Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File: Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier: Jgs0MJMYlzIUjzTpn+mhy4UDq/56szvqP+Q5VTtavxY=
Subject key identifier: 71:EB:D3:62:39:3C:A1:D9:BB:80:61:C0:E1:EA:E9:9E:6A:8F:FB:98
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 0196C2027523C5617BF5546265B172CC1B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 01:01:02 +0000
Manifest this update: Mon 12 May 2025 01:01:02 +0000
Manifest next update: Tue 13 May 2025 01:01:02 +0000
Files and hashes: 1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: UekP+0V97YeQ/ZLashY29jeEPgWe3ASDs4LnJfoOCcc=)
6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:75:23:c5:61:7b:f5:54:62:65:b1:72:cc:1b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: May 12 01:01:02 2025 GMT
Not After : May 13 01:01:02 2025 GMT
Subject: CN=71ebd362393ca1d9bb8061c0e1eae99e6a8ffb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:27:c3:37:05:31:78:4f:1e:ae:a1:d7:4f:
91:79:bd:c8:9c:63:5a:96:84:cc:93:84:e4:3b:55:
ef:d5:b7:78:c8:a3:fe:8b:2b:60:62:17:04:dc:8f:
a2:32:47:9c:2a:df:11:26:76:57:8f:84:86:ac:49:
fe:59:1a:ec:a7:00:d4:92:96:90:e2:35:5b:fa:f2:
02:c3:52:43:57:66:8b:d7:ae:78:03:c7:7e:c5:a0:
79:33:29:fd:48:f9:7d:96:ee:4e:e4:58:22:de:e8:
e8:c0:bc:83:41:7f:ed:65:ed:e8:4b:04:48:1e:75:
b5:d7:8b:d5:0f:65:13:61:07:9b:7a:ce:ad:8d:d4:
ea:95:2c:26:5d:14:94:3e:d9:ab:4a:f6:83:4d:13:
e1:80:20:9d:cd:7b:60:e9:3d:8f:0f:6c:ec:69:d0:
3e:e6:55:8b:b9:ef:25:f8:77:26:e0:39:5c:46:76:
f5:44:da:c3:b9:5d:14:38:ce:09:27:de:b1:59:d7:
1d:b7:a8:bc:01:94:af:c6:b3:ad:49:1f:66:4f:ec:
c2:15:38:bd:6c:b1:64:32:fc:7a:54:47:48:37:11:
1c:a7:ca:a4:b9:3e:93:5a:5c:97:6f:8b:89:20:4f:
33:72:f1:58:d4:8d:24:40:eb:47:ce:f0:ee:d2:b3:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:D3:62:39:3C:A1:D9:BB:80:61:C0:E1:EA:E9:9E:6A:8F:FB:98
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4a:52:b1:78:af:87:dd:fa:6f:25:52:5d:0e:fc:62:66:00:
e5:ed:d7:44:63:51:66:19:71:d0:7f:b7:b4:df:f7:4d:d3:b7:
77:97:03:a2:f3:18:15:cb:b5:c6:d1:9f:c5:8b:60:0f:8d:71:
42:ed:e9:10:4d:6a:51:2f:eb:e6:b3:92:77:2c:0f:17:c7:dc:
1b:f7:ec:4b:12:7a:6b:ab:6a:53:ef:35:aa:d4:b3:e7:c8:2e:
38:e3:e0:0c:57:9c:11:3a:63:59:5c:64:14:de:ef:b8:98:30:
8e:c8:e9:c0:77:9a:a0:16:e7:46:74:42:ac:d1:47:01:e0:6a:
a9:a5:1f:fc:35:a7:39:d0:25:9d:99:53:5d:8c:b3:f0:a7:dd:
3d:cc:07:84:8d:32:ca:72:51:6f:bd:be:b1:a6:e7:9d:1e:96:
c2:c3:ea:48:32:fb:6f:bf:15:d5:c9:44:f2:06:28:41:d2:ac:
a1:e1:de:99:4b:f8:17:81:3b:58:88:86:82:f3:4e:fb:84:cc:
0b:43:e7:7e:07:91:fe:74:58:a5:cb:4c:bb:14:f1:d8:03:8a:
f4:3e:97:e2:44:0e:e0:ce:ad:56:ff:59:fa:b4:12:08:7a:48:
06:a6:d9:9e:8f:13:91:d3:bc:f7:8b:6b:d2:f6:ad:8c:e0:f3:
47:da:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:53 2025 by rpki-client