Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 1f3h87e3cbbTgUP9nemho3BJW4I0RhfC4Nve/a0LwXM=
Subject key identifier: 9A:5E:6F:3E:CE:E8:C4:23:66:C0:2D:92:74:81:E6:94:CD:C6:0A:0B
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 0196B3340D6058C96EA69ACCA641C5BAB38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0C14
Signing time: Fri 09 May 2025 04:00:55 +0000
Manifest this update: Fri 09 May 2025 04:00:55 +0000
Manifest next update: Sat 10 May 2025 04:00:55 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 4T4uFOqplJEJGNt6mvXxXCMjrgJwVHkF9wN1el2JI6A=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:34:0d:60:58:c9:6e:a6:9a:cc:a6:41:c5:ba:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: May 9 04:00:55 2025 GMT
Not After : May 10 04:00:55 2025 GMT
Subject: CN=9a5e6f3ecee8c42366c02d927481e694cdc60a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:bb:cf:49:e3:c8:18:63:b8:87:db:b4:2f:
53:42:fd:07:69:5f:e8:d4:1e:78:17:c5:08:45:de:
fb:f7:0a:00:e8:48:8e:0e:90:86:d2:df:4d:e2:87:
a7:f0:56:a9:5d:cb:04:cb:5b:b2:50:40:fd:47:03:
34:41:53:2e:a3:46:2e:c5:cb:ca:7e:d3:71:4d:4b:
58:9b:26:d0:60:98:1a:05:dc:c5:e3:27:ff:97:f7:
32:3f:b4:c3:82:67:bc:d1:59:76:0e:c1:c0:6f:34:
a2:78:1d:96:18:fc:f0:81:6c:b2:0b:cd:aa:06:c8:
02:7e:4a:61:5b:73:60:03:65:1c:90:d1:eb:b6:96:
8a:e7:e4:b8:d8:19:fe:7d:42:dd:a5:aa:2b:cd:fb:
74:60:59:c8:f1:e3:e2:bf:27:24:cb:ad:32:52:7d:
bf:7c:26:5c:0f:43:69:89:0c:f1:e1:a2:b5:cd:df:
55:19:55:f8:89:75:43:91:cd:3e:08:4a:13:12:60:
1e:2a:10:f8:5b:00:0c:9b:8b:2b:56:5e:32:8a:c7:
48:35:c0:87:75:f8:d0:17:f6:32:ee:72:f1:48:26:
5c:d0:70:2b:88:4d:4d:8b:bf:64:21:51:1f:ff:31:
70:31:75:1b:f9:28:61:bd:f6:d7:2f:24:95:68:05:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:6F:3E:CE:E8:C4:23:66:C0:2D:92:74:81:E6:94:CD:C6:0A:0B
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:83:2b:2a:ab:61:23:90:40:37:59:a5:1b:4a:32:18:81:
4c:bc:21:42:6c:87:8a:05:8a:5e:59:24:6a:eb:4e:07:27:1e:
33:67:ad:5e:57:6f:15:40:17:98:a5:27:bd:c2:dd:74:d3:95:
0f:6d:44:3a:a5:f0:ea:94:08:16:0c:8e:58:8d:19:d4:d0:d6:
f2:bf:b1:b7:95:b4:09:ef:53:09:17:42:f6:41:33:64:fc:78:
f5:7c:8e:2d:b5:f6:13:d3:f4:42:72:42:e5:7c:3d:ce:af:0b:
51:6f:b9:34:da:a1:f2:fa:8b:94:34:2f:d2:f9:2c:e0:2d:5c:
24:39:f4:4f:91:0a:08:48:cc:5a:a2:dc:f4:0c:c6:21:cf:29:
09:c0:d9:48:70:68:42:d5:54:cc:69:52:d8:24:e8:9b:3e:f3:
c5:68:cd:bf:05:29:01:a6:0d:d0:b1:8d:c8:ca:10:3d:1b:da:
d7:27:64:a5:d0:61:a0:a5:59:68:7a:f2:79:aa:ad:36:75:cd:
c6:82:81:11:8a:e4:90:a5:c7:eb:9c:44:ad:14:b1:40:a6:20:
bb:88:0d:15:54:70:f1:ea:8e:70:94:8a:24:3e:72:33:5e:0e:
88:43:0e:fb:08:0a:90:95:15:db:77:2f:7b:ad:1a:4c:fb:27:
4d:0c:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:11:53 2025 by rpki-client