Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: rqvLGCrxSE6xfNhy6OfiAVudmSFpOhwx4/GqiGnKn8s=
Subject key identifier: 44:4D:3B:B5:A5:18:0A:CA:16:91:A6:B3:04:B7:DE:FE:9A:3B:C1:7B
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0196BE92F5276DB66730F2331C1D7DDAAD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 09:00:24 +0000
Manifest this update: Sun 11 May 2025 09:00:24 +0000
Manifest next update: Mon 12 May 2025 09:00:24 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: arcG1hFMiirC29diNQgRLWzT16Mw0i3bUx2TGmM7re4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:f5:27:6d:b6:67:30:f2:33:1c:1d:7d:da:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: May 11 09:00:24 2025 GMT
Not After : May 12 09:00:24 2025 GMT
Subject: CN=444d3bb5a5180aca1691a6b304b7defe9a3bc17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:de:65:24:76:e7:c6:de:7e:ac:4c:0c:dc:
14:62:0e:b2:51:cb:6f:d3:04:50:24:85:77:3f:75:
2f:d0:ee:31:34:d0:0c:5e:76:6a:fd:3c:90:b3:f4:
2c:e8:31:9c:7d:03:6a:46:c0:c5:30:ea:b9:8b:bd:
e6:b9:06:4e:3b:e5:15:f8:17:1e:26:41:5e:d9:49:
09:30:61:6e:8a:76:03:bd:c5:53:79:99:5d:bf:55:
56:14:44:47:aa:dd:24:e5:f7:bd:90:65:7e:5d:75:
8e:86:bb:f4:73:43:2d:48:49:6a:64:f9:0c:27:71:
18:e3:6b:b4:77:d4:bc:9c:71:19:30:6f:11:60:a6:
b3:33:3b:c9:55:d9:1b:b6:86:35:09:83:58:16:61:
f1:ec:3d:a7:29:c4:38:e7:bc:c0:62:61:b5:5d:2b:
1c:d4:08:00:dc:92:68:45:26:0c:9e:6b:e3:0f:13:
75:5e:48:ee:1a:4f:59:8c:cb:c1:4f:30:52:3a:f7:
59:ec:5b:ef:0b:31:4d:9d:e1:a8:a8:c5:c3:b3:a6:
21:cd:c8:1c:0c:87:4b:84:a9:4a:3b:70:04:0c:93:
4b:64:1d:7b:a0:7a:b4:60:34:38:5f:84:6f:5c:39:
a7:3b:7d:a2:94:7a:cb:6a:78:bc:42:7f:35:db:f4:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:3B:B5:A5:18:0A:CA:16:91:A6:B3:04:B7:DE:FE:9A:3B:C1:7B
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:5d:f2:a5:68:e7:8e:77:7c:0d:74:48:60:34:c3:fa:69:
ca:c7:c9:a4:94:d5:e8:c9:33:00:dd:4d:4f:e1:44:ca:20:1b:
c0:d1:cd:ee:b4:6e:d1:6b:d6:4c:15:be:8c:4f:76:a2:8b:9d:
40:93:95:e9:49:f9:ed:0d:74:ba:f2:49:41:ac:0e:ea:63:c0:
a7:07:08:a5:d9:6c:e5:de:97:8f:e8:e2:55:c7:17:29:0f:45:
64:91:76:ab:53:17:48:47:26:d5:65:32:87:f9:e7:22:13:2c:
3d:46:37:a6:b6:d2:b7:b5:03:2e:0c:a2:60:db:16:b0:8e:ea:
c9:d2:76:1c:cd:35:d2:14:07:d6:6d:ee:a2:c9:08:de:c3:d5:
94:27:0f:6b:57:c6:14:c4:42:5d:5c:3f:cf:df:80:c4:64:31:
bb:13:2c:14:cb:45:d0:08:fb:db:7e:08:de:9b:dd:48:ab:39:
40:52:05:65:10:9b:4d:03:af:a7:c4:3f:73:fb:e7:34:ad:a0:
5f:53:73:44:84:62:32:0f:57:48:e3:33:8f:62:e7:f1:31:a7:
e8:19:2e:03:fd:94:20:35:4a:87:b8:3e:60:93:19:d8:ca:af:
ec:f9:96:79:b6:ae:0f:ef:5b:ed:ae:a2:c0:c2:97:ea:51:ae:
f1:15:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:29 2025 by rpki-client