Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: x6btsLfC4N50DmHnLka/HZ9tbQ5qtM+s5GmarZTrOkw=
Subject key identifier: 2A:F4:11:86:48:91:84:73:06:AD:E4:1F:D9:1F:27:E3:05:E5:D5:01
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 0196B8C7CFEBFC47F0EBB31DAEFC13AD770E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 125B
Signing time: Sat 10 May 2025 06:00:24 +0000
Manifest this update: Sat 10 May 2025 06:00:24 +0000
Manifest next update: Sun 11 May 2025 06:00:24 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: +uTu84HUdIzA+kR4/cym+mUGHhBn/DUcEyj8lgSbE8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:cf:eb:fc:47:f0:eb:b3:1d:ae:fc:13:ad:77:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: May 10 06:00:24 2025 GMT
Not After : May 11 06:00:24 2025 GMT
Subject: CN=2af411864891847306ade41fd91f27e305e5d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:06:6c:ee:a1:dd:80:4e:f2:12:93:3c:5d:
3d:a6:e6:22:64:fb:97:7d:82:4d:b2:91:cb:13:dc:
39:4c:1f:c6:53:58:23:6d:a9:ab:2c:f4:82:7f:b1:
7c:c3:b7:7c:8c:75:1d:50:aa:92:a6:9a:b5:6b:92:
8e:2e:a3:4e:c4:6f:5d:8d:07:4f:bc:42:04:6f:cf:
32:ab:1a:f5:96:ec:13:48:46:7f:00:1f:13:97:46:
9c:ed:fc:68:9a:f7:c4:3b:7b:27:11:b9:6e:5f:d4:
59:61:ca:45:4c:9a:cf:56:ad:7a:8e:9d:9c:18:3e:
10:65:e0:69:ab:e7:48:ee:9f:b8:7b:4a:93:cb:90:
fc:9e:08:77:04:73:1b:95:72:a6:76:c7:0d:56:59:
0d:ad:59:02:6c:3e:d9:6d:05:a9:b7:ec:0a:26:40:
8d:9e:d8:23:6d:fd:a0:2f:40:ef:c7:26:26:94:8e:
3a:f5:38:24:19:34:d3:e4:e0:bb:90:71:de:08:bf:
74:f4:c4:8f:4a:9c:99:89:3b:a7:d1:a1:e8:35:91:
29:f0:4a:40:cf:63:5e:d0:4f:c1:65:16:31:86:e1:
aa:e3:41:b8:b0:93:f9:b8:98:06:06:66:2e:ac:fa:
21:87:e1:14:95:a3:8f:25:c2:36:1b:3e:0e:b9:e8:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:11:86:48:91:84:73:06:AD:E4:1F:D9:1F:27:E3:05:E5:D5:01
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:8b:96:c4:73:90:a0:45:c1:58:3c:40:57:fe:5f:61:3b:
e3:c1:fb:f5:35:2a:2d:d7:d8:71:57:9b:62:c6:aa:a9:11:56:
e1:95:ab:88:11:52:3a:6e:3a:13:54:04:bc:42:35:6b:e1:4f:
23:d5:62:5c:b6:ce:4d:76:e0:6e:67:ef:83:b3:74:14:0e:6f:
41:4a:0b:13:d9:bc:4c:96:3d:1f:a3:85:ed:5c:a3:5c:fd:14:
af:89:2a:79:72:ba:1d:de:12:d3:e7:18:f3:64:e2:63:0c:fb:
d0:78:32:be:68:58:cc:61:02:d6:78:b3:46:56:9e:20:b3:d7:
9b:0d:c0:ca:85:78:64:93:ff:5a:6b:8c:71:30:6d:5d:58:fe:
a4:4f:ed:f2:df:11:ae:a5:21:bc:12:ac:9d:d6:29:f5:76:f1:
15:5e:fe:66:a6:31:e2:8d:4f:2a:42:1c:a9:86:4a:99:4e:23:
33:8e:c9:73:f7:30:a5:64:89:4f:30:c5:ef:26:f3:52:4a:b6:
b3:1d:f9:f9:39:58:07:8e:05:32:c3:7c:89:a9:84:cd:62:1f:
ef:0f:35:93:31:08:0e:97:0a:06:84:86:44:7d:ec:6a:d2:45:
0b:4d:de:46:d4:59:85:cb:88:5a:26:ee:f3:4c:be:6b:aa:f7:
15:00:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:52:53 2025 by rpki-client