Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: eIpRg2/OhXUCLEV+hiSRnFRaa1NdXMy5X0vQqE/L/OM=
Subject key identifier: 74:CF:A2:6C:1E:91:13:B5:BD:5E:AD:88:99:C4:21:3B:52:9F:96:E9
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 0196CACE16E3B3E656585970E37D78194CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0144
Signing time: Tue 13 May 2025 18:00:26 +0000
Manifest this update: Tue 13 May 2025 18:00:26 +0000
Manifest next update: Wed 14 May 2025 18:00:26 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: IQcDz+JlTwFLCYsLGRkOX5uzBiOQzupLjZO4UEzXt44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:16:e3:b3:e6:56:58:59:70:e3:7d:78:19:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: May 13 18:00:26 2025 GMT
Not After : May 14 18:00:26 2025 GMT
Subject: CN=74cfa26c1e9113b5bd5ead8899c4213b529f96e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:1c:98:71:00:3e:11:02:64:6e:04:46:61:
71:3e:ea:cf:65:0f:f1:a8:51:fe:85:f7:b6:9f:59:
7b:2f:ba:25:19:0b:dc:46:d8:10:b7:15:27:84:d0:
ea:28:55:86:e5:23:fe:ec:32:95:bf:27:08:fb:ca:
31:21:0e:42:9a:68:0b:62:79:b6:fe:c5:df:7a:20:
7c:4f:03:3a:e0:cc:9e:37:76:db:47:03:17:ee:ff:
2a:56:25:bf:16:b9:ef:50:fc:48:d4:b2:47:b2:af:
a1:f8:bd:4a:5a:ab:2c:fd:77:69:82:e6:49:41:93:
0b:97:f9:35:7d:8a:a4:c3:8b:80:1a:fd:cd:b5:3a:
4f:0f:67:95:08:a3:c4:54:d8:bb:cc:b3:45:b6:67:
d8:a4:cb:6a:7d:e0:52:a0:4b:2f:75:a7:fe:5b:4c:
f4:eb:cc:b3:b4:36:13:65:41:00:0a:26:58:ce:cc:
21:6c:a0:d9:59:d8:1d:65:e6:01:0f:23:ec:96:77:
6c:da:b2:9d:e4:23:87:90:60:04:a6:9f:2f:87:ef:
c9:04:26:19:74:1e:b2:18:32:ad:a0:e0:96:a9:96:
16:0d:15:76:1a:5c:fc:63:6f:f1:9f:f5:71:76:80:
bb:f8:d6:8d:94:c1:33:61:0f:2c:b5:0d:6d:5b:6e:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:A2:6C:1E:91:13:B5:BD:5E:AD:88:99:C4:21:3B:52:9F:96:E9
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:32:44:58:c0:5a:55:5e:84:43:1e:b3:aa:6c:36:b3:ba:
ea:fa:f5:7c:7c:c4:97:b5:f4:ad:77:68:68:ce:0a:29:0f:4e:
d1:ce:2c:8b:53:7a:96:bc:d9:46:38:e0:3d:c3:1f:4f:e2:c2:
22:fe:5c:d8:ad:3a:e0:cf:22:17:81:91:c9:01:32:13:31:90:
cc:3f:d4:fd:a6:bd:7e:f8:38:99:09:07:56:50:ab:e4:33:97:
d6:22:ec:37:45:63:a9:0b:01:08:72:01:4b:49:ed:68:ff:b7:
1c:33:35:1e:5a:27:20:09:cd:fb:b9:f4:0c:1f:e4:b0:2c:27:
64:36:39:5a:f7:ac:7f:93:bd:f7:91:a2:54:33:4a:04:11:c1:
a4:10:ba:e4:bf:05:0a:da:72:7c:8b:a7:a5:8e:dd:d7:a8:db:
5e:5d:47:5c:63:55:bb:d1:b4:c0:3d:7f:21:b0:da:32:be:73:
59:d4:78:61:61:fc:f2:dd:71:79:3d:fe:95:3b:2e:47:ee:f1:
b6:e1:3e:6c:60:53:f8:e0:ea:a0:e9:28:82:26:19:2a:e4:a8:
09:7e:a2:eb:9f:ce:d3:12:91:68:c6:94:6e:f3:68:99:17:aa:
68:29:5a:e7:12:a0:a7:89:89:c7:24:70:0a:da:9f:a2:68:40:
19:89:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:15:00 2025 by rpki-client