Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: lLXO4N/vrzHYke1zHU2dBIAMYancQjOKAOxKuOziH8E=
Subject key identifier: 37:03:8D:A1:FD:9D:FF:DE:CB:E7:0A:A7:38:87:5B:C6:8B:8D:81:8D
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 01965C834C21689765DA10402E224ED63574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 149E
Signing time: Tue 22 Apr 2025 08:00:30 +0000
Manifest this update: Tue 22 Apr 2025 08:00:30 +0000
Manifest next update: Wed 23 Apr 2025 08:00:30 +0000
Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: mrbHLjOO+dVSp48/rAynbpLTsSkyjMkIN0V5y5wZ2js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:4c:21:68:97:65:da:10:40:2e:22:4e:d6:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Apr 22 08:00:30 2025 GMT
Not After : Apr 23 08:00:30 2025 GMT
Subject: CN=37038da1fd9dffdecbe70aa738875bc68b8d818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:ca:f2:3e:1d:70:9b:84:7a:07:0e:40:87:
3b:0d:35:7f:8d:45:8e:f2:b5:8d:48:59:0f:4d:48:
4e:58:df:59:28:8e:dd:d8:05:30:b3:62:94:d6:fa:
ef:83:52:5c:fa:9e:1f:09:f5:2f:a7:8f:36:03:2f:
3b:a2:85:9c:f1:5e:3e:5e:7d:6d:14:40:0f:38:a7:
27:6a:5a:73:77:73:4c:d2:b3:70:af:3f:0c:2a:86:
e8:90:2f:45:c6:9b:d7:af:6f:95:1b:27:ca:b5:24:
d9:aa:9a:df:a6:aa:89:1b:8e:8f:1d:1a:21:17:aa:
24:b0:69:06:de:a0:89:2c:2a:8d:2b:ca:bd:4e:20:
cd:52:27:11:35:b5:f0:9d:a7:a2:7b:2f:01:c7:1c:
0b:3b:a1:d1:f1:a2:49:19:66:c5:e2:b6:cd:49:cd:
77:41:44:a3:4e:90:70:47:ec:e7:c9:66:32:a7:88:
bd:1f:a4:b9:75:29:a9:71:76:58:96:d4:9d:6b:ed:
08:c7:59:d1:09:37:71:a6:00:28:ee:71:d6:f6:ca:
4c:02:dd:52:d7:97:9a:3f:3c:75:8d:72:e3:ce:f8:
07:2e:b2:7e:05:59:83:59:b4:52:1b:76:63:6d:da:
9d:3e:74:53:f5:30:e2:ca:64:b0:35:22:c2:e3:2c:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:8D:A1:FD:9D:FF:DE:CB:E7:0A:A7:38:87:5B:C6:8B:8D:81:8D
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:11:8f:4a:f3:65:6a:02:da:b1:0f:28:5b:8a:8f:30:5e:
ac:94:51:07:9b:0e:c6:42:3a:bc:3b:0e:80:ec:ff:d0:ff:0b:
29:f5:c4:c9:e9:60:6e:22:cc:48:dc:c1:96:b3:cb:f0:cd:d0:
2f:52:17:f9:2d:db:ff:20:7a:92:6d:21:97:4f:9a:f5:a6:74:
82:b4:72:24:72:f5:b1:e9:b1:66:b1:46:af:25:92:f4:7a:76:
c8:28:20:c4:bb:ab:c9:1b:46:24:89:db:e7:50:cb:d5:fc:c1:
cc:67:35:e7:e7:20:d3:8d:e7:e3:d0:a9:a8:42:0a:d6:7d:ca:
4a:65:34:50:6e:1e:60:fe:58:48:4a:bb:af:24:c1:cd:4d:da:
ed:eb:ed:4d:73:68:8c:8e:0f:c4:e2:bb:7e:d6:27:5a:b4:ab:
78:20:9f:88:cb:58:08:83:ef:98:48:8c:2d:45:0d:b6:38:f2:
be:35:1a:e3:26:84:9d:7a:a9:58:e2:c6:1e:0d:48:b7:58:9d:
4d:46:e8:a2:e5:a4:07:0b:cb:a4:2f:c9:7f:77:91:8a:49:b9:
15:a5:94:17:87:72:97:17:d3:aa:60:2a:7d:eb:d6:19:0c:e4:
49:75:2e:1f:70:a6:bb:58:b4:6f:4d:83:5b:fa:11:31:62:bc:
4e:a9:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:06:04 2025 by rpki-client