88:83:40:9b:4c:c1:49:6b:8e:
7f:e5:58:f9:56:90:1f:c3:26:8b:cb:2a:ca:8a:a4:
e1:d2:e9:76:e3:24:04:02:9c:6b:35:7e:80:0a:71:
34:5c:06:a8:88:a3:f4:d1:f4:72:c3:63:36:82:a3:
86:b2:05:ad:dd:c2:48:68:47:ca:2f:cd:61:c1:9a:
8f:4d:0d:37:a4:f1:60:45:a2:2b:84:17:ba:20:0b:
cc:24:88:dc:ca:2b:c2:db:c2:ca:75:f6:d5:f5:7e:
e2:1f:33:1c:d5:47:c3:8c:93:be:77:b9:0d:66:7a:
38:b7:20:5b:b6:b1:f0:d8:a0:f5:4b:83:df:be:09:
86:79:a4:c9:a5:07:f0:e7:67:99:f9:2d:dc:5f:32:
56:f8:a1:59:8c:7b:7c:3e:d2:9f:6f:ea:14:fc:cc:
fc:da:f0:a8:46:ff:74:f8:e1:3a:1f:82:2d:ac:40:
f0:76:90:e7:04:14:6b:92:d1:16:d6:55:59:9b:a2:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:19:83:63:8D:74:15:27:BD:6F:E5:36:17:B7:5C:BE:12:E3:16
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:cc:ee:d7:95:3a:47:57:e9:40:20:39:48:dd:e9:a2:aa:
22:61:6e:ae:fb:b3:40:45:df:23:82:28:0e:d6:d6:77:f5:3a:
4f:24:29:45:1b:af:fd:9f:b3:f6:1a:ca:fd:77:28:84:60:b2:
ac:e0:2e:91:43:4a:30:23:49:cf:1e:82:d8:0b:17:45:f5:27:
e4:9b:3d:6e:f5:58:3e:fd:b9:db:0a:24:b3:28:fb:8b:e8:12:
69:5c:9b:f2:df:2d:a2:d6:bd:61:1a:7b:9c:70:1a:04:08:df:
46:d7:d3:db:80:92:ad:fe:f2:04:f2:83:6e:ee:2e:2d:6a:9b:
33:6f:5c:bb:42:8f:02:02:5e:be:5f:b4:ca:1c:f5:75:67:8c:
bb:75:7c:dd:26:ea:7b:08:0e:ca:3a:a6:82:dd:6f:48:f2:dd:
5c:6a:b7:43:59:25:89:7c:f7:59:4b:00:5b:91:8b:35:37:6a:
0e:e3:e5:76:6e:e1:b1:ea:41:91:46:82:42:09:73:ed:f8:3c:
28:68:cc:52:1c:ae:76:fb:6c:4b:a8:c6:05:5e:2e:02:01:6a:
ca:0d:51:a0:2a:9d:7d:c3:3b:88:26:c6:fa:0c:dd:0d:2a:64:
a0:07:4f:00:8c:99:be:fd:2e:28:36:62:66:5c:0f:e4:c8:9e:
14:fa:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:26 2025 by rpki-client