Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: 65Sb9AFI32THL2gacFZ8emwHpP8P/cg4oGP9MN1kjgc=
Subject key identifier: BB:BD:FB:E3:AA:68:C0:06:18:9B:33:A8:FA:65:B8:5A:4F:8D:24:0F
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 01969FE40EFCB0079420EAA2A8D3C7759EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 1508
Signing time: Mon 05 May 2025 10:00:45 +0000
Manifest this update: Mon 05 May 2025 10:00:45 +0000
Manifest next update: Tue 06 May 2025 10:00:45 +0000
Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: fY7RTi/PQKuKmAr5YNZKFA/lm6d7Qssc8QkxC27pMpc=)
2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:0e:fc:b0:07:94:20:ea:a2:a8:d3:c7:75:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: May 5 10:00:45 2025 GMT
Not After : May 6 10:00:45 2025 GMT
Subject: CN=bbbdfbe3aa68c006189b33a8fa65b85a4f8d240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:4d:fb:c7:ee:3d:b5:8d:36:4b:1f:87:79:
3c:a3:82:ad:38:24:29:5b:4a:10:a0:23:49:bf:2c:
3a:e5:a0:4d:dd:fd:40:b6:8d:52:e9:22:2d:70:7f:
68:47:e1:45:b6:d2:ca:5e:25:86:3a:62:a9:90:4b:
3d:64:ea:60:d5:b4:15:28:70:aa:fc:7a:5b:d3:c1:
de:75:b7:46:ba:c6:7a:08:5d:d9:17:8c:c6:ff:ee:
34:39:cd:14:a8:1e:01:ff:26:85:01:16:9b:e6:82:
f7:2b:76:dd:f5:2a:ed:11:48:be:14:d3:e3:0a:e9:
4d:e7:a9:01:46:8c:ca:20:c4:09:cf:88:57:49:ed:
8f:fd:90:e4:a6:98:a2:76:21:44:a5:81:1a:6a:c2:
c6:4f:4d:15:f4:bc:4a:8f:8b:54:06:5c:84:a0:c8:
5e:b1:02:b5:5c:94:4c:24:af:8b:43:ba:03:a3:0a:
8a:94:68:11:35:94:ff:f4:f3:50:63:fb:e5:87:26:
b7:28:3d:dc:ef:9a:ea:fb:46:bf:90:77:79:19:87:
71:33:3c:91:84:fe:a2:28:51:2d:ca:6b:ac:69:7c:
7d:64:05:7e:0c:f0:43:74:d7:29:b2:f2:02:38:e3:
99:3e:48:d3:48:e4:a4:51:86:23:26:1b:ae:ac:26:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:FB:E3:AA:68:C0:06:18:9B:33:A8:FA:65:B8:5A:4F:8D:24:0F
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:18:80:a8:a3:01:76:65:ed:f1:d0:cb:d6:38:6d:9a:89:
3d:b9:9a:09:ce:60:a5:19:7c:ed:2a:ae:91:15:fb:05:ce:63:
ef:00:dd:d1:91:80:bb:aa:20:84:34:59:86:26:6c:c8:14:20:
28:87:90:3b:35:37:4d:74:99:19:7f:6c:4c:35:51:a8:5b:84:
0f:31:a3:0d:8a:cf:b1:8f:25:fd:98:15:2c:b2:df:62:a2:6a:
aa:66:c0:57:c1:11:2b:53:47:90:33:c5:70:76:72:20:1c:54:
17:e2:44:da:be:5a:30:51:9d:7a:b8:29:51:cc:a7:8a:94:5b:
0f:75:10:3c:78:f3:ab:1d:7b:ae:21:f0:d2:63:e4:db:ea:16:
8b:8e:72:56:e1:a5:bf:5e:ed:c5:bd:90:4f:05:96:cd:0c:1c:
ac:f6:f8:97:b7:52:d6:df:47:a2:bb:bc:bb:af:83:55:5d:86:
b3:82:e8:c4:d9:7a:02:59:7e:79:02:fc:a4:0d:44:3f:4e:fa:
2b:34:b0:28:99:09:cf:71:dc:35:58:01:de:7c:6f:65:6e:c1:
18:e4:db:d4:55:99:93:0d:87:b6:20:e0:d4:b3:e4:3f:60:00:
10:2e:4d:ca:30:19:43:3e:2a:e3:f4:f9:dc:87:93:1c:71:45:
58:a1:cd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:08:06 2025 by rpki-client