Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: EBjsqW4+s5KwBetFVFL9eunPyJzwcILvTc6bv6Nwyao=
Subject key identifier: 4D:FE:4C:93:B1:17:5D:88:F6:ED:72:FF:F2:8B:06:BB:70:E3:C8:EB
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0196A38A2630F9A9A52FAAEC1426DF82F581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0AB0
Signing time: Tue 06 May 2025 03:01:02 +0000
Manifest this update: Tue 06 May 2025 03:01:02 +0000
Manifest next update: Wed 07 May 2025 03:01:02 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: fvXf9+v4esB17m/+Z02MykdYCPqnepe6DdIe6v5ojes=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:26:30:f9:a9:a5:2f:aa:ec:14:26:df:82:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: May 6 03:01:02 2025 GMT
Not After : May 7 03:01:02 2025 GMT
Subject: CN=4dfe4c93b1175d88f6ed72fff28b06bb70e3c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:41:75:95:fc:2a:09:07:31:cc:1d:04:25:
ad:0d:75:11:f8:c2:3a:74:8a:69:0c:d7:ba:b8:63:
82:55:26:1d:28:ff:3b:6f:f7:fb:44:fd:fa:53:40:
ad:27:83:e6:f6:f4:5f:45:6b:62:b2:ad:b3:31:0a:
60:bf:b1:50:78:54:bf:b3:05:5d:7f:88:80:25:d6:
3d:9e:09:1f:6a:d8:ca:07:bb:74:68:0e:f4:47:62:
76:b1:88:54:96:ec:28:21:ca:ff:f3:9a:eb:65:11:
fd:cd:3e:4c:47:46:4a:1c:24:fb:be:67:07:98:df:
c2:a0:c6:0e:6d:d4:d8:b6:46:ac:5a:f3:a8:78:45:
d1:ad:a3:38:a1:26:a8:9f:fc:16:15:90:f7:d7:35:
e4:64:42:ce:76:63:52:b3:f6:70:55:ea:81:81:f3:
5f:9e:02:c8:ab:ae:12:9b:b2:c5:f9:76:47:54:6f:
48:db:b9:89:bc:e9:b9:a9:b9:e9:74:92:e8:60:6b:
96:07:cc:6d:36:0c:f0:db:98:90:0f:a0:6d:fe:fb:
7a:bf:95:3a:fd:3e:09:0f:5e:79:c8:1b:00:1a:ca:
a6:6a:a3:33:d1:e4:ae:da:11:aa:58:21:8c:99:01:
c0:57:3b:11:cf:9d:ff:5d:93:4c:ea:76:33:af:1a:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:4C:93:B1:17:5D:88:F6:ED:72:FF:F2:8B:06:BB:70:E3:C8:EB
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:83:35:cc:5b:af:6f:8c:a9:05:db:1e:8d:01:22:d6:ce:c2:
69:37:0e:70:1f:ee:f2:ba:5f:32:1c:cf:46:50:1e:5a:e1:49:
8c:7f:d5:6b:48:9a:db:c5:2b:a0:0c:ba:56:d2:ba:7d:7b:b2:
04:59:6e:bc:b5:d2:7e:77:e6:9b:c3:38:89:f3:a9:4e:a9:c3:
f8:ea:9f:ba:6c:c0:e0:07:2f:b4:0f:a3:c6:9b:1b:d9:3e:72:
ef:c5:e7:b5:7e:2b:2c:76:e4:b1:9d:71:58:3b:2c:11:f8:0a:
67:02:3f:ad:7e:f8:7c:c1:84:4c:3b:e0:6e:00:99:9c:9c:54:
e6:78:66:8b:06:46:8c:8f:1a:8f:29:a9:cd:08:7d:d9:55:f0:
70:bc:48:f2:ac:dd:af:50:55:fa:cc:ef:f2:21:50:3f:0d:70:
b2:0f:62:0b:6e:55:6b:86:91:88:fd:07:bb:aa:58:01:56:f8:
d2:d1:0e:ea:06:a0:62:d4:14:17:f5:48:28:36:21:dd:6b:89:
d3:9b:a0:d3:9a:ce:6c:74:5f:9e:91:fc:75:1a:fd:d3:77:7c:
e6:a3:e9:de:db:0c:c2:64:09:0d:dc:6e:b9:0d:15:d5:db:6d:
7c:28:e4:7a:db:79:d6:38:65:0e:ca:e5:87:da:ac:c3:53:ca:
09:01:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:20:59 2025 by rpki-client