
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: GQvezGfW5DhWqWe9EGBYDF+J7fpC9IRgfbd277ZimdY=
Subject key identifier: EE:8E:E1:E2:06:A3:CD:C3:A2:77:20:1D:07:7E:73:D6:1A:F5:4D:C4
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 0196C013EC78DF22853486D0843A81A72DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 16:00:53 +0000
Manifest this update: Sun 11 May 2025 16:00:53 +0000
Manifest next update: Mon 12 May 2025 16:00:53 +0000
Files and hashes: 1: MKwXFQdhtuQYKRcVzorzsVxuXIw.roa (hash: GZ2oDGi2xK0WgPjyKpmqLx5efaJizRvGxJTHG502Kqs=)
2: QHGBtoYy-yUNGT2R6UBemRAxD5s.roa (hash: 3YJpkLEFxs1XCvKlcy0WQw5fAkmH7oTliDxTaEnJgz0=)
3: hwXn82QbEbf-SULTcBIDnH5UIZU.roa (hash: 08kQDvBZvCyHX595Crm1xVl4v8KtIgUsNRfQUr9hTAQ=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: zDMu96092MpKzjWVwkmfOcoM1Rr7by+aWaY+6nxsuc0=)
5: soZqy3HUC6xiStBTbgTdR73Vw2c.roa (hash: 0/K+cWWK8CwD0JZ/wMwAQQYw/af8O4bhKs39qQrbVB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:ec:78:df:22:85:34:86:d0:84:3a:81:a7:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: May 11 16:00:53 2025 GMT
Not After : May 12 16:00:53 2025 GMT
Subject: CN=ee8ee1e206a3cdc3a277201d077e73d61af54dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:a7:15:2b:4a:32:36:f1:c3:e6:ee:91:0b:
b6:5e:4b:81:f0:79:9e:3a:a0:ff:1c:e4:48:1f:f6:
5e:c1:7b:2f:fe:ce:07:ca:d3:dd:a6:a8:8f:7e:ab:
67:b5:b7:f6:ff:53:86:a6:ae:e4:e6:e5:53:bd:a0:
66:be:1a:bd:38:dd:5d:53:bb:60:61:fa:8b:77:0d:
0c:c6:98:0d:a8:d2:88:2b:33:2a:5c:0d:c1:c0:86:
aa:9a:e1:9c:e3:55:98:eb:99:fe:94:f2:1b:91:4b:
c1:f6:ba:9c:f9:15:02:a9:6e:8e:ab:10:20:be:40:
54:5c:27:ff:d1:f7:7b:23:f4:0f:f7:7b:15:d0:96:
c2:10:4c:c3:d5:0e:37:95:3d:b5:1b:0f:ec:71:a1:
cb:e6:23:71:b3:67:05:79:1d:30:88:38:10:bf:ce:
c1:6a:f4:d5:71:32:6c:42:9e:42:d9:d8:11:dc:91:
00:0d:e7:e4:50:4a:9c:6c:51:db:f3:70:af:d2:b6:
1f:22:c1:cc:7d:ee:01:e4:91:dc:60:a4:e2:79:86:
66:a5:3b:32:ee:97:66:18:84:0a:68:98:61:a8:5d:
08:a7:89:c5:01:6f:67:4a:86:5a:66:66:22:d5:44:
e2:af:09:94:01:13:5b:8d:7f:39:0f:bf:70:1b:e7:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:E1:E2:06:A3:CD:C3:A2:77:20:1D:07:7E:73:D6:1A:F5:4D:C4
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:0c:d3:1a:68:88:1e:59:35:ba:28:e6:79:9c:8d:31:ca:
58:bc:10:b7:7a:45:37:6c:fb:29:98:46:86:73:af:06:ae:ae:
0c:5f:8b:b7:43:6b:52:28:93:3a:ec:66:f2:78:e7:1f:df:ff:
72:01:ca:27:e5:68:67:1b:99:4e:2b:a7:ae:ee:24:ce:5c:7c:
d0:11:79:e0:8e:14:dd:76:e3:d3:bf:9e:3a:ee:5c:18:40:51:
c9:84:29:cb:92:1d:df:c8:58:5b:a1:c9:4b:8f:8d:6e:97:57:
4d:67:d9:2a:02:1a:54:f1:0b:7c:19:a9:40:03:0f:a4:11:af:
fd:ec:ca:b2:ce:ea:36:d0:4d:e5:c5:52:10:7e:84:36:64:cb:
71:2e:f5:14:43:d0:ca:90:fa:49:bc:cf:59:94:b8:77:f9:29:
b9:9d:3b:35:c5:6f:88:c5:11:de:87:46:9f:fc:07:c1:87:36:
1a:1e:48:ef:ba:e1:1c:b9:51:31:1b:51:65:fd:4f:0d:e5:9e:
38:e0:a7:ca:8f:46:8d:06:9b:4a:02:ed:0d:29:71:cb:41:a2:
34:d3:be:0d:09:c9:f0:2e:d4:a0:37:10:7b:be:5c:47:61:84:
a1:3a:cb:2f:6f:32:98:a7:df:c3:de:16:63:9d:6f:3d:c2:7b:
99:7c:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:04 2025 by rpki-client