Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: 9g+NPJz9MarqbQAGc/RCK9vwHb9c4Kl38ZlIl3LpEJM=
Subject key identifier: F8:4C:6C:56:74:E3:CE:9F:CC:1B:3D:FD:FB:E0:2F:1A:99:F9:84:4C
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 0196BB91FD5B5459AA0BD84B3699E9A587B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 08FC
Signing time: Sat 10 May 2025 19:00:28 +0000
Manifest this update: Sat 10 May 2025 19:00:28 +0000
Manifest next update: Sun 11 May 2025 19:00:28 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: b32GqrJX8ftbn2tWCJssHgTN5nhP81LrRHr2yGHMn/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:fd:5b:54:59:aa:0b:d8:4b:36:99:e9:a5:87:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: May 10 19:00:28 2025 GMT
Not After : May 11 19:00:28 2025 GMT
Subject: CN=f84c6c5674e3ce9fcc1b3dfdfbe02f1a99f9844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:4a:ca:7d:c1:30:4c:43:8a:b2:a4:3c:5c:
fb:e5:1f:30:21:d7:02:30:69:59:70:55:f1:59:48:
02:ac:52:14:1b:f3:4d:99:9e:b4:46:ca:5f:47:b1:
b0:af:38:3a:88:ce:71:2d:ce:30:1b:e1:62:8f:d8:
99:13:76:40:90:fe:5e:f1:bf:7e:86:bf:c0:0d:dc:
77:b2:f4:5e:0f:5f:54:a3:d7:e3:2a:c5:cc:3b:da:
70:3d:13:f6:fd:92:c0:b7:6d:00:61:24:52:ed:95:
46:f8:a5:a8:bc:05:4d:4f:a5:30:f7:d1:4a:17:26:
f8:63:17:eb:ff:41:aa:f3:af:d2:68:ab:4f:1f:2d:
bb:80:ec:c3:84:f6:84:02:a4:16:f4:67:17:17:4d:
a9:ec:22:2f:10:ff:ec:22:7d:a3:5d:32:bd:08:3e:
76:64:ce:6c:17:83:6e:16:8a:ae:bf:ec:74:21:a0:
74:2c:bb:ce:18:63:d0:25:e1:2e:19:79:ed:56:59:
31:a8:d4:cb:15:ee:1e:91:29:e3:85:f4:d0:2a:18:
50:7e:30:42:f8:a2:8b:95:a2:19:2c:dc:ec:40:d5:
b0:75:5c:1c:e5:27:cf:b0:ba:8e:e8:6e:67:97:30:
6c:df:e6:34:c5:a6:af:0c:f3:c2:fa:45:a2:26:23:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:6C:56:74:E3:CE:9F:CC:1B:3D:FD:FB:E0:2F:1A:99:F9:84:4C
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:d8:10:61:ee:b9:4f:35:f4:d2:f8:6a:01:f8:1e:1f:ce:
13:df:22:ce:ae:d3:b6:ce:58:2a:53:f2:48:81:3b:6f:45:3b:
84:49:68:f8:4c:f5:1d:8f:00:5e:b4:7a:f4:2d:66:93:9e:a9:
cd:f9:74:39:68:3b:0f:fa:5e:55:58:75:87:4f:25:c9:56:f8:
80:c0:ad:2f:c3:63:65:41:22:0f:53:50:30:4d:12:2b:e8:01:
25:58:31:a7:5f:4b:37:d0:f1:a3:18:08:59:37:d3:df:d0:73:
c7:4d:d9:7b:8c:3c:b4:0c:7b:45:f2:cc:bf:08:b0:0d:df:95:
0a:bd:31:41:bc:bf:94:00:37:a7:0d:c5:52:a6:89:3f:2a:fc:
20:ad:6d:2f:14:da:52:1c:b4:ea:72:32:31:a7:eb:56:79:59:
06:5c:78:4b:d7:50:e9:40:7e:ed:19:50:e6:ff:4e:92:67:54:
bb:93:68:52:9e:01:c6:28:c7:c4:e3:f2:ee:ce:f1:00:5a:62:
3f:97:ac:f4:8a:ef:17:d1:bd:82:4f:9c:d3:74:c9:55:4a:79:
43:0d:98:bd:9a:49:ba:2e:ce:27:1b:e2:94:2a:98:46:06:70:
50:68:a7:8b:4d:f2:0b:08:26:65:a6:85:8a:55:2b:39:08:28:
88:48:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:20:09 2025 by rpki-client