Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier: HfgUjc2AkRF2vyupuZwHdm9+hhavjfc4lyB1qiNWdDI=
Subject key identifier: 2E:8B:6A:0E:1A:54:63:14:8D:71:61:0C:61:4D:C8:5A:83:C8:88:79
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 0196A051EB236615125F47C908B929466190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 12:00:45 +0000
Manifest this update: Mon 05 May 2025 12:00:45 +0000
Manifest next update: Tue 06 May 2025 12:00:45 +0000
Files and hashes: 1: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: IxbzlYU6p8XwgPtMpaGAR/cKZ4aV3qMOq8wxQxjwESE=)
2: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (hash: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:eb:23:66:15:12:5f:47:c9:08:b9:29:46:61:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: May 5 12:00:45 2025 GMT
Not After : May 6 12:00:45 2025 GMT
Subject: CN=2e8b6a0e1a5463148d71610c614dc85a83c88879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:3b:86:56:b7:77:43:92:d4:69:05:8f:16:
14:b3:72:38:7a:78:7c:c5:1d:04:ce:d9:7e:cf:45:
91:af:cb:64:d2:c9:b4:4c:93:26:b2:07:68:9f:35:
3d:41:a3:a8:f8:b6:be:b5:1a:5c:bf:58:93:5c:77:
d2:7d:09:35:cd:08:80:eb:fd:0f:b3:2f:53:e0:0c:
22:65:f3:49:1f:8e:6d:48:2f:be:fa:e0:25:d8:0f:
d4:c7:d2:44:59:93:86:9c:ec:da:13:fa:2d:98:2c:
d3:88:0f:e4:7a:84:ef:85:0c:6c:b7:4b:9f:ee:09:
7e:32:e3:40:09:cb:3b:d6:16:45:97:91:3d:1e:04:
b5:8a:9b:a6:ce:c5:0f:b7:7e:14:8b:0f:db:7c:38:
41:81:da:37:58:d1:51:9b:56:7f:11:37:a4:3e:21:
7f:50:1f:e3:ae:a4:11:21:8a:c1:97:92:8e:be:52:
b6:77:80:41:9e:0d:01:50:ca:7e:04:db:1a:d5:51:
e3:91:0f:e9:db:0b:aa:20:20:72:ea:63:28:1b:37:
5f:94:46:85:0a:44:b4:bc:3e:bb:f5:1c:e5:d7:9e:
42:a0:95:5b:76:99:f8:35:20:84:84:3c:27:08:df:
25:91:fb:75:ad:9e:59:4b:3b:d1:73:e0:62:79:32:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:6A:0E:1A:54:63:14:8D:71:61:0C:61:4D:C8:5A:83:C8:88:79
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:b1:a0:7d:e0:e3:60:c7:04:bc:db:89:5a:d4:ec:c0:4c:
a3:17:0c:48:86:1e:83:a0:f7:5e:9a:f0:e3:42:b5:02:09:d3:
ed:49:2f:7d:7c:ec:93:4b:e7:a7:20:a6:d0:a0:8a:63:fc:2a:
bc:29:02:58:21:06:1d:49:46:73:51:8b:c2:af:7f:b6:34:13:
40:89:3e:e0:66:65:94:7b:45:fb:e7:4b:88:25:aa:6e:3e:22:
bb:b7:06:4f:33:cc:1f:5c:7b:f1:34:03:d0:ee:16:04:23:f7:
e7:ce:7b:16:e0:7d:0e:1b:b2:e0:4d:22:12:1e:59:25:47:37:
dd:d8:3e:3a:a0:96:c9:80:1a:78:30:03:ab:19:62:66:db:a5:
be:33:79:36:05:af:82:59:da:8d:38:5f:a2:44:19:e1:69:e8:
2f:dc:31:df:ba:d3:18:58:cf:82:30:29:82:42:e5:fe:b7:da:
05:82:ff:4e:3e:0f:9a:0e:83:85:c8:2d:b2:fc:80:e8:76:a6:
b1:3a:e5:f1:f6:5f:40:66:6e:6d:e8:cb:4c:59:d0:ec:0f:bc:
b9:f2:da:52:49:2c:ac:97:15:ba:70:39:8a:0a:35:a7:83:3c:
91:00:52:a3:f4:8b:e5:4e:ea:04:75:bb:a4:eb:ea:aa:0d:f8:
aa:f0:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:03:10 2025 by rpki-client