Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: mYslnoIGmL/oxLUCclAdes81jLstb0H4xuZmlFFaVjo=
Subject key identifier: 00:73:F3:5A:32:B4:52:D8:F3:72:93:2D:60:76:82:BF:94:5C:A0:F3
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 0196C0B81596958C5D4117EEA6B26B37612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:11 +0000
Manifest this update: Sun 11 May 2025 19:00:11 +0000
Manifest next update: Mon 12 May 2025 19:00:11 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: OSTXf3LLWVdHe1bSKxEEkchFoNnJpA6gkmGOhOqQ5KA=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:15:96:95:8c:5d:41:17:ee:a6:b2:6b:37:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: May 11 19:00:11 2025 GMT
Not After : May 12 19:00:11 2025 GMT
Subject: CN=0073f35a32b452d8f372932d607682bf945ca0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:74:5e:ed:58:1d:d6:cf:a1:b9:10:70:89:
68:90:04:18:36:84:65:d7:55:cf:80:f2:ce:06:02:
ff:3d:a3:9c:85:af:7b:e9:be:fd:c2:62:ce:7f:00:
c2:31:6f:3d:ec:1c:7c:64:7b:96:fc:d3:9d:68:4d:
12:01:c9:81:dc:25:0f:64:d6:a2:70:52:1b:18:d8:
95:eb:2e:0a:e9:e3:63:4d:3a:22:e1:e5:4e:02:ae:
2e:5b:aa:c3:d0:be:0f:ea:0a:d1:36:b1:a1:53:b2:
db:9d:78:0b:ba:8d:e0:aa:ff:07:a5:66:1c:57:2b:
37:f6:17:1c:21:74:25:90:5d:a6:15:46:e1:ae:ca:
89:04:f5:39:ff:ff:34:fc:6f:b9:46:da:5b:95:40:
de:7e:71:62:a5:e1:ea:4a:a7:c4:61:df:e3:54:fc:
77:8c:5f:dc:2d:38:da:dd:99:00:e8:d3:5c:75:0a:
bd:12:d7:2f:86:99:fb:56:71:ba:5b:b9:10:b0:38:
d0:bd:34:b7:1f:3d:10:fe:b8:fb:36:25:83:0b:50:
e4:b0:29:11:c1:3e:50:05:31:05:d4:78:04:20:47:
43:9b:69:b1:19:17:36:af:f8:d7:31:0b:d8:ca:49:
26:f4:f8:cc:a1:a2:7e:fa:5d:37:d4:e9:e3:bd:2d:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:73:F3:5A:32:B4:52:D8:F3:72:93:2D:60:76:82:BF:94:5C:A0:F3
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ab:cf:12:3a:cf:9e:ab:58:1e:e6:e8:a7:64:00:ec:b3:f9:
0f:3b:1c:52:1f:9e:ce:dd:97:0d:0c:f9:0e:25:f8:10:d4:af:
88:de:36:9c:f1:e5:32:67:11:a4:5b:01:9e:f4:03:1b:48:fa:
8b:10:41:0f:8e:f2:45:d9:4e:4d:55:94:c5:92:de:92:01:46:
6c:1b:bc:e1:40:43:11:6b:ad:5c:be:92:c8:e2:5a:02:14:61:
e8:29:7f:93:69:69:27:1a:dd:2a:c0:e3:a1:5e:4b:d6:8a:62:
94:4e:ff:5b:e8:56:69:ff:4e:22:56:1f:15:ee:05:8e:e6:35:
1d:07:2c:1c:40:b0:dc:15:99:fb:cc:f6:14:b3:6e:0f:cb:e8:
b8:c5:f3:d2:1f:b6:6b:2e:26:f1:2c:b0:63:77:b5:99:1d:68:
23:af:a2:54:d6:98:74:95:49:74:ea:6b:4c:7f:5a:9e:3d:49:
c3:4a:3e:c5:5e:ee:d6:7f:4a:31:bb:70:a4:33:18:a0:92:46:
b7:21:1b:11:18:3e:42:02:d8:cf:b5:a5:00:1b:97:2b:22:05:
70:af:99:cf:39:c3:01:bd:7a:b2:00:c6:88:b7:f3:62:d9:bb:
4e:c3:e5:d8:73:31:21:13:cc:b3:7d:f7:3f:d3:5d:93:de:86:
de:18:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:22:26 2025 by rpki-client