Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: vdFHc8hHwvtFZoq8gw56345S921k2DCh9sy8ohErMpI=
Subject key identifier: BE:01:A7:17:E5:97:76:B7:90:0D:A3:8B:C7:E3:BD:9D:7B:66:9D:DB
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 0196B823CA96ED708B475DC1656CB301D61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 14C3
Signing time: Sat 10 May 2025 03:01:15 +0000
Manifest this update: Sat 10 May 2025 03:01:15 +0000
Manifest next update: Sun 11 May 2025 03:01:15 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: YLz1Up41zyb4uZqXJ/QxkmPzSXTG6GFDNvd+H8mKyJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:ca:96:ed:70:8b:47:5d:c1:65:6c:b3:01:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: May 10 03:01:15 2025 GMT
Not After : May 11 03:01:15 2025 GMT
Subject: CN=be01a717e59776b7900da38bc7e3bd9d7b669ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:7a:9f:0b:ae:dd:d4:5c:f0:88:a6:cb:26:
83:93:60:06:40:cd:51:34:63:4d:c4:4e:00:15:02:
a3:7d:fb:ba:79:fe:39:a1:39:2a:35:92:6a:ec:3c:
2b:89:52:97:bb:6b:d4:67:17:5a:1b:a2:08:53:5f:
4d:95:35:8f:7d:3d:1a:17:58:5e:f9:89:02:49:25:
b0:e3:bc:6b:21:ea:6f:c9:58:4a:b4:26:b5:d5:c2:
90:a9:bc:b1:51:17:23:c1:85:8f:92:09:4c:61:92:
cc:20:e0:ea:23:6e:d9:14:3e:b3:4b:bd:4b:aa:db:
5c:4e:7f:aa:dd:e9:ba:15:51:79:34:86:ec:4b:e2:
41:9c:4c:3e:06:11:23:f4:e6:3f:43:f1:9c:22:12:
9a:58:62:37:ae:51:e9:fc:38:70:77:c8:3d:ec:c8:
90:f2:d9:e4:38:a9:0b:84:95:4b:be:e2:2c:2a:1c:
a7:ce:7b:9e:90:0d:8a:42:02:4b:23:33:8a:96:97:
77:6d:59:ce:1f:53:b7:59:26:92:1b:96:26:18:20:
07:0c:be:33:a2:7b:d3:43:3d:85:6c:2e:5d:ea:ee:
a6:fb:05:f9:93:74:d3:aa:51:65:20:78:19:b5:cf:
d6:bb:c0:af:e3:96:39:33:f0:31:d0:e5:fb:0c:79:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:A7:17:E5:97:76:B7:90:0D:A3:8B:C7:E3:BD:9D:7B:66:9D:DB
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:2a:6e:85:6b:a7:af:80:e0:32:2f:71:07:bf:fa:b5:12:
7b:9c:36:9f:cd:85:8c:17:6e:aa:54:85:72:dd:95:7d:5e:00:
bd:c9:d2:a4:2e:b4:cd:57:84:ef:c1:8d:65:c1:78:e8:66:5e:
e8:2f:b3:16:61:8e:4d:c0:5e:a8:9a:03:89:fc:af:bc:1c:5a:
c0:34:7b:44:6f:00:c9:aa:9b:39:df:46:3e:55:01:d1:a1:ed:
79:12:76:50:52:3f:af:94:06:24:15:3e:43:a4:43:7f:50:6a:
f9:e5:a9:95:33:14:4f:f1:79:b4:b1:a6:56:4e:99:b9:6d:f1:
89:f9:88:ed:b5:3b:cc:79:0c:0e:2f:ad:cb:de:84:f3:f8:28:
e0:08:7d:f2:54:09:ee:a5:24:9d:93:4f:9e:a2:04:c7:d2:33:
39:7b:39:2a:85:37:fc:7b:9f:81:c3:87:62:b9:51:56:60:f7:
98:e0:cf:41:34:24:cc:d7:8d:d1:2f:75:ec:85:b1:75:88:f3:
03:c5:a3:77:89:5c:fd:87:1c:88:08:d1:24:ef:e9:74:68:58:
c2:c5:a1:29:1f:9a:03:f2:03:27:a2:13:9f:de:f6:2b:9b:f9:
e2:d7:d2:92:35:30:f8:35:e3:08:46:d6:7b:3e:19:9d:88:7a:
72:f3:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:21:05 2025 by rpki-client