Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: +deBofNzzlslYUI96RJxCFHouO/Yhmqz0ZtTyBjj1es=
Subject key identifier: 35:DC:0D:3F:38:6F:22:AF:40:26:41:88:B1:2B:4F:B6:74:DA:52:08
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 0196AB42E7CD3CFE9116CA274CDA2DD2D710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 11BD
Signing time: Wed 07 May 2025 15:00:10 +0000
Manifest this update: Wed 07 May 2025 15:00:10 +0000
Manifest next update: Thu 08 May 2025 15:00:10 +0000
Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: s72mu3Karc4RtjxN0m+ZYbh89gFZ/Kafg84pV72tmkI=)
2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:42:e7:cd:3c:fe:91:16:ca:27:4c:da:2d:d2:d7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: May 7 15:00:10 2025 GMT
Not After : May 8 15:00:10 2025 GMT
Subject: CN=35dc0d3f386f22af40264188b12b4fb674da5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:63:ed:48:01:99:f8:df:97:a8:25:6a:14:3e:
6f:d4:74:fd:8e:96:d0:71:c3:ed:3c:97:77:13:0a:
6c:21:56:a6:6c:47:f8:88:36:9f:70:a7:f3:2a:96:
68:e1:9d:ab:5f:ce:c2:91:e5:32:88:6a:38:b5:d1:
fd:d8:8a:d3:dc:89:05:2e:94:68:c7:e0:89:8d:91:
2b:e9:8d:c4:fb:d7:49:56:40:ef:fc:1c:91:79:74:
a2:13:00:05:16:28:a0:ce:4f:23:0a:81:40:77:fc:
b5:52:2b:89:49:12:e7:71:fb:08:33:4c:74:85:db:
db:12:f3:63:ae:fe:25:2d:87:c9:8e:63:0a:0d:4c:
02:a1:bf:88:ce:36:eb:ee:cd:ae:e7:e7:4a:42:02:
72:e8:73:b3:16:3b:28:63:66:c0:cf:95:2e:b2:c8:
ae:db:f0:1c:3f:52:4b:97:78:37:32:08:83:1c:81:
15:b4:79:1b:a4:d5:fd:e9:ed:e0:20:d7:27:cb:57:
96:99:e1:6b:7d:67:a0:3d:00:e6:73:fe:13:bd:0c:
64:65:fd:c1:11:c1:79:04:50:95:44:09:56:72:bf:
6c:4c:2e:e5:31:97:c3:15:b3:11:90:c1:49:91:90:
e2:c0:6f:f8:35:60:4c:ff:df:5a:4f:38:69:59:92:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:0D:3F:38:6F:22:AF:40:26:41:88:B1:2B:4F:B6:74:DA:52:08
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dd:16:9c:35:a7:59:f8:8a:45:d7:8f:f7:61:0e:f1:1e:ef:
ce:1e:01:f9:4c:57:82:b3:65:ef:6e:e2:61:3c:5b:03:b4:88:
06:1e:1d:c8:04:9d:3f:f6:7d:99:2e:5d:a8:90:57:89:28:3e:
a2:ae:9b:7d:90:7f:ec:ba:00:d1:76:4b:e1:94:89:97:36:e2:
65:89:9d:a8:2b:9c:b2:6d:f3:36:dc:83:5d:2c:ec:cb:85:2f:
9a:85:e5:e4:55:d5:3e:c6:02:29:c3:66:15:27:da:63:c9:fc:
ae:6a:c6:06:63:c2:45:4e:3a:29:c1:50:d1:e3:03:03:79:57:
25:e9:18:22:14:77:30:45:3d:fe:65:b7:20:58:a5:0d:00:ef:
82:80:90:ca:43:05:16:73:2f:9b:68:ab:05:90:de:79:f7:34:
28:24:26:63:c9:8e:24:ec:b0:b3:09:6a:30:0b:f9:82:5c:bc:
e0:f8:cf:a6:f8:0c:6e:6c:ad:df:0e:54:7b:13:bd:e2:1a:40:
4f:7a:78:8c:33:c9:95:3d:1a:3d:97:3e:2d:c1:97:86:65:a4:
65:8f:0a:a9:29:eb:e7:2d:7b:45:41:4c:96:34:fc:d7:1a:0d:
58:76:8f:b1:19:fc:fe:2c:14:a9:50:57:92:fa:5b:00:43:ce:
dc:84:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:43:28 2025 by rpki-client