Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: 0CVG5aZtPJZM5C4WQbPOk8FjUQ2yM67z7lmuWuRnUSw=
Subject key identifier: E3:F2:9C:6E:0A:EA:8F:C1:DD:1C:FC:79:7B:4B:D4:CC:DD:D6:71:D6
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0196BA48915987C535699A4A70A20EC4E33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 13:00:40 +0000
Manifest this update: Sat 10 May 2025 13:00:40 +0000
Manifest next update: Sun 11 May 2025 13:00:40 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: 3eLOar0VWvLzJE9mr2RVO3RY2ppH25G0RRI3MnZVvTI=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:91:59:87:c5:35:69:9a:4a:70:a2:0e:c4:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: May 10 13:00:40 2025 GMT
Not After : May 11 13:00:40 2025 GMT
Subject: CN=e3f29c6e0aea8fc1dd1cfc797b4bd4ccddd671d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:d3:8e:34:05:c9:00:58:5b:c5:03:17:65:
2b:8d:25:22:15:c5:84:3f:1e:fc:09:ef:31:20:c7:
7a:64:2d:49:c0:1c:4e:f2:82:8d:98:32:56:6f:12:
18:07:d6:52:01:b4:84:22:99:f3:6e:2b:d9:84:72:
95:e4:71:24:bf:ea:2b:50:5e:c3:65:12:01:a9:53:
b0:74:93:27:68:ff:89:cb:e1:92:2f:58:c5:c9:2e:
3b:90:38:9e:09:ea:2b:b5:58:9b:0b:ee:49:87:46:
16:8d:28:21:f2:fe:f2:dc:6f:1b:77:7c:01:21:98:
c6:e9:b2:a0:0f:5e:0f:47:10:67:97:97:fc:20:0f:
db:44:11:d9:9e:40:1a:19:d7:32:21:46:39:61:42:
c5:5e:45:a6:ac:46:8f:1d:f3:31:1a:92:2b:e6:b5:
cf:6b:94:22:8d:1b:4d:ed:09:8f:2f:ca:53:5d:04:
93:15:c9:90:94:88:95:c5:6a:f3:8a:99:f9:c3:db:
73:c3:a8:4d:e1:92:97:22:6b:3a:03:93:cc:0e:0f:
ee:6a:35:ec:65:0e:a1:c2:36:80:f5:58:c7:e6:f8:
47:77:53:ff:d3:00:7b:44:9c:a1:b2:cd:f6:32:1b:
2b:5e:20:1e:59:21:be:26:3f:72:f7:92:b9:7e:bc:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:9C:6E:0A:EA:8F:C1:DD:1C:FC:79:7B:4B:D4:CC:DD:D6:71:D6
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f1:1d:ea:2c:b4:d1:84:33:42:b7:2c:0e:28:bb:44:11:76:
e6:a2:c1:ed:0d:fd:8c:99:1a:91:70:80:1a:03:8e:34:fc:0d:
62:6b:30:db:ec:92:c2:bb:77:9a:02:5e:a7:13:49:a7:3a:18:
40:06:ad:19:c3:58:27:cd:c0:b8:56:bb:b3:9e:d4:1c:34:74:
ad:d9:77:f3:4f:b9:38:9e:84:4f:52:1e:6c:c3:8c:8a:f8:e0:
a6:2f:fa:25:d6:a9:b6:d1:0d:e9:e2:bb:75:6e:20:2a:ff:1e:
d3:f0:ad:fc:8a:11:18:42:39:a2:9c:dd:3f:8f:bc:d2:16:55:
eb:31:9d:05:8a:92:0f:03:17:c2:90:c6:04:ba:19:a8:96:05:
de:78:88:cb:88:8f:50:c3:f5:d2:9d:f6:c5:dd:06:c1:2c:92:
11:31:6e:c7:45:25:a1:a9:c7:3d:8c:cf:2f:1d:3f:1d:e9:df:
5b:dc:2d:bd:a1:8e:16:33:eb:ac:f4:06:ae:42:f6:b3:75:3b:
05:c1:f8:76:ce:9a:dd:50:72:17:4a:e0:bd:e6:21:a9:5b:81:
0a:7b:9c:b4:e0:f6:ca:4d:64:31:ef:8e:da:ea:59:a8:ac:36:
d1:ce:2b:3e:3b:9e:a6:87:09:ff:93:6b:f5:37:0c:6a:dc:20:
bd:93:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:08:09 2025 by rpki-client