Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: aEasKUknOpU1kZtKRUlHfR2D45ReZ1Fb3ekchFbtFIo=
Subject key identifier: 33:E8:C0:1D:74:FC:37:8A:0D:AB:9E:CA:92:4F:DE:AD:E2:52:28:15
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0196C1CBA8FF410F9E323E07111FCEF9E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 00:01:11 +0000
Manifest this update: Mon 12 May 2025 00:01:11 +0000
Manifest next update: Tue 13 May 2025 00:01:11 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: Z/px6DuTCJUh6a8jgXnL+iPlrwWdPHq3t3BiP88OK9U=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:a8:ff:41:0f:9e:32:3e:07:11:1f:ce:f9:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: May 12 00:01:11 2025 GMT
Not After : May 13 00:01:11 2025 GMT
Subject: CN=33e8c01d74fc378a0dab9eca924fdeade2522815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:70:ba:1b:9d:3e:b6:da:cb:b4:14:e2:9d:
76:36:2e:af:4a:b7:98:5f:1f:0b:3c:de:1e:a2:ca:
74:8d:cb:4f:f1:03:72:56:92:b0:95:d2:81:d4:43:
29:82:ab:81:83:86:c3:0c:83:1b:43:f8:41:a3:9a:
2b:69:64:db:a9:63:96:b8:c2:29:40:71:5f:fc:87:
bb:88:59:78:9d:1c:5a:97:72:63:f5:11:c5:91:11:
70:ec:3e:8c:6b:8a:03:51:24:26:97:60:a8:3c:12:
64:77:91:1a:e7:3d:c8:eb:84:41:c3:0e:84:c2:7d:
ce:77:45:72:4e:59:a8:86:d1:4b:2c:7a:47:63:05:
39:d0:bb:d6:7d:33:1c:f8:ed:6a:84:52:8e:4a:61:
d3:62:86:b6:e7:49:b5:d9:4f:60:15:81:f5:85:78:
4f:e0:05:fd:35:89:c0:05:5f:e9:dc:81:e6:80:6b:
d5:aa:0f:b4:dd:f7:94:e0:27:fd:55:06:3d:31:8f:
2b:d9:25:16:1c:06:36:81:90:e4:ad:12:eb:58:86:
f9:41:ab:11:9d:77:d3:37:10:2a:7e:85:d8:57:84:
0e:bf:d0:3a:c5:c8:82:34:19:19:f1:8e:2e:92:6b:
c4:9c:7c:0c:ee:c5:25:2a:da:70:29:b8:c2:35:da:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:C0:1D:74:FC:37:8A:0D:AB:9E:CA:92:4F:DE:AD:E2:52:28:15
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:66:54:63:11:f1:25:f5:8b:8a:70:ef:7e:29:2c:05:57:
35:f2:bd:c8:a9:87:dd:4a:e4:23:7d:ec:38:8d:46:85:c5:40:
c9:0f:39:18:c6:09:b2:56:86:4f:e5:c9:bd:8d:dd:94:fa:01:
b8:ca:02:1e:24:64:94:16:b1:d2:36:65:44:ec:31:88:0c:8d:
3b:49:90:4c:dd:b1:8e:b3:6a:1c:77:a1:d8:ba:79:8a:6f:9b:
84:52:65:2c:76:ac:f4:02:a7:07:51:50:3a:c5:7c:91:f8:e4:
bf:1c:80:60:1d:17:46:cc:bf:24:27:1f:5b:a4:8f:ea:53:e5:
4f:6a:ce:fe:b2:be:d8:94:92:eb:f0:a8:b2:ae:13:fb:9b:28:
e7:c5:14:1b:e0:7d:f6:c2:d0:04:bc:86:a4:11:f0:90:3b:57:
29:71:6f:61:90:1f:92:54:7a:79:5e:73:78:5c:b1:08:b3:d5:
60:c9:a9:42:13:5c:a2:f9:3c:75:03:c5:a6:71:c6:b7:b0:cf:
79:6b:fd:b8:62:f7:51:7b:0e:3a:19:1c:28:2f:b1:98:0d:27:
9f:5f:04:81:f5:e9:3d:fd:4c:ae:55:6a:72:4d:3a:7a:e3:25:
44:78:e0:1d:73:67:3a:07:af:3c:6b:80:bf:02:ad:9a:83:d8:
c3:ca:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:22:49 2025 by rpki-client