Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: yOV2jBkU9/rJwcwAZczgbuhmHUqdwpLa9vSwMFwzVYM=
Subject key identifier: 61:CC:AB:86:BF:D7:08:59:5A:4F:34:F7:75:98:A8:E5:4F:8E:E9:B2
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 0196CFBDC2D31C4FEA60D0F7A9AC0672A6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 11D1
Signing time: Wed 14 May 2025 17:00:41 +0000
Manifest this update: Wed 14 May 2025 17:00:41 +0000
Manifest next update: Thu 15 May 2025 17:00:41 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 9GWtERf6+f1dOldJjtyf+F2IXrleHin5vQBH9RST1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:c2:d3:1c:4f:ea:60:d0:f7:a9:ac:06:72:a6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: May 14 17:00:41 2025 GMT
Not After : May 15 17:00:41 2025 GMT
Subject: CN=61ccab86bfd708595a4f34f77598a8e54f8ee9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6a:2d:76:c0:ac:28:9e:16:33:d0:75:03:e4:
bd:4e:2c:1b:bd:cd:38:ec:d8:b1:d7:51:13:04:9c:
82:60:19:b2:62:0b:87:35:dd:92:28:dd:60:05:5c:
18:84:6b:9a:89:a5:3c:85:c0:13:6b:56:04:bd:68:
b6:b2:1b:3e:4f:73:ae:57:24:d2:d9:9d:0e:c8:69:
33:5c:c2:ac:b2:44:ff:c1:e5:9a:4a:50:9f:0b:31:
4f:d3:05:83:ff:82:fd:32:51:f5:03:85:c9:ed:fe:
03:ad:1d:51:b1:da:a1:5f:b8:4c:75:57:be:a5:41:
63:02:c2:07:7e:b4:ed:f7:6d:4e:c8:8a:44:01:61:
b9:37:db:77:84:1d:2f:d6:dc:c4:d5:85:fc:92:03:
25:2f:40:8e:a5:22:1d:a7:d6:1d:c5:66:ab:82:c5:
43:3e:01:2d:80:84:e6:4a:e9:6e:07:1e:52:90:e8:
fc:cf:34:59:72:37:5f:a2:36:c3:fe:4f:c2:34:64:
b2:88:34:a0:8d:9a:c5:d5:52:e8:a6:4e:0b:d8:e0:
2e:74:1e:5f:44:ff:dc:70:49:05:ff:fb:b4:0b:1f:
d8:2e:46:1e:0d:de:5c:6c:6e:4c:21:87:55:e3:cd:
46:c8:82:8c:df:35:e2:4e:aa:cf:8f:5e:3a:ad:64:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:AB:86:BF:D7:08:59:5A:4F:34:F7:75:98:A8:E5:4F:8E:E9:B2
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:de:e5:b4:6b:52:76:c5:33:f3:9a:85:1c:68:fb:ee:8d:
c6:10:8f:db:fa:c5:97:2c:fe:6b:6f:cc:f2:51:68:c4:05:4d:
ea:fe:68:a6:f2:57:5d:01:85:f9:0a:13:bd:2d:85:63:5d:53:
d7:86:e4:a0:3f:e0:42:c6:7c:82:dc:a8:58:1d:e7:16:d4:f2:
91:3a:cc:17:a9:6c:8f:4e:a6:cc:f8:68:bb:a8:15:48:cc:46:
bb:38:70:6f:e0:48:5f:20:e4:0e:b3:b7:97:ce:23:78:17:87:
06:4e:3c:42:b1:38:cd:c2:ac:f5:9b:f9:0c:9f:ef:c8:01:61:
4f:0f:27:82:52:42:32:21:e4:c3:52:4c:2c:bb:e9:9f:b8:2b:
d6:32:c7:d5:cb:f5:f4:09:fb:4a:61:20:93:1c:cf:62:2c:dc:
5b:d4:d3:99:0b:3c:4d:fd:18:41:f4:1c:c2:2e:e9:a4:5b:67:
89:70:cd:5d:b2:ca:0d:e1:f1:d7:99:ef:18:34:a0:a8:c9:e6:
9f:f9:7c:04:fb:60:ba:4e:9d:86:98:83:e7:1c:54:ff:3f:f5:
f9:67:3f:81:07:07:93:b2:e7:fb:d2:ef:a7:7e:98:c3:ad:c5:
37:22:26:9d:db:9d:75:d7:a8:a8:a8:3b:36:dd:fb:b3:56:f8:
c0:a3:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:18:33 2025 by rpki-client