Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: /LOfvQ1LMOGnjFkBSGPV7EaWFeZbE8Io/0rFJul1W0E=
Subject key identifier: 19:B5:E0:44:68:92:6C:EB:B0:71:C0:2F:2A:F3:9F:EB:52:E3:87:AA
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0196A276E442ACA708C39F9F2B883A626647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 22:00:22 +0000
Manifest this update: Mon 05 May 2025 22:00:22 +0000
Manifest next update: Tue 06 May 2025 22:00:22 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: o/RNm7ZzyWoBfRaCXq8m1EYgncUChR7N7niyS5X6OEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:e4:42:ac:a7:08:c3:9f:9f:2b:88:3a:62:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: May 5 22:00:22 2025 GMT
Not After : May 6 22:00:22 2025 GMT
Subject: CN=19b5e04468926cebb071c02f2af39feb52e387aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:51:73:e3:a4:bc:79:a8:47:de:bf:b6:98:
bd:6b:56:2d:7b:d8:c5:bd:ea:dc:e8:4c:6c:d7:b2:
5b:04:d5:84:a5:51:f7:fb:3f:38:d1:66:e4:3c:c7:
97:a4:73:98:19:13:7c:46:8f:46:56:e9:8d:6f:7b:
75:eb:ae:08:b9:5b:22:71:bd:23:74:14:da:8d:a8:
c4:2d:90:79:2b:4f:fb:91:7a:30:6e:9f:f0:8c:ce:
55:fe:b2:49:be:7d:54:56:c9:9f:98:81:cf:8d:22:
ea:be:9a:69:d2:17:e4:09:b7:f3:a1:1d:34:35:83:
cd:5e:eb:91:17:7c:ee:e2:25:eb:4c:85:bd:a9:99:
1d:5e:d9:e9:d5:ca:e5:9f:0f:14:11:a2:54:98:ac:
89:bc:73:e9:2c:52:b8:2c:37:4a:8c:cb:2d:ab:ac:
cd:27:d2:fc:45:0a:47:7d:32:63:66:8e:08:8b:db:
db:5a:f3:47:68:f9:97:84:21:47:31:76:ce:55:cb:
19:85:db:59:e6:55:69:3d:ae:44:0c:5d:d8:0b:6c:
db:7a:4d:8f:2c:c9:4c:51:0f:4b:be:48:88:fe:f5:
3b:4f:34:65:17:04:96:23:d3:d9:59:aa:6f:1a:e9:
14:c5:5c:32:65:fe:b1:f4:66:0b:67:b0:25:ca:64:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:E0:44:68:92:6C:EB:B0:71:C0:2F:2A:F3:9F:EB:52:E3:87:AA
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fc:b9:a8:20:07:d2:c2:9e:f6:e9:6b:be:0d:c7:a6:1f:5d:
7f:8c:d0:cd:0c:0c:dc:c0:ba:81:8b:9a:c7:ca:92:ae:89:01:
ce:0f:3a:c7:df:d9:95:dd:52:d8:c6:0b:70:29:ee:18:a8:c5:
9d:23:d4:c0:11:39:ee:74:66:c9:af:d8:9f:ef:88:70:bb:6e:
10:49:f5:3f:bb:bc:60:1e:78:ef:fe:59:24:ca:6a:a1:8d:e3:
3d:8c:2f:67:1b:81:0d:54:58:7d:1e:cd:ae:03:03:4b:9d:cc:
0f:a7:35:6f:91:8a:b1:64:42:16:5f:7e:e2:68:ae:f3:7f:6e:
2c:4b:3b:5c:31:db:c6:e3:ae:50:d9:4f:f1:3f:95:d5:1f:17:
64:4a:f2:d5:0e:30:35:5d:5f:cf:96:7e:80:6f:73:0d:a2:ef:
bd:f7:a7:ac:37:1c:d2:36:9b:9a:db:92:17:81:4d:cf:d9:0e:
4d:d4:f2:48:2a:7c:00:34:4b:d4:a7:a4:e7:ca:7c:0f:a7:f2:
f6:d7:34:56:5a:0f:65:9f:16:14:1d:a8:11:24:49:f3:53:c0:
68:b6:a4:6b:8e:cc:a3:95:86:46:89:d5:ff:4a:93:50:87:c3:
4e:c3:05:6a:19:79:92:cc:9c:89:12:c5:44:e8:2c:55:b7:1e:
aa:48:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:59:06 2025 by rpki-client