Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: bpiAmuGxHF2j7bqSXYmqwrCfYsU4JqXXng7Cr2pAR60=
Subject key identifier: 4E:E1:17:75:9E:8A:04:6F:5A:90:59:E8:56:76:EF:9D:F1:4B:32:17
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0196CA2976507E13605D20C15CD9EEB0DE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0D8A
Signing time: Tue 13 May 2025 15:00:37 +0000
Manifest this update: Tue 13 May 2025 15:00:37 +0000
Manifest next update: Wed 14 May 2025 15:00:37 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 1TCLM/zHFFuBop1+hRuwhjIfR1K2p20nXBZ9nUe+h0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:76:50:7e:13:60:5d:20:c1:5c:d9:ee:b0:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: May 13 15:00:37 2025 GMT
Not After : May 14 15:00:37 2025 GMT
Subject: CN=4ee117759e8a046f5a9059e85676ef9df14b3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:f4:cd:f4:2c:bf:8f:75:aa:4d:86:ad:7c:
20:6b:ee:90:fe:5a:eb:97:24:06:43:55:b1:5b:18:
e0:9e:f4:14:35:52:9f:fa:91:6f:f0:46:69:cb:34:
08:40:35:2a:82:d9:46:da:cd:57:12:4c:11:75:2f:
c8:37:5e:6c:0e:27:f9:42:db:02:7b:4d:23:11:0b:
33:ed:f1:12:5a:9c:69:ca:d4:7f:87:d8:b5:6f:c8:
6e:1d:b1:67:cc:a3:d1:83:b9:7a:7b:ee:8f:5f:e1:
9e:3e:16:d3:eb:15:8c:51:56:30:c9:37:ca:e6:28:
ab:e1:34:3d:dd:e1:0c:96:af:ee:05:f2:a2:be:7a:
8e:41:e7:d3:a6:1f:50:ba:3c:10:e1:d2:4f:6d:1a:
08:2e:f9:f3:58:44:85:3e:ce:4d:56:c8:59:7f:5b:
a0:6b:0f:4c:34:ac:66:cf:17:c8:34:d4:e9:6e:21:
44:dd:a1:cc:ff:5e:24:d4:55:ef:e8:e2:e4:12:6a:
42:0c:39:e3:c9:b2:c2:99:0b:22:73:67:19:e8:b7:
83:63:28:44:df:6e:21:8d:c6:4f:25:0e:39:dd:81:
a5:d9:ba:0e:04:05:24:d2:ec:f9:c9:bc:f0:38:e8:
53:ca:e5:50:8c:b3:2d:03:d1:1e:de:65:9e:61:0f:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:17:75:9E:8A:04:6F:5A:90:59:E8:56:76:EF:9D:F1:4B:32:17
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:fd:c7:b2:2a:1e:01:08:16:1f:54:47:98:ae:a6:dd:8d:
52:61:1c:02:75:f5:ee:14:80:56:99:de:46:4e:8d:a9:90:eb:
a8:a1:b7:43:de:03:bc:ef:94:55:5c:8f:ff:53:ec:93:2e:bc:
04:af:52:7c:aa:bf:e6:b7:f8:bb:8b:8e:00:c7:e6:2f:ab:d0:
ef:8d:3c:45:6f:26:e0:bc:b4:a6:8a:ed:e1:63:aa:36:52:6f:
f1:ff:55:58:6a:fe:53:55:9c:7d:33:43:4a:23:72:10:c5:ce:
e1:a2:7d:aa:e0:4f:78:b5:02:ab:97:57:dc:7a:eb:01:d0:59:
f4:f4:07:51:5c:84:bb:af:e0:78:08:74:0d:86:52:e0:c3:8a:
4f:91:6d:15:b9:7d:4b:af:0f:cb:7f:12:dd:55:d2:e5:09:19:
a2:81:b9:a7:47:d9:0c:b7:9b:6a:ea:1c:79:11:8e:99:52:21:
6f:00:f7:a7:e9:5a:4e:cc:5a:3a:6f:da:93:56:11:13:81:33:
0d:67:82:46:12:3f:6c:27:e6:f7:17:82:c4:bf:e0:57:c9:98:
5c:4c:f4:68:8c:1b:d2:79:5f:88:da:96:40:99:40:bf:86:e9:
b3:de:f7:f6:9f:e9:fc:ca:33:aa:74:2f:67:e2:3b:8e:5f:7e:
f7:ad:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:02:16 2025 by rpki-client