Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: xdxZacS+Yulvu2pEGL+8NF0lHl4nrqJGo662nWo5d9E=
Subject key identifier: 63:01:F5:CF:44:E2:0E:62:86:5D:54:A7:FF:9D:B5:61:CA:A3:83:51
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 0196AC8D0922536B333DA434CB190CC909EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 098A
Signing time: Wed 07 May 2025 21:00:45 +0000
Manifest this update: Wed 07 May 2025 21:00:45 +0000
Manifest next update: Thu 08 May 2025 21:00:45 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: 0GET5PzSHIG8oor0hEi6wdpHTjn5pHID/tiT33HI4EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:09:22:53:6b:33:3d:a4:34:cb:19:0c:c9:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: May 7 21:00:45 2025 GMT
Not After : May 8 21:00:45 2025 GMT
Subject: CN=6301f5cf44e20e62865d54a7ff9db561caa38351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:b9:0a:5f:1a:3e:4c:1b:83:06:87:bc:8a:
5a:19:1b:75:d7:2f:ee:ff:55:d0:c2:5a:cc:1f:26:
9c:5d:c0:83:a9:61:60:73:75:e0:9c:5c:98:2f:3d:
cb:af:db:05:de:25:d0:3a:fb:9c:5b:1b:a6:33:cc:
53:00:52:6d:2b:df:a9:c3:71:fb:1d:95:a2:e3:5b:
26:eb:f9:9e:bd:5c:b5:fa:62:a9:9f:89:89:25:b8:
33:ed:84:ea:8d:9f:fd:56:76:83:b1:8c:9d:be:dc:
3c:7a:9e:a7:99:9c:27:44:e9:93:fa:34:8e:9a:10:
70:e1:8d:9f:ad:71:0c:42:8d:6e:5a:40:1f:71:70:
f7:16:95:36:5a:30:bf:62:e1:0f:df:11:15:5f:aa:
ee:a9:95:9d:64:f3:05:ec:a2:28:b3:ff:45:85:1d:
f4:c0:16:49:8a:cf:7a:84:67:b4:c7:3a:fa:f9:4d:
40:da:6f:3d:77:8e:2e:96:4b:4d:ab:17:6d:04:93:
9b:be:40:28:a4:63:fb:72:4a:c8:03:88:f0:66:a1:
0f:ef:75:a9:70:a9:4e:85:8c:25:9c:79:62:18:11:
4e:86:1b:45:26:5a:e6:d7:92:7b:91:03:af:84:0d:
93:d5:2d:90:00:b2:62:2d:75:e6:24:99:8d:4b:9f:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:F5:CF:44:E2:0E:62:86:5D:54:A7:FF:9D:B5:61:CA:A3:83:51
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:02:1d:ca:f4:b9:71:9a:6f:86:e9:2b:89:6b:3b:9e:77:94:
69:92:ea:79:a0:11:d2:b5:7f:f9:ce:32:8c:74:ac:b0:1c:3d:
e6:f7:2f:69:d2:ed:d2:0d:41:60:a9:a8:01:4f:df:c2:68:a0:
bd:66:bc:6a:40:36:e8:c6:90:67:a7:36:45:10:05:de:e8:d6:
34:12:8d:0d:9e:6d:cb:97:5e:c6:7c:1d:99:a1:e1:ca:5d:a8:
ad:25:1d:b7:3a:45:0d:12:d4:db:32:57:5c:da:91:8d:df:fc:
cc:85:2d:fd:91:cc:9d:10:50:f4:92:08:e6:30:ad:93:a0:0d:
04:0d:7d:ab:58:25:9b:2e:22:3d:d5:5b:a2:b9:b4:43:7e:e1:
6b:03:2e:46:a8:03:d2:c1:33:f8:8a:6b:b8:52:ca:78:a9:a6:
ab:cf:3a:ce:85:60:6b:2a:9b:b4:74:65:d1:d0:c5:d9:80:d4:
ba:8c:ea:9a:76:ce:1f:8a:b4:2f:63:30:36:a2:12:a6:a8:15:
0c:bf:d5:ed:20:79:5f:bd:b5:cf:6a:4a:14:39:f7:90:c0:76:
74:f3:b2:fe:ed:c7:d9:ec:a2:25:c6:0f:8b:f5:43:0a:f0:2d:
01:db:af:e9:01:ec:d8:8a:6d:18:91:4a:ea:bb:78:15:2d:3f:
54:7b:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:53:23 2025 by rpki-client