Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: zPbdb70KOc+wQPXyeyOP6zzgIAp9JImMN9Us4Xrbqvs=
Subject key identifier: F0:76:35:13:6B:A3:B3:D5:F6:93:19:59:9F:3F:ED:91:20:B7:65:07
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019654C9EF92AE34DD9252E39424418585D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 20:00:42 +0000
Manifest this update: Sun 20 Apr 2025 20:00:42 +0000
Manifest next update: Mon 21 Apr 2025 20:00:42 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 1FWpzxFf3dOdQD4+gK4dCVMURNfnFkn8jS8GOBjf8Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ef:92:ae:34:dd:92:52:e3:94:24:41:85:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Apr 20 20:00:42 2025 GMT
Not After : Apr 21 20:00:42 2025 GMT
Subject: CN=f07635136ba3b3d5f69319599f3fed9120b76507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:01:08:6f:cf:ff:3b:7e:9d:62:89:96:12:
cf:0a:4a:ac:7d:53:8a:ab:9c:8e:58:47:d4:00:4a:
73:64:ec:6a:fb:09:9c:ac:6d:64:e6:fd:c1:5c:71:
48:56:a5:b1:27:48:9c:16:c6:22:db:5e:49:dc:e1:
04:a9:4e:bd:7c:2f:c3:19:a4:6d:41:40:4f:18:5a:
09:bf:21:f4:0a:a7:75:98:1b:14:86:2b:73:c1:02:
e0:a2:0b:50:be:58:5d:90:4e:82:78:e5:7c:8e:db:
a2:89:e9:19:f9:a1:5a:e2:72:20:09:31:ab:e5:fe:
eb:48:64:80:6b:2f:bb:ae:59:67:cf:53:18:48:78:
c4:45:21:4c:0f:05:87:7e:9d:d8:a4:f9:47:0e:ec:
95:cf:31:54:f8:87:89:3e:9d:da:27:b8:e7:b9:22:
02:b1:5f:e8:5f:e4:f5:e9:60:78:69:a7:99:89:e9:
90:ce:b3:55:ed:a9:76:e6:9f:b0:94:58:fb:ad:7f:
bf:44:98:89:8b:fa:e0:88:1d:17:ba:a1:6b:da:2b:
8f:55:34:8c:5f:b1:35:a7:27:41:ee:ab:bf:fc:ac:
6b:19:f9:7f:dd:db:ca:0a:4b:e5:a4:29:cb:f1:9d:
fc:57:46:7f:c0:57:55:a9:9f:bd:43:12:2b:e6:c2:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:35:13:6B:A3:B3:D5:F6:93:19:59:9F:3F:ED:91:20:B7:65:07
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:85:ae:ac:b4:67:ca:75:9b:87:7f:a1:aa:b8:aa:65:f3:
12:04:76:a8:c7:0e:c5:1f:b2:0a:2a:61:f3:71:1c:03:ad:45:
06:8d:92:4f:36:5c:3a:19:41:c4:4e:9c:e7:d4:2b:6c:ad:c9:
07:65:3d:49:a6:be:ef:12:a4:84:e0:bd:0f:d7:49:a9:ef:ef:
dd:f1:86:ed:bc:65:e3:79:47:88:f1:45:74:d0:d2:0d:dc:33:
fc:d8:bf:8f:6a:c1:eb:47:ad:b7:3f:e0:0e:d2:b9:07:12:47:
17:10:8d:6f:c0:41:4c:bc:b0:6c:d8:1e:72:1a:4b:ee:20:88:
94:64:1b:ff:be:1b:52:e6:1a:00:b6:fc:20:02:c5:62:3f:66:
a1:e8:f8:0c:9c:52:14:2f:35:b0:08:82:25:0f:57:08:9a:59:
08:44:14:e2:08:6b:00:27:9c:24:48:4c:85:61:c0:0f:99:ce:
81:55:5d:51:24:7d:7a:10:ad:c7:47:ea:2c:9a:c3:5d:f6:13:
49:32:15:d9:c7:8e:fd:a2:45:73:69:8c:f8:1b:42:ff:e1:cd:
f7:bf:64:0b:3a:fd:83:9d:59:31:7e:23:cf:46:5a:66:b0:1e:
e7:71:ff:41:6c:a6:3d:0d:0a:61:6d:fa:6a:a2:0f:c5:e7:de:
5c:54:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:46 2025 by rpki-client