Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: gYWJpNGlAAN5dNQXOEBkIXiTXDc3iEjD7nIufqkX5jA=
Subject key identifier: 38:81:42:BB:07:AB:30:52:17:46:89:8A:B0:3D:0F:86:71:76:90:58
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0196C6BA953B0A1D8BAB35E362F2CFD3C266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 11B3
Signing time: Mon 12 May 2025 23:00:38 +0000
Manifest this update: Mon 12 May 2025 23:00:38 +0000
Manifest next update: Tue 13 May 2025 23:00:38 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: asecgvNs5xwfsgaWbMyJ7fmk1X9lMonbL+5KjwJNJss=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:95:3b:0a:1d:8b:ab:35:e3:62:f2:cf:d3:c2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: May 12 23:00:38 2025 GMT
Not After : May 13 23:00:38 2025 GMT
Subject: CN=388142bb07ab30521746898ab03d0f8671769058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:d4:59:a0:bb:35:c8:f2:52:4d:53:07:d3:
bf:9f:ea:da:46:b4:b4:d1:c1:ed:70:27:92:0a:0b:
8b:7e:28:7c:37:0c:1b:5c:06:07:3e:c9:df:ab:d7:
67:07:a8:2c:f4:10:6d:be:68:8b:21:0b:3a:21:7a:
b3:5b:9a:7f:f9:aa:07:8c:67:37:35:5e:fc:68:6c:
7f:35:b2:c9:0d:bf:12:ed:63:94:b9:a4:13:f0:c3:
34:73:90:03:f7:8d:21:26:cd:18:84:43:d0:9f:28:
3f:f2:20:8f:90:77:cc:7e:30:54:e9:c9:18:2d:33:
e3:b3:82:11:22:88:86:02:be:00:a3:af:df:f8:18:
f6:73:52:b1:91:c4:be:d2:27:92:14:8e:f6:f3:b1:
1f:6e:18:5d:77:db:e1:cf:82:e4:29:b2:2d:9a:3c:
9d:d1:59:9a:a4:a4:38:8b:58:eb:93:13:4e:51:95:
d2:04:cc:3c:53:ed:3b:71:1b:94:05:e8:1b:18:83:
62:92:e5:58:12:ff:15:d0:df:97:32:cb:a3:ae:f6:
e9:11:8d:45:9e:dd:88:2e:96:b6:a0:ed:e3:04:5f:
77:99:ca:b4:36:de:06:3c:04:90:68:db:58:f3:18:
2e:83:18:fd:eb:46:f3:7c:36:cc:7e:48:b6:ed:62:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:42:BB:07:AB:30:52:17:46:89:8A:B0:3D:0F:86:71:76:90:58
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c6:c4:cb:e4:ac:38:b2:0b:1e:18:94:aa:d7:a8:28:2f:36:
a3:a4:d2:1d:6c:77:b5:b7:9f:d9:74:85:25:1a:8a:4e:6f:39:
22:78:99:d9:01:d8:89:ba:e1:4e:31:68:4f:c5:cf:83:db:cd:
b2:e0:f2:3d:36:f4:2e:b9:f1:f2:38:86:7e:a4:d5:a2:da:37:
2b:35:9d:e8:3c:73:0f:a0:f4:c4:e8:dc:da:d6:ae:17:fd:07:
ff:e5:1c:99:c4:4f:f8:98:0a:26:3e:92:0b:a4:48:9c:a9:6f:
ce:e6:be:9d:81:ee:7b:63:23:a3:95:5d:de:01:0c:ed:10:e5:
e1:c9:ab:0f:17:75:cc:af:ab:f3:03:ee:6f:8c:f5:c8:ab:d1:
ee:f6:99:5b:6c:f7:40:35:f4:2b:8a:8b:e1:bb:0f:17:ef:88:
31:99:4b:44:c3:84:dc:b7:86:c9:87:72:2b:47:6c:a7:68:d4:
03:7e:f4:8a:5f:7d:73:d2:f4:6a:3e:03:3d:d2:41:c2:a9:84:
dd:9d:2b:6c:f3:87:b0:89:a3:99:28:5a:e1:67:df:af:0b:4b:
80:6a:21:8d:cf:1a:12:a1:c3:d4:93:81:bf:04:70:da:bc:fc:
e0:d3:27:89:e9:96:50:a2:c3:e1:7f:8a:e1:72:91:c2:3d:03:
e5:2b:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:14:31 2025 by rpki-client