Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: jMDWcXPNnTTFJen9l3iw/UdGCo88bw6auNSSj0G/r3o=
Subject key identifier: 19:3C:76:4A:8A:7C:DE:9C:69:21:65:30:21:71:A7:09:80:02:AE:F2
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0196A051B504671FFAC957DD9B48B40829E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 12:00:31 +0000
Manifest this update: Mon 05 May 2025 12:00:31 +0000
Manifest next update: Tue 06 May 2025 12:00:31 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: jK2O6dZB+Llsgyfg8x2MeOut65mngLHI9oy8R5/K/fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:b5:04:67:1f:fa:c9:57:dd:9b:48:b4:08:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: May 5 12:00:31 2025 GMT
Not After : May 6 12:00:31 2025 GMT
Subject: CN=193c764a8a7cde9c692165302171a7098002aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:db:cc:d1:94:2b:97:cc:c2:b5:2b:18:18:
21:1f:94:69:db:66:ad:26:42:3c:4b:a3:1a:d7:8f:
66:82:99:86:67:57:1c:fd:8c:1e:40:d9:52:3d:93:
7d:9d:c6:c8:39:10:3b:9d:41:82:c9:f5:b4:93:11:
0e:8e:63:14:4f:f7:4e:23:5d:0f:83:fd:2f:d5:24:
20:11:f8:c3:f8:f2:93:cc:af:f5:1b:e5:0f:d2:66:
80:fe:b9:ae:1c:8d:5e:af:2d:2a:f7:48:28:31:76:
1a:16:19:33:59:92:ea:ef:2f:44:eb:b5:0c:3e:9b:
c7:42:22:4a:60:02:50:7d:f0:f5:2b:38:56:a6:d4:
3f:d5:ce:a4:09:e2:ef:71:f4:ad:04:40:52:be:f4:
96:7c:f7:0a:11:f9:4d:10:2e:d5:90:45:ee:31:13:
37:e1:2c:70:d8:25:29:9f:31:e7:cf:c3:4b:18:07:
67:85:e6:2a:f9:9d:f6:59:23:56:ad:f3:56:47:61:
5d:fe:c7:f0:fa:58:b1:e8:c5:fd:0b:4d:1f:33:31:
9e:1d:f8:7a:5a:34:db:8c:b9:23:0b:85:b6:7e:b8:
09:01:7d:ba:73:ef:3a:a5:7f:4e:ce:b2:2e:46:3c:
b3:f3:c1:a9:0a:eb:01:b0:a8:6b:29:bf:33:ac:9d:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:76:4A:8A:7C:DE:9C:69:21:65:30:21:71:A7:09:80:02:AE:F2
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:8b:f8:0f:bb:42:17:a9:19:c9:b2:a3:13:e4:0b:fb:82:
35:f5:66:b5:dd:f0:54:e9:33:61:72:31:ef:db:68:ab:33:e5:
fc:f5:2b:01:86:01:ae:53:5a:16:cb:1b:56:1d:ec:0c:d1:01:
6f:47:bf:8f:27:61:5c:31:08:24:01:1a:33:2d:ff:1b:de:4b:
88:95:56:fd:1e:27:d4:09:db:59:1a:cd:b5:20:18:0c:ba:0c:
a9:10:0f:1c:aa:56:dc:ab:d2:7d:e3:ab:4e:fc:70:27:ce:d4:
bc:cf:82:25:b7:02:cc:ea:82:ff:34:fe:33:a4:db:34:34:c7:
15:46:da:b3:34:07:f9:6e:e9:84:7d:7b:38:02:d9:d6:27:2c:
77:ba:07:9d:f3:f7:45:a5:70:19:c8:3c:0b:95:d7:b7:82:3b:
51:09:97:2c:61:70:39:96:9f:c1:c8:8c:a0:4d:18:c5:f0:63:
54:f6:d7:1b:83:bc:d9:04:4a:fd:1f:8f:0f:9c:9d:0b:02:d0:
df:79:43:8e:e1:d0:9d:25:e9:31:2a:45:37:c5:83:42:cc:8e:
f6:de:28:49:eb:1b:17:c8:6f:14:2e:d4:a5:e0:b8:7c:74:b7:
dc:16:dd:a1:38:bd:25:87:65:43:ee:e6:e3:5a:fd:b0:ff:6f:
60:e1:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:50:22 2025 by rpki-client