Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: Zb7MZdwQuzn0a7eTQu2lMR/oq8OThmPWQUjOwx46iOw=
Subject key identifier: DC:8A:BA:F0:45:39:DC:ED:97:09:31:CA:C0:28:65:E5:49:B7:85:B0
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0196B558E96AEA65F7AB0C021FDEBFFCBEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 02A5
Signing time: Fri 09 May 2025 14:00:24 +0000
Manifest this update: Fri 09 May 2025 14:00:24 +0000
Manifest next update: Sat 10 May 2025 14:00:24 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: 2K10xZAJUk+x2b/+dvIy4HYyNjscsnVUwDz3Aqxgg+Y=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:e9:6a:ea:65:f7:ab:0c:02:1f:de:bf:fc:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: May 9 14:00:24 2025 GMT
Not After : May 10 14:00:24 2025 GMT
Subject: CN=dc8abaf04539dced970931cac02865e549b785b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:4d:10:3c:a5:47:9f:21:80:d6:71:d7:4a:
a0:27:97:1c:34:aa:84:5e:0b:46:6d:bf:9f:2a:60:
19:15:72:23:8d:1b:e9:06:36:31:7e:4b:6d:31:72:
f0:45:b8:c0:9d:d1:eb:4c:33:56:97:74:fa:93:83:
66:ce:10:08:61:8f:6b:5c:d4:60:b7:ec:82:c3:c0:
1e:59:e4:13:4e:d6:72:b1:46:3f:ee:8e:2c:e0:ad:
6c:39:ce:de:30:c4:c5:ee:c5:cc:5d:d2:39:65:9d:
ed:a7:2a:be:49:3b:8a:12:52:89:96:fa:03:05:4c:
7c:96:b5:e0:72:f9:92:59:f2:d9:6e:e0:b9:43:f3:
b3:8d:92:42:4d:dc:71:3c:3e:61:ca:0c:25:d4:fd:
df:56:0f:fb:11:c3:8a:bc:95:28:74:11:46:f4:17:
80:05:17:bc:16:2e:0b:2d:04:1e:bc:25:7c:f1:09:
d4:4e:90:0f:26:00:74:46:91:73:c9:d9:e0:51:0e:
e7:47:93:1b:c9:7c:55:ab:45:81:e5:7e:7f:91:e6:
87:0f:ca:22:24:0d:4e:3d:ec:64:fe:98:70:13:10:
d7:af:a7:02:cc:b4:cc:86:21:a9:d5:12:b3:50:09:
8a:be:d2:b3:c9:25:51:0f:e5:20:7f:cd:4e:ee:9a:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8A:BA:F0:45:39:DC:ED:97:09:31:CA:C0:28:65:E5:49:B7:85:B0
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:0f:61:28:bd:49:41:da:af:30:d8:b7:c9:ce:9f:87:90:
94:bc:0d:4a:dc:41:98:45:0c:af:43:52:91:67:65:ec:43:73:
60:19:08:2a:c7:9b:c5:b2:58:5d:7e:e8:5a:af:a3:86:24:ff:
a2:63:8f:c4:a4:30:62:4c:79:01:7f:a7:d2:0d:43:7c:eb:0f:
07:93:9b:de:33:4e:f1:d3:ba:40:0a:c5:32:c1:13:e4:cb:cb:
53:b7:86:bd:70:0d:2c:db:16:45:bd:85:bb:a1:45:ea:8c:f0:
7e:e3:9e:a8:74:3c:59:ca:80:06:d9:a5:97:9e:e6:00:36:c2:
3d:df:84:bf:b3:ab:66:00:33:df:b2:54:ab:aa:f4:5b:5e:0c:
ea:a7:9e:c4:15:6b:c3:54:cc:84:57:d4:80:eb:c2:2f:a2:90:
39:5f:ee:ed:3a:16:ce:b9:14:fe:08:98:77:45:13:ff:c9:84:
17:c7:9e:ce:6b:c2:a0:d2:25:cd:1b:85:6e:0a:d9:2b:7e:32:
fa:fd:db:fb:2e:0e:e3:95:7b:bb:a6:39:30:94:8d:db:6a:fb:
9e:0a:4c:67:e0:b7:ae:11:cb:47:ce:b2:e7:9d:86:d9:9f:9c:
b2:81:36:03:1e:78:10:6c:87:5f:0a:e5:e7:cd:9f:6a:69:66:
75:65:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:10:12 2025 by rpki-client