Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: RHEX66zNRrgYJccODdL+W1UOwXxlPHlAgtt1sA2iv6s=
Subject key identifier: E4:D8:FB:24:BB:49:00:E2:75:DF:22:80:6D:D7:77:60:AD:85:A5:A5
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 0196146B7C080C2EA2A027A8EADE6FAEC055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1121
Signing time: Tue 08 Apr 2025 08:01:50 +0000
Manifest this update: Tue 08 Apr 2025 08:01:50 +0000
Manifest next update: Wed 09 Apr 2025 08:01:50 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: oNnj9hvJE3YBuCcNavy8K4dEzQapOlpeyfMsL57Ak0s=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:7c:08:0c:2e:a2:a0:27:a8:ea:de:6f:ae:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Apr 8 08:01:50 2025 GMT
Not After : Apr 9 08:01:50 2025 GMT
Subject: CN=e4d8fb24bb4900e275df22806dd77760ad85a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:de:56:84:52:5c:ee:7f:e2:5e:8a:a1:76:
e4:19:38:d8:a5:cc:74:59:0f:0b:a5:91:38:64:76:
15:ed:a2:c4:61:f4:7c:51:74:a2:95:39:57:be:e2:
81:26:71:07:cb:9e:ab:c9:2d:07:7c:cc:f7:9f:33:
c5:35:69:8c:35:21:9e:1d:0e:e1:96:29:5e:de:4e:
9e:05:c0:92:6e:e9:1a:53:ae:59:05:83:b2:e4:82:
ee:1e:94:3d:16:7c:9d:07:2e:19:3e:e4:9a:c3:b0:
87:1d:5c:11:70:38:a0:2a:6a:45:57:26:2b:af:c8:
70:4f:90:8f:16:d2:4c:4e:ec:2e:ba:37:e7:c0:2b:
7f:83:5a:c2:72:e3:6a:19:d9:2e:86:56:9b:83:fa:
4b:fa:84:f9:c8:b9:df:f6:78:fe:b2:88:70:a7:87:
75:7f:f3:55:6a:56:df:15:85:15:af:db:73:5b:d5:
09:22:87:56:a8:1f:12:6b:a3:d8:8c:b1:ea:4a:17:
26:b3:f6:9d:32:48:cc:9d:09:77:22:bf:cf:50:8b:
9e:5a:23:7e:0d:04:3e:99:2d:30:5f:8b:79:94:97:
06:c1:68:65:f9:11:3a:11:b7:33:46:33:81:2f:74:
08:38:c6:ab:b1:00:42:5c:cb:21:a2:55:53:66:1f:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:FB:24:BB:49:00:E2:75:DF:22:80:6D:D7:77:60:AD:85:A5:A5
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:16:8e:29:be:c4:9e:0b:a6:60:d3:b4:c6:ee:9e:0a:2b:a2:
ab:97:41:a1:da:f4:9e:35:32:e7:9f:fa:68:aa:e1:e7:b7:f2:
b3:51:c0:9b:fb:79:77:35:e3:62:8d:f4:bd:e6:4e:6e:4a:99:
3c:52:c6:19:88:0d:40:27:15:fe:c8:81:24:45:61:c0:66:48:
40:de:d7:c6:05:a5:d8:ca:b0:7e:83:74:ef:0d:b6:7d:30:0d:
2a:3f:cc:21:b2:68:2c:1f:3d:05:c0:30:aa:f9:cd:a4:44:a0:
e7:ff:94:72:b6:33:5c:57:05:99:53:99:d3:f5:91:fc:49:e1:
67:23:9f:9f:38:1c:bd:ac:bb:2c:e4:88:e0:12:80:5d:21:f0:
46:50:23:5a:3a:93:ca:ad:bd:4a:1e:66:ef:95:f7:6d:dc:3f:
67:e2:26:d3:73:51:98:bc:64:b5:6d:fa:03:b1:c9:24:45:d3:
a1:18:eb:18:ff:13:30:d3:e0:2f:fa:45:b8:f8:3f:64:c1:ec:
b4:8b:ba:e8:0e:09:b8:a7:22:08:cb:16:20:c5:6a:81:23:a6:
84:f4:c5:3d:ed:2c:f2:cd:ee:95:00:f5:c4:b2:07:be:9a:90:
2f:b8:f1:49:ab:62:ff:6a:0b:e8:b0:53:09:b4:81:5b:22:99:
c3:35:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:54 2025 by rpki-client