Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: /PX/ijBnoIHOMMlwhdur93rh4nAb65QAIYnvyYZ5+ss=
Subject key identifier: 0E:4A:60:0E:2E:F6:82:0D:96:5F:E5:91:C3:FE:36:E5:B6:6F:81:17
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0196AE44AD500EB90A6171F9B30D9C5F6BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 05:00:58 +0000
Manifest this update: Thu 08 May 2025 05:00:58 +0000
Manifest next update: Fri 09 May 2025 05:00:58 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: eT3dZqwFvS4z463lzF+qqYff+nSZPe5ck2/YQppfIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:ad:50:0e:b9:0a:61:71:f9:b3:0d:9c:5f:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: May 8 05:00:58 2025 GMT
Not After : May 9 05:00:58 2025 GMT
Subject: CN=0e4a600e2ef6820d965fe591c3fe36e5b66f8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:99:63:22:cb:4f:bd:69:c9:2b:d4:8b:ed:
97:64:84:ec:d5:04:d3:70:5a:0b:73:8d:d1:79:14:
54:78:1a:ae:09:91:c8:1d:8d:b0:fc:1a:bb:bb:31:
6d:bf:ea:39:b7:4c:bc:5c:3f:be:e1:4b:5f:66:f4:
c3:fb:17:7a:35:55:0b:3d:0c:21:8c:09:1f:0c:be:
85:79:76:5b:02:9e:e0:a1:c7:cb:20:85:ff:69:7f:
ad:2a:50:79:f9:2e:ae:a1:e7:bc:b5:d1:90:ea:84:
11:d3:ad:3b:f2:d6:2c:6f:9e:8a:f3:02:72:a7:4a:
c7:81:ad:ce:28:70:00:ff:25:d3:3f:cc:bf:63:72:
0e:f8:82:45:d7:75:5d:84:31:a0:d2:00:d7:b4:0e:
52:99:4c:60:83:7c:c2:97:a1:65:0a:46:94:37:7a:
07:bd:96:2f:dd:c1:bb:b5:07:8f:23:99:bc:a7:30:
92:c0:c2:65:79:b8:6e:75:16:69:0a:f7:51:0c:6c:
4b:e7:55:e0:95:38:df:a7:b8:1c:a1:09:b5:e7:71:
12:3d:4e:30:09:cf:9d:46:9a:ee:48:05:43:81:94:
29:da:ae:80:0d:41:fd:16:94:22:22:f1:47:0c:a6:
25:65:ae:00:0f:d8:70:aa:7f:23:ec:7d:e5:9a:23:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:60:0E:2E:F6:82:0D:96:5F:E5:91:C3:FE:36:E5:B6:6F:81:17
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:84:f9:fb:9c:90:a4:c5:f1:91:d3:36:8c:2e:00:70:14:
20:02:72:b1:03:3d:db:70:96:b0:91:2d:47:d1:c4:b0:52:52:
3b:01:66:68:ea:ff:82:04:01:8b:05:35:7a:d4:ae:8b:ca:fd:
3e:7e:46:17:34:aa:15:1d:44:88:33:7f:e9:9d:c3:22:dd:6b:
36:a6:74:10:1e:a5:b2:9e:5a:8c:4e:99:95:5d:ed:48:c3:c4:
b2:b5:22:41:cd:f2:dd:0a:20:e0:61:d6:52:29:ca:be:69:50:
2c:1d:28:25:be:74:d2:0e:03:93:4c:d8:8a:b3:a7:25:48:2f:
91:d8:bc:d2:d6:86:0b:46:e7:e4:0c:18:25:4e:17:35:f2:1c:
37:f9:59:f2:70:8c:63:6b:f3:c1:52:b7:f1:d6:b8:cc:5c:0c:
0f:9c:cb:99:43:57:d1:e3:99:68:6d:87:87:99:c9:fb:38:40:
1e:8f:0f:e9:cd:dc:ff:71:7c:85:8e:c0:88:db:9d:02:66:cb:
c0:3c:51:0d:08:c5:b1:cf:85:ee:7b:54:26:dd:65:f9:13:67:
1e:03:c8:3e:80:15:73:c5:02:34:6a:b3:da:f4:58:31:e8:35:
c6:63:fd:dd:cc:8d:6c:dc:35:46:6d:b0:d4:83:40:ec:a9:44:
42:69:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:44:27 2025 by rpki-client