Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: 7oT6sqpu5u/RoX8G1YIsODHrkr8DB4k+UNVVW6j2SjA=
Subject key identifier: 61:83:5C:47:50:6D:7E:E2:CC:BB:8F:B7:62:25:FB:2A:CD:D2:7E:CF
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 0196598296D6E49B4DA7795243336F7F56B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 04DB
Signing time: Mon 21 Apr 2025 18:00:52 +0000
Manifest this update: Mon 21 Apr 2025 18:00:52 +0000
Manifest next update: Tue 22 Apr 2025 18:00:52 +0000
Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: x9QI4jwZdIqj+/bS6iraSJHC4RKDLBMp3WPcKI5bEIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:96:d6:e4:9b:4d:a7:79:52:43:33:6f:7f:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Apr 21 18:00:52 2025 GMT
Not After : Apr 22 18:00:52 2025 GMT
Subject: CN=61835c47506d7ee2ccbb8fb76225fb2acdd27ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:b3:d8:c0:d9:cd:32:82:ab:84:97:70:40:
c4:25:2e:60:ea:64:e9:f6:5a:5a:c6:c6:bf:30:69:
70:7b:f2:27:6d:a1:90:4c:b3:d6:e0:02:47:7e:81:
84:df:c2:8a:6a:28:a4:ab:c6:d8:72:92:71:d9:b0:
60:cb:11:9c:d6:ab:6d:ed:a3:20:cc:5b:a6:5d:b4:
14:6c:ca:49:ea:76:50:c2:34:58:90:19:44:5e:d5:
3a:1c:22:2f:30:7f:27:af:9b:c8:8f:d0:4e:4f:de:
cb:14:dc:37:ea:c1:5e:b5:4d:c1:c3:ea:76:ec:1c:
17:2d:1b:5a:cc:d9:5d:28:0f:60:c7:89:9b:76:2c:
66:b9:b5:c2:ab:97:dd:a3:fd:b0:71:8b:62:44:36:
7f:27:52:48:6d:ee:4b:45:b4:40:ba:05:9a:6c:14:
59:40:b1:9c:c1:23:85:fb:60:63:e4:fa:33:6d:c4:
85:5e:7c:14:71:10:74:6d:1c:77:32:c4:85:8a:4a:
ed:53:fe:38:50:86:f8:3a:90:39:fa:b0:29:cc:1f:
93:b3:81:b7:84:67:ca:da:82:8a:10:bf:e8:ea:a7:
da:92:11:b9:8a:26:66:54:ef:79:00:77:51:b0:c4:
93:b6:fa:9c:24:b9:0c:1d:8b:fd:5a:b3:83:16:ed:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:83:5C:47:50:6D:7E:E2:CC:BB:8F:B7:62:25:FB:2A:CD:D2:7E:CF
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:07:25:3a:f3:49:79:75:91:2a:0b:13:81:e0:12:ad:7c:
a0:ac:5e:a2:b2:83:20:38:7e:7f:d9:ea:56:56:bd:21:f2:a7:
23:35:de:e3:92:32:12:42:f4:43:c6:5c:88:a3:57:24:c6:01:
49:a9:ec:e4:37:3f:ac:22:25:61:ff:13:0b:2d:4b:25:bf:5f:
51:87:ea:45:39:08:aa:5f:0f:12:e0:e9:bc:8d:b1:b1:30:b7:
7e:a0:fe:4d:1e:b1:7a:69:b7:87:34:fd:2d:a0:02:98:67:4c:
ed:64:b3:91:99:f4:b8:96:c7:2f:cb:80:e3:cd:88:d4:93:1d:
fd:31:58:a6:08:b6:9b:b0:48:70:3e:c6:d3:23:73:36:cc:b4:
49:59:23:00:50:f5:c8:06:60:78:95:fe:1b:fb:d5:aa:00:40:
0e:c7:eb:ee:47:f4:46:14:43:09:fb:6c:43:89:9d:70:cd:82:
0f:e4:b8:9d:a5:8e:e6:73:fe:c8:cb:ba:56:d7:7f:68:d5:8d:
87:45:69:39:0d:a0:f0:a4:b8:2b:b4:4d:45:ee:2c:14:a4:f1:
4d:73:16:f7:49:4c:99:ed:7e:84:45:8c:b8:43:ef:db:3a:4f:
cf:0b:29:a8:bd:31:b2:16:8e:f6:32:de:55:9f:5c:df:44:32:
f9:9b:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:17 2025 by rpki-client