Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: hLwJ3TZTzHxoy3xKzw28lGP0jHOWq+KpfWy8QqZGP5A=
Subject key identifier: D3:7B:0D:A2:FD:B4:CC:69:4B:E2:C7:0A:B0:CB:6D:BF:D9:A3:47:76
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0196B7B62BA17C0668A0E4AE898BDB5E267E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0F2C
Signing time: Sat 10 May 2025 01:01:31 +0000
Manifest this update: Sat 10 May 2025 01:01:31 +0000
Manifest next update: Sun 11 May 2025 01:01:31 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: czBky6BsHO+cnF+9EsO/r/qg6tnAmgN+sKK1SuZKb2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:2b:a1:7c:06:68:a0:e4:ae:89:8b:db:5e:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: May 10 01:01:31 2025 GMT
Not After : May 11 01:01:31 2025 GMT
Subject: CN=d37b0da2fdb4cc694be2c70ab0cb6dbfd9a34776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:4f:6e:5a:a6:39:d6:79:69:96:30:c2:5e:
f0:31:94:12:26:6b:f6:e2:79:0f:f7:2f:90:df:af:
e3:a5:2b:7d:59:ad:f0:95:02:23:a1:03:ec:0f:f3:
db:51:c0:ef:dd:93:0d:ab:1a:e3:36:98:ef:fb:8b:
64:f5:81:17:bc:29:a5:9e:03:6b:7f:f5:53:2b:b1:
ea:6f:ff:7b:22:1f:bf:06:e8:5d:b6:65:5e:68:43:
83:81:9d:f6:4a:24:9e:49:6d:51:4d:5a:a6:db:4f:
57:a3:68:a3:2e:ac:68:2e:bc:0b:21:dd:f6:e6:56:
7c:d4:73:6b:6d:b5:7a:de:d6:ba:c9:fe:bd:b8:73:
f4:38:83:c2:b8:e1:05:c6:e0:4a:f4:69:d9:bf:f2:
54:c3:32:1e:8f:29:55:a7:a7:5e:8f:7e:05:31:59:
d7:93:7a:4d:dc:76:2a:de:90:d1:0a:90:ca:5a:af:
33:58:94:bd:b7:c8:e4:22:2a:7f:fe:42:15:86:7e:
34:37:f7:d8:fc:73:9b:f3:c7:e5:1c:10:e8:06:94:
b8:1c:9b:cf:4b:f3:60:b6:19:ee:dc:31:08:3a:53:
32:d4:63:43:a8:06:b1:71:c0:b0:27:d6:fa:46:e9:
0e:ee:d1:a1:65:e0:2d:3e:32:41:34:d1:a2:0d:a5:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:0D:A2:FD:B4:CC:69:4B:E2:C7:0A:B0:CB:6D:BF:D9:A3:47:76
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:55:3b:cc:7b:ce:fb:03:c3:e7:52:6b:b9:12:e8:07:ce:ee:
65:af:3f:14:c5:6c:73:11:6f:1a:b4:18:17:8d:ca:9c:30:4a:
88:c7:f9:6a:e1:4d:ac:9a:37:6a:77:79:26:d4:12:af:f5:5c:
ca:64:ae:9f:72:bb:37:b4:8f:56:1d:57:85:bf:26:17:f5:e6:
90:7e:c5:f2:42:ae:e1:9f:ac:60:c2:56:ce:f9:43:5e:a2:d2:
4c:16:73:12:2b:5e:8f:37:b6:b3:b8:95:52:91:64:6e:44:38:
00:f1:62:fd:4f:3d:8c:e4:04:b0:19:07:a7:c4:cf:e8:77:8d:
da:a8:a1:68:75:7b:84:9e:b6:38:23:33:13:53:ed:78:52:cb:
2b:b6:58:e2:e0:0e:03:9d:cb:6d:19:12:c4:60:cd:a9:63:d3:
6c:2b:99:1f:8b:3c:f6:ff:88:5d:4e:25:44:1a:a0:fc:c5:9c:
d1:06:6f:b9:4e:f5:81:8f:cb:79:a5:ac:e3:9b:ab:7b:41:81:
3f:64:e7:ed:04:f2:19:d5:38:39:bf:41:27:07:b0:14:e3:ce:
5f:83:1c:ea:51:e6:ab:6b:08:5b:58:9b:a5:80:be:d2:af:8b:
eb:5c:1f:bd:cc:97:31:26:f5:0f:f3:2d:bf:78:8a:bc:dd:ed:
1f:a1:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:19:06 2025 by rpki-client