Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: aMScNnwfXmGNBI7TiJCNWoYzP4HNODLCjXaLHCGb+MY=
Subject key identifier: D6:BC:02:E2:A5:90:B4:5D:2D:93:D4:4D:D0:06:C6:A9:3B:18:63:24
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0196553812F7DCEEB36875E4FAF924C383E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:01:00 +0000
Manifest this update: Sun 20 Apr 2025 22:01:00 +0000
Manifest next update: Mon 21 Apr 2025 22:01:00 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: RusHeUmP/uSgFCCXViRLtL9sawMXvcNVoMMEM4nrstk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:12:f7:dc:ee:b3:68:75:e4:fa:f9:24:c3:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Apr 20 22:01:00 2025 GMT
Not After : Apr 21 22:01:00 2025 GMT
Subject: CN=d6bc02e2a590b45d2d93d44dd006c6a93b186324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:7a:a6:ec:3e:aa:2f:28:ef:54:4f:90:ee:
55:d3:25:37:cd:44:e3:5a:ee:80:dd:72:9d:04:b3:
0d:11:dd:2c:d5:bf:66:b7:d7:db:a5:d2:0e:90:ba:
af:ad:28:84:24:fe:89:46:c0:bc:a1:63:88:99:7c:
a8:97:01:25:ba:4a:32:46:af:42:21:c6:df:9a:57:
d6:cd:99:fd:dc:da:d1:83:a5:aa:5b:0c:11:a7:b2:
af:48:b5:fa:9b:81:84:8c:6d:66:b7:da:36:cf:25:
f8:2e:8e:83:30:4d:a1:65:96:59:fc:65:e8:f5:fe:
43:58:bc:6a:1e:ab:43:09:4c:70:f8:6a:df:40:88:
f8:c9:66:b5:4c:5d:02:d1:b9:11:de:32:05:0b:72:
01:d6:17:ed:15:38:94:5f:cd:72:a3:55:d4:1c:c5:
e7:78:4d:99:3c:45:84:a8:09:f3:42:53:92:e1:b2:
d0:af:6e:86:f4:fd:f4:7a:60:cc:56:95:73:71:3b:
59:f4:51:4b:71:80:0c:be:24:4a:1f:a9:ae:48:ef:
c2:a9:ba:d7:1a:fd:48:88:eb:9e:86:a1:fb:ee:91:
90:81:ff:3b:68:98:77:4b:bd:4e:13:08:33:47:3a:
12:b3:f9:7e:28:7a:9c:8b:46:53:fc:52:4f:24:e7:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:02:E2:A5:90:B4:5D:2D:93:D4:4D:D0:06:C6:A9:3B:18:63:24
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:d5:ae:c5:c7:50:cb:a2:6e:4d:5a:3c:01:87:65:8c:ad:
7b:93:97:c0:11:1d:2f:6d:a6:90:23:91:e8:d0:6e:de:19:f6:
b9:10:32:05:ee:56:54:16:22:2e:de:bf:bd:2c:ef:b2:2e:ec:
8d:bd:e1:22:d2:3c:0b:3e:3a:f1:70:31:7c:7a:55:42:1e:3a:
2f:4e:b3:45:ab:79:99:91:7d:7a:17:b8:b9:2f:df:35:b9:47:
16:ab:1c:96:d3:f1:dd:fe:45:f5:c6:8b:ce:53:af:78:b5:e8:
43:eb:46:fc:66:d9:2d:b0:fd:9e:62:65:62:a3:d9:65:3c:a3:
27:71:0d:01:09:cc:ae:39:c8:19:3b:68:c4:13:33:67:ab:c9:
25:e6:da:0e:4d:f7:5a:46:2d:80:77:41:33:72:b3:e3:1f:8b:
42:95:66:27:2a:33:a5:7a:be:f2:dc:28:a2:6f:31:20:93:f3:
2d:da:85:7d:51:0d:76:a1:3b:32:02:89:6a:97:4d:07:20:93:
62:82:24:d9:6e:23:8b:97:79:ba:03:7f:d0:1f:84:1a:64:27:
40:ba:51:22:9c:5b:60:e0:e7:06:2d:1b:aa:d4:4e:28:85:5d:
eb:20:d3:9b:d3:1f:ba:91:eb:3f:80:8a:28:4f:0c:0c:e0:39:
9c:e7:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:05 2025 by rpki-client