Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: X9YMrE8tGKZVDKThzA/kcgDxrvqkoVZv1aVBeBsSYlA=
Subject key identifier: 9F:24:5A:B8:8E:EF:C5:26:B0:C1:7B:88:83:C5:C0:0D:20:5A:74:34
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0196A46539BDBB644EFF5BABEF29C17B43C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 07:00:19 +0000
Manifest this update: Tue 06 May 2025 07:00:19 +0000
Manifest next update: Wed 07 May 2025 07:00:19 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: mFth8Y4uCltRgKYC8ECgekXal1/UbbdIQ1wlUA/8gsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:39:bd:bb:64:4e:ff:5b:ab:ef:29:c1:7b:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: May 6 07:00:19 2025 GMT
Not After : May 7 07:00:19 2025 GMT
Subject: CN=9f245ab88eefc526b0c17b8883c5c00d205a7434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:bd:46:3c:18:5b:15:73:7e:a9:f5:67:b4:
2d:c7:21:b3:49:f3:38:f6:2e:1e:77:3c:d3:b1:cc:
b0:2f:9c:51:fc:8b:71:b5:03:56:42:03:76:da:76:
f4:b0:fd:8f:4a:d5:05:98:4c:5c:67:56:a4:a1:da:
95:4e:23:d6:ee:b8:87:a4:44:50:66:85:ef:f0:c8:
71:7d:78:a6:48:dc:57:b8:c7:ef:cd:76:4a:4b:09:
ef:8a:df:74:f6:62:a6:00:eb:28:1f:4c:76:e3:b0:
90:70:3d:c6:09:ef:c3:9f:f5:e4:1a:a2:2e:04:69:
ff:e3:30:11:2a:6d:7d:bf:8d:1b:8d:12:64:64:b5:
2f:f7:73:53:05:2a:55:55:b5:eb:53:56:a0:ca:8c:
3d:06:3b:93:1c:7e:43:c2:d5:dc:1c:a1:a8:22:bf:
76:dd:39:8d:ac:b4:b1:48:70:af:4c:a8:06:cc:3f:
01:21:80:6c:65:f9:43:0f:a0:9a:23:1f:f5:99:6a:
07:ef:fd:0c:fd:2d:42:bc:52:50:01:a5:3c:79:1a:
35:19:4d:c7:5b:bc:e2:de:57:af:df:71:7c:2c:52:
9f:45:d8:ec:fa:f5:7a:b5:2d:d9:d9:53:21:d0:35:
12:f5:4b:52:40:08:a4:c7:cf:7a:d9:a5:7b:8d:a1:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:5A:B8:8E:EF:C5:26:B0:C1:7B:88:83:C5:C0:0D:20:5A:74:34
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:21:5e:c6:9c:33:77:5e:12:67:49:b7:27:24:48:c2:33:
99:73:8d:41:c5:2f:e2:71:1e:48:e0:40:2f:ff:1e:24:8b:26:
12:ec:80:50:8b:ab:5e:e1:e7:41:b4:b9:07:28:72:26:ad:0f:
fd:e2:65:63:5e:e6:c5:b9:6f:80:07:2f:42:9d:54:2f:d6:d1:
da:76:09:cd:d6:36:9a:92:df:8e:48:6f:2d:cf:08:39:bd:68:
a5:a5:81:d0:db:67:01:98:2c:0e:b2:b1:c1:ba:c9:6e:b5:71:
f3:07:d2:ab:9d:25:84:e7:33:bc:84:ad:f7:9e:0c:4a:2a:81:
df:03:27:3a:c4:82:09:7d:83:b2:f3:c4:89:d3:4b:17:49:ec:
b2:4a:98:11:ab:8f:bb:2a:25:c9:40:12:d8:db:a9:8b:ec:92:
b9:59:c2:90:1d:d4:37:62:24:43:ba:db:da:c4:a4:85:6b:01:
f9:ba:e8:fa:22:0a:81:82:43:b6:e5:fd:e3:1e:2f:e6:4e:bb:
c6:28:07:0d:d0:24:c6:c1:75:18:1f:e9:dc:d8:11:6a:72:08:
a7:89:fd:7e:8c:5a:4c:08:ca:d6:5e:c9:ae:f5:30:e9:f8:01:
cd:ab:3d:25:ec:ee:fb:07:42:8f:86:88:5e:d8:0d:67:6b:e3:
32:2e:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:19:38 2025 by rpki-client