Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: e2xinzMy39CviAgIATTIFQvc2OpUZhvBfscoAczwrb0=
Subject key identifier: FF:53:CE:9D:E5:76:1B:9F:9E:69:90:92:2F:CE:BC:10:30:DA:AE:51
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 0196BA7FE14A9F3BE94DE0B18EE40F011B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 122C
Signing time: Sat 10 May 2025 14:01:04 +0000
Manifest this update: Sat 10 May 2025 14:01:04 +0000
Manifest next update: Sun 11 May 2025 14:01:04 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: zipV9zk66xbG3FA6uo+TS8f5Ov+RBE4r9gyaF7fjuKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:e1:4a:9f:3b:e9:4d:e0:b1:8e:e4:0f:01:1b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: May 10 14:01:04 2025 GMT
Not After : May 11 14:01:04 2025 GMT
Subject: CN=ff53ce9de5761b9f9e6990922fcebc1030daae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:b7:c4:1d:4c:77:19:6d:dd:96:aa:2e:84:
96:6b:90:5e:e1:bb:09:79:7d:57:2c:e4:cb:da:9f:
d3:53:30:b4:b8:d2:e0:7f:23:1f:1c:b4:50:e6:e7:
62:b9:c3:48:88:66:e3:0d:09:c1:88:4a:de:46:92:
cf:0f:d1:fb:72:7e:fc:87:89:3a:e2:bf:25:56:38:
0b:cd:58:ea:7d:a0:23:94:ac:55:ed:02:61:7b:a0:
91:bd:c9:21:cc:6d:7c:96:c2:e9:7c:fa:08:bf:d4:
7e:86:1a:ae:89:c8:ac:e6:04:75:37:5c:20:32:52:
ba:9c:1d:c4:30:7f:74:74:35:13:ae:b3:16:47:c3:
49:d3:44:c8:17:88:37:f3:a4:a7:bf:fb:79:e6:c8:
c2:3e:66:73:97:c1:02:a5:e2:29:31:f5:57:62:c2:
d2:30:cc:e7:1a:7a:29:92:f8:ca:fc:5a:0f:85:dd:
f4:49:43:a4:9b:e5:7c:fa:21:a0:05:ca:9c:d9:f3:
01:31:9a:3f:17:62:a4:0a:72:4c:e0:92:95:5f:9d:
02:6b:f1:b6:29:2b:50:41:b3:55:c9:5e:e0:84:f4:
8a:79:1b:3d:5b:ac:b8:d3:4f:42:76:d0:1f:8d:6a:
ec:83:64:62:bd:c8:97:1b:63:78:48:36:4c:02:1b:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:CE:9D:E5:76:1B:9F:9E:69:90:92:2F:CE:BC:10:30:DA:AE:51
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:68:10:4e:2e:24:cf:95:7e:97:be:36:61:12:83:d7:d1:
1e:e7:60:15:aa:ab:57:2d:8c:f2:44:47:b3:d4:50:bb:14:b6:
c9:2d:d1:2f:b6:b1:b3:38:3f:8b:4d:a1:a1:be:0e:04:8d:a2:
e6:57:6f:76:c0:af:d4:7a:c6:bd:bb:8c:5a:e7:1f:20:06:a6:
75:a0:81:bb:bc:31:79:94:c9:e8:f9:7a:e3:8c:10:2c:77:b3:
0d:6d:6f:02:19:93:20:62:1d:e4:9d:e3:6e:63:89:4d:7d:48:
e4:e1:d6:09:12:71:97:60:77:b7:6e:86:80:3a:93:49:68:e6:
b8:54:bd:8c:a2:7a:b6:b6:fe:1b:2f:3a:e3:50:69:eb:0e:5b:
29:87:07:e5:a0:e1:ed:1d:0b:d0:c4:09:05:3c:d5:f6:ac:47:
46:40:98:48:c5:b9:cd:a0:50:7b:8f:c0:c0:ed:23:df:e7:44:
24:8d:8c:17:22:d3:9b:61:8d:85:f3:e1:94:62:a2:c0:fe:36:
6f:1b:ff:8a:2e:cc:8d:0f:c1:70:fc:3a:6b:9e:d7:a0:20:5d:
1d:b0:66:4d:c4:e6:d2:50:b4:4e:5e:ec:67:69:45:c1:88:99:
10:c6:65:4a:31:9b:bd:20:be:5a:b1:8c:cf:f8:9d:ab:7b:5a:
c1:a0:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:13:38 2025 by rpki-client