Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: DrKAq2H5zAElCWtt1eVOXSCz357kULcwLIOYQs9pC8Y=
Subject key identifier: 53:DC:89:0C:4F:02:DC:FE:F9:DD:AD:89:A9:E5:B6:7C:6C:12:2A:BB
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0196B220F6DF65E29653684D1FAF45DB4A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 23:00:26 +0000
Manifest this update: Thu 08 May 2025 23:00:26 +0000
Manifest next update: Fri 09 May 2025 23:00:26 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: dY+Ui8w72EaG9iAZztfANhIQOOKn5kpQqYLz5st2AmQ=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:f6:df:65:e2:96:53:68:4d:1f:af:45:db:4a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: May 8 23:00:26 2025 GMT
Not After : May 9 23:00:26 2025 GMT
Subject: CN=53dc890c4f02dcfef9ddad89a9e5b67c6c122abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:74:89:e1:25:0f:35:e7:59:16:a5:26:b1:
bc:e4:3c:8c:f3:da:9a:c9:29:2c:31:6f:38:67:69:
db:44:74:39:ee:c5:0b:67:c7:2c:3c:d7:e1:89:61:
90:29:7d:c6:a3:11:00:bd:96:17:2c:2b:cf:71:76:
50:ba:a6:10:3f:db:a9:a0:8b:9a:15:98:52:da:31:
93:d2:4f:58:a7:cf:00:54:24:1e:a4:ac:f0:7d:4d:
01:ff:2b:0c:b6:df:4d:08:c5:1d:26:eb:f6:31:d1:
13:cf:94:9a:47:86:1c:89:0b:18:f9:d0:d8:f7:c0:
8c:95:21:4b:f3:8e:d0:16:e8:6a:5c:f4:30:b9:1f:
25:60:a8:7c:8f:91:01:97:c7:c6:8f:d6:d4:12:81:
a2:28:18:bc:e8:de:e6:9d:25:53:1e:8f:7e:34:60:
9d:35:98:12:a9:93:e4:ed:9b:ce:ea:99:d2:dd:21:
52:c1:d4:df:78:69:d2:44:2f:eb:6e:f4:1a:19:7f:
2d:e1:67:b3:0a:f8:78:cb:e3:d9:3e:61:64:1d:d8:
29:b5:56:3f:db:a8:ac:87:17:a8:d8:d8:41:b6:ab:
cf:0b:a6:4d:d4:9c:27:8a:f3:23:be:dd:0a:25:dc:
fe:84:2e:ac:77:90:1a:69:d8:90:9f:fd:d1:0a:9c:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:89:0C:4F:02:DC:FE:F9:DD:AD:89:A9:E5:B6:7C:6C:12:2A:BB
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:05:fb:a6:f2:86:3c:07:98:50:a8:b7:61:13:84:22:bd:73:
b4:6c:82:91:5b:ee:1b:e0:2c:fa:0d:34:79:4e:6e:86:ad:6c:
d2:91:d5:0b:01:ee:9a:8b:14:df:a7:b7:d7:c9:f7:12:61:7d:
14:93:62:98:78:84:c3:d1:c1:3c:aa:2c:67:be:fb:de:2b:17:
0f:35:42:77:53:02:79:21:33:ad:71:1e:b2:97:00:4b:8e:00:
6d:f1:b0:38:ff:7f:fe:9b:f0:c8:b7:9a:02:6f:cf:d8:90:b8:
61:08:3f:04:50:7a:e5:e7:d1:9c:9c:f4:62:c3:88:ee:c8:7f:
6e:6f:5a:fc:8a:df:b5:d5:d8:ae:50:9e:aa:a7:7e:3a:c0:de:
ec:43:fd:4d:63:76:71:ad:ea:ad:11:40:1a:41:5b:4b:00:9b:
2f:d7:0c:57:5f:d5:f3:4a:37:91:0a:38:c3:cc:cf:09:7b:cc:
1a:21:2b:15:a6:9c:6f:d0:9d:c7:a8:20:30:df:ea:bc:e6:cd:
d8:c3:2a:48:ae:b1:e3:9b:95:3d:d7:70:87:86:67:3a:36:14:
a4:ec:8c:22:ae:d5:73:e5:08:55:16:ab:69:b5:14:54:7f:8f:
e7:17:97:ad:d0:0d:b7:cf:67:2c:01:1b:e2:ce:2d:88:1a:13:
22:44:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:28:04 2025 by rpki-client